Loading threats
Represents a SIP Call-ID composed of a millisecond-resolution timestamp and a secondary numeric identifier, followed by a non-qualified local domain (e.g. @local). This Call-ID format is commonly generated by custom or automated SIP tooling rather than standard SIP user agents, and is frequently observed in scanning, enumeration, or fraud-related activity. The use of a placeholder local domain indicates the Call-ID was generated without regard for SIP domain correctness, a pattern typical of bots or lightweight SIP libraries.
| IP Address | Risk | Events | Sessions | Country | ASN | Last Seen |
|---|---|---|---|---|---|---|
| 138.68.185.26 | 96% | 316,631 | 54,390 | 🇬🇧 GB | AS14061 | 2026-03-07 |