Port 5060 (SIP)
HoneyLabs honeypots recorded 1,480 probes against destination port 5060 (SIP) from 261 distinct source IP addresses in the last 7 days.
First observed 2026-11-08 08:50, most recently 2026-11-15 07:58 (UTC).
What the sensors show
The sources sat in 33 networks across 23 countries. No single address sent more than 14% of them. The largest source network was AS135377 (UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED), with 20% of the probes from 66 addresses. 15 of the 25 busiest addresses are recognised research scanners.
Most active source addresses
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 179.43.153.250 | 210 | Private Layer INC | CH |
| 89.248.171.24 | 100 | IP Volume inc | NL |
| 93.174.93.12 | 71 | IP Volume inc | NL |
| 164.106.158.22 | 62 | Virginia Community College System | US |
| 164.106.158.15 | 58 | Virginia Community College System | US |
| 186.179.63.235 | 56 | Corporacion Dana S.A. | US |
| 80.82.77.202 | 44 | IP Volume inc | NL |
| 66.132.195.79 | 20 | Censys, Inc. | US |
Networks it comes from
| ASN | Organisation | Probes | Source IPs |
|---|---|---|---|
| AS135377 | UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED | 293 | 66 |
| AS202425 | IP Volume inc | 233 | 4 |
| AS51852 | Private Layer INC | 210 | 1 |
| AS398324 | Censys, Inc. | 129 | 14 |
| AS22845 | Virginia Community College System | 120 | 2 |
| AS398705 | Censys, Inc. | 70 | 5 |
Where it comes from
| Country | Probes |
|---|---|
| United States | 578 |
| The Netherlands | 243 |
| Switzerland | 210 |
| Hong Kong | 133 |
| Germany | 73 |
| Belgium | 52 |
Client strings seen on this port
| User agent | Probes |
|---|---|
| Python/3.10 aiohttp/3.8.4 | 233 |
| Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/) | 116 |
| Go-http-client/1.1 | 96 |
| curl/7.29.0 | 82 |
| visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36 | 50 |
Port report
Port report
Loading