Looking up IP
Check an IP Address, Domain Name, Subnet, or ASN
80.76.42.17 has a threat confidence score of 73%. This IP address from Russia (AS212913, FOP Hornostay Mykhaylo Ivanovych) has been observed in 33 honeypot sessions targeting SIP, HTTP, HTTPS protocols. First observed on February 21, 2026, most recently active March 2, 2026.
Represents an automated SIP INVITE request likely generated by a scanner or bot rather than a legitimate user agent. The behavior is inferred from a combination of a numeric-only SIP Call-ID format and a direct INVITE to a long numeric target without prior registration or dialog context. This pattern is commonly associated with SIP service probing, extension discovery, or early-stage toll-fraud reconnaissance. This behavior indicates reconnaissance activity against a SIP service but does not, by itself, confirm successful call setup or financial abuse.
Identifies HTTP requests targeting the web server root path ("/"), typically used for initial service discovery, host validation, or baseline content inspection prior to deeper enumeration.
Identifies HTTPS requests targeting the web server root path ("/"), typically used for initial service discovery, host validation, or baseline content inspection prior to deeper enumeration