Threat Level: green Handler on Duty: Jan Kopriva

SANS ISC: Port 5060 (tcp/udp) Attack Activity Port 5060 (tcp/udp) Attack Activity


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
Loading...
[get complete service list]
Port Information
Protocol Service Name
tcp sip SIP
udp sip SIP
Top IPs Scanning
TodayYesterday
185.53.88.101 (458)37.49.230.48 (14275)
185.53.88.78 (441)37.49.231.126 (1781)
172.104.113.6 (392)172.104.113.6 (1757)
74.63.227.26 (276)77.247.109.82 (1720)
146.88.240.4 (275)185.53.88.78 (1686)
185.53.88.10 (274)77.247.108.91 (1248)
77.247.109.82 (177)185.53.88.98 (920)
77.247.108.91 (175)74.63.227.26 (736)
89.248.168.202 (140)83.97.20.46 (576)
45.143.221.27 (126)77.247.110.58 (548)
Port diary mentions
URL
Is it a SIP Recon scan or something else
Canada Calling
Targeting VoIP: Increase in SIP Connections on UDP port 5060
User Comments
Submitted By Date
Comment
Lou 2011-09-05 07:43:23
Have been getting constant registration attempts to my asterisk server from 190.128.229.122 since 1-sep-2011. Address has been blocked on my firewall but attempts have not stopped.
2011-04-20 14:01:30
Recevied lot of asterisk attacks
Taneli Otala 2008-12-11 01:19:00
In the last few weeks, I've seen a number of attacks using my asterisk server to phish and phone-spam all over the US
2004-09-09 06:58:46
Used by SIP VOIP phones, X-ten Lite/Pro for instance. Thus VOIP providers, such as addavoice.com use this.
Brett 2004-07-14 00:35:50
This is one of the ports Vonage uses to connect to the Analog Telephone Device that they provide. Other ports are UDP 5060-5061 and UDP 10000-20000
Add a comment
CVE Links
CVE # Description