Loading threats
Represents a SIP REGISTER request sent to a SIP server, indicating an attempt by a client to register a user agent and associate a SIP identity with a contact address. This primitive is commonly used for service discovery, credential brute-forcing, account enumeration, or establishing a foothold for subsequent SIP-based attacks such as call fraud or proxy abuse.
| IP Address | Risk | Events | Sessions | Country | ASN | Last Seen |
|---|---|---|---|---|---|---|
| 138.68.185.26 | 96% | 316,631 | 54,390 | 🇬🇧 GB | AS14061 | 2026-03-07 |
| 94.23.150.225 | 100% | 225,598 | 79,477 | 🇳🇱 NL | AS16276 | 2026-04-29 |
| 5.135.106.93 | 100% | 167,654 | 167,590 | 🇫🇷 FR | AS16276 | 2026-04-29 |
| 185.150.190.238 | 98% | 101,766 | 29,132 | 🇺🇸 US | AS23470 | 2026-02-19 |
| 209.222.101.54 | 99% | 68,866 | 68,866 | 🇺🇸 US | AS23470 | 2026-04-29 |
| 5.39.101.60 | 100% | 67,601 | 67,599 | 🇫🇷 FR | AS16276 | 2026-04-29 |
| 54.38.94.109 | 100% | 64,197 | 64,194 | 🇫🇷 FR | AS16276 | 2026-04-30 |
| 172.110.223.95 | 90% | 45,413 | 45,413 | 🇵🇭 PH | AS47154 | 2026-04-10 |
| 64.95.96.70 | 98% | 44,699 | 40,448 | 🇳🇱 NL | AS32475 | 2026-03-03 |
| 5.39.11.101 | 95% | 42,586 | 12,163 | 🇫🇷 FR | AS16276 | 2026-02-19 |
| 185.243.5.46 | 100% | 38,335 | 30,578 | 🇭🇰 HK | AS23470 | 2026-04-17 |
| 172.110.223.64 | 98% | 38,129 | 38,129 | 🇵🇭 PH | AS47154 | 2026-04-18 |
| 104.194.158.45 | 96% | 35,159 | 35,149 | 🇩🇪 DE | AS14956 | 2026-03-31 |
| 104.243.45.175 | 100% | 33,143 | 17,359 | 🇺🇸 US | AS23470 | 2026-02-19 |
| 51.91.177.11 | 100% | 27,492 | 10,973 | 🇫🇷 FR | AS16276 | 2026-04-27 |
| 173.212.244.151 | 100% | 26,326 | 26,326 | 🇫🇷 FR | AS51167 | 2026-04-12 |
| 15.204.144.239 | 99% | 26,230 | 26,199 | 🇺🇸 US | AS16276 | 2026-03-12 |
| 54.38.60.112 | 100% | 25,656 | 22,699 | 🇫🇷 FR | AS16276 | 2026-04-29 |
| 193.181.41.14 | 99% | 24,418 | 24,418 | 🇬🇧 GB | AS1299 | 2026-03-28 |
| 185.128.227.53 | 100% | 23,171 | 23,156 | 🇲🇾 MY | AS206216 | 2026-04-23 |