Loading threats
Represents a SIP REGISTER request sent to a SIP server, indicating an attempt by a client to register a user agent and associate a SIP identity with a contact address. This primitive is commonly used for service discovery, credential brute-forcing, account enumeration, or establishing a foothold for subsequent SIP-based attacks such as call fraud or proxy abuse.
| IP Address | Risk | Events | Sessions | Country | ASN | Last Seen |
|---|---|---|---|---|---|---|
| 138.68.185.26 | 97% | 316,629 | 54,388 | 🇬🇧 GB | AS14061 | 2026-02-12 |
| 103.195.101.98 | 100% | 301,679 | 125,461 | 🇺🇸 US | AS23470 | 2026-02-20 |
| 94.23.150.225 | 100% | 215,305 | 69,184 | 🇳🇱 NL | AS16276 | 2026-03-02 |
| 43.225.196.98 | 100% | 186,660 | 44,423 | 🇭🇰 HK | AS963 | 2026-03-02 |
| 5.196.184.10 | 96% | 132,075 | 29,508 | 🇫🇷 FR | AS16276 | 2026-02-17 |
| 185.150.190.238 | 100% | 101,766 | 29,132 | 🇺🇸 US | AS23470 | 2026-02-19 |
| 37.59.148.111 | 96% | 86,321 | 18,768 | 🇫🇷 FR | AS16276 | 2026-02-14 |
| 51.222.38.229 | 97% | 81,649 | 11,353 | 🇨🇦 CA | AS16276 | 2026-02-01 |
| 5.135.106.93 | 100% | 68,840 | 68,783 | 🇫🇷 FR | AS16276 | 2026-02-24 |
| 45.141.215.121 | 99% | 61,599 | 24,469 | 🇵🇱 PL | AS210558 | 2026-02-15 |
| 5.39.12.56 | 98% | 60,347 | 17,299 | 🇫🇷 FR | AS16276 | 2026-02-16 |
| 166.88.114.108 | 99% | 58,413 | 16,726 | 🇺🇸 US | AS149440 | 2026-02-12 |
| 104.243.45.20 | 100% | 43,816 | 43,079 | 🇺🇸 US | AS23470 | 2026-03-01 |
| 5.39.11.101 | 95% | 42,586 | 12,163 | 🇫🇷 FR | AS16276 | 2026-02-19 |
| 96.44.159.197 | 100% | 40,231 | 18,243 | 🇨🇦 CA | AS36352 | 2026-03-02 |
| 64.95.96.70 | 98% | 40,108 | 35,857 | 🇳🇱 NL | AS32475 | 2026-03-02 |
| 209.222.101.54 | 100% | 33,892 | 33,892 | 🇺🇸 US | AS23470 | 2026-03-02 |
| 104.243.45.175 | 100% | 33,143 | 17,359 | 🇺🇸 US | AS23470 | 2026-02-19 |
| 172.110.223.4 | 98% | 32,741 | 5,494 | 🇭🇰 HK | AS23470 | 2026-02-09 |
| 223.165.6.138 | 99% | 32,089 | 9,468 | 🇺🇸 US | AS149440 | 2026-02-12 |