# DataPlane.org - for operators, by operators # sipinvitation # 2019-08-17 00:00 - 2019-08-24 00:00 # # The sipinvitation report is free for non-commercial use ONLY. If you # wish to discuss commercial use of this service, please contact us at # info@dataplane.org. Redistribution of the sipinvitation report in # whole or in part without the express permission of DataPlane is # expressly prohibited. # # This report is made possible through the generous support of people # like you. Sensor, processing and distribution systems require # non-free resources to setup and maintain. We are always looking for # financial contributions to help pay the bills and hosting to increase # visibility. If you find what we do useful, please consider supporting # us. # # This report is informational. It is not a block list, but some may # choose to use it to actively protect their networks and systems. The # report is provided on an as-is basis with no expressed warranty or # guarantee of accuracy. Use of this data is at your own risk. If you # have questions about this report do not hesitate to contact us. # # Entries below consist of fields with identifying characteristics of a # a source IP address that has been seen initiating a SIP INVITE # operation to a remote host. This report lists hosts that are # suspicious of more than just port scanning. These hosts may be SIP # client cataloging or conducting various forms of telephony abuse. # Each entry is sorted according to a route origination ASN. An entry # for the IP address may be listed more than once if there are multiple # origin AS (MOAS) announcements for the covering prefix. We use the # Team Cymru IP address to ASN mapping service to construct an origin AS # number and name. For details about this Team Cymru service, see: # # . # # The report format is as follows: # # ASN | ASname | saddr | utc | category # # Each field is described below. Please note any special formatting # rules to aid in processing this file with automated tools and scripts. # Blank lines may be present to improve the visual display of this file. # Lines beginning with a hash ('#') character are comment lines. All # other lines are report entries. Each field is separated by a pipe # symbol ('|') and at least two whitespace characters on either side. # # ASN Autonomous system number originating a route for the entry # IP address. Note, 4-byte ASNs are supported and will be # displayed as a 32-bit integer. # # ASname A descriptive network name for the associated ASN. The # name is truncated to 30 characters. # # saddr The source IPv4 or IPv6 address that is being reported. # # utc A last seen timestamp formatted as YYYY-MM-DD HH:MM:SS # and in UTC time. # # category Descriptive tag name for this entry. For this report, # the text sipinvitation will appear. # # A commented footer section shows an aggregate count of ASNs and # addresses seen in the current report. # 12876 | AS12876, FR | 195.154.172.176 | 2019-08-21 03:27:53 | sipinvitation 12876 | AS12876, FR | 195.154.177.145 | 2019-08-21 16:13:37 | sipinvitation 12876 | AS12876, FR | 212.129.50.46 | 2019-08-20 04:46:32 | sipinvitation 12876 | AS12876, FR | 195.154.172.171 | 2019-08-21 03:59:16 | sipinvitation 12876 | AS12876, FR | 163.172.86.145 | 2019-08-21 00:48:16 | sipinvitation 12876 | AS12876, FR | 212.83.138.39 | 2019-08-21 19:10:40 | sipinvitation 12876 | AS12876, FR | 212.129.1.251 | 2019-08-23 22:17:54 | sipinvitation 12876 | AS12876, FR | 62.210.83.52 | 2019-08-23 09:53:56 | sipinvitation 12876 | AS12876, FR | 62.210.91.2 | 2019-08-23 23:56:20 | sipinvitation 12876 | AS12876, FR | 51.158.20.43 | 2019-08-23 22:12:25 | sipinvitation 12876 | AS12876, FR | 195.154.172.172 | 2019-08-21 03:29:51 | sipinvitation 12876 | AS12876, FR | 195.154.49.119 | 2019-08-20 21:39:22 | sipinvitation 12876 | AS12876, FR | 212.83.185.121 | 2019-08-23 22:13:43 | sipinvitation 12876 | AS12876, FR | 195.154.172.165 | 2019-08-21 04:16:06 | sipinvitation 13188 | TRIOLAN, UA | 178.151.255.35 | 2019-08-23 16:41:03 | sipinvitation 14061 | DIGITALOCEAN-ASN - DigitalOcea | 165.22.190.80 | 2019-08-23 21:01:50 | sipinvitation 14061 | DIGITALOCEAN-ASN - DigitalOcea | 165.22.117.98 | 2019-08-23 21:53:10 | sipinvitation 14061 | DIGITALOCEAN-ASN - DigitalOcea | 167.71.5.119 | 2019-08-21 09:00:17 | sipinvitation 15169 | GOOGLE - Google LLC, US | 35.184.207.166 | 2019-08-23 23:08:29 | sipinvitation 15975 | HADARA-AS, PS | 94.26.125.96 | 2019-08-17 18:31:35 | sipinvitation 15975 | HADARA-AS, PS | 89.239.43.85 | 2019-08-17 20:11:48 | sipinvitation 15975 | HADARA-AS, PS | 176.65.15.142 | 2019-08-17 17:05:24 | sipinvitation 16276 | OVH, FR | 51.89.173.145 | 2019-08-23 21:54:57 | sipinvitation 16276 | OVH, FR | 51.89.173.69 | 2019-08-17 09:03:19 | sipinvitation 24940 | HETZNER-AS, DE | 176.9.154.196 | 2019-08-19 04:18:20 | sipinvitation 46664 | VDI-NETWORK - VolumeDrive, US | 156.96.157.141 | 2019-08-18 20:35:37 | sipinvitation 46664 | VDI-NETWORK - VolumeDrive, US | 156.96.157.138 | 2019-08-21 09:21:06 | sipinvitation 46664 | VDI-NETWORK - VolumeDrive, US | 156.96.157.155 | 2019-08-23 23:40:54 | sipinvitation 50113 | SUPERSERVERSDATACENTER, RU | 185.40.4.246 | 2019-08-22 07:40:43 | sipinvitation 50113 | SUPERSERVERSDATACENTER, RU | 185.40.4.19 | 2019-08-23 01:54:26 | sipinvitation 131711 | ORANGE-ISP-AS-ID PT Global Tek | 103.9.124.70 | 2019-08-21 21:16:51 | sipinvitation 199046 | JETNET, PS | 185.132.250.207 | 2019-08-21 08:15:07 | sipinvitation 199653 | ARUBAFR-AS, FR | 89.40.115.171 | 2019-08-21 08:25:32 | sipinvitation 200185 | XANDMAIL-ASN, DE | 86.105.50.123 | 2019-08-23 19:04:00 | sipinvitation 200185 | XANDMAIL-ASN, DE | 217.61.2.43 | 2019-08-23 20:49:45 | sipinvitation 205727 | ARUBA, PL | 80.211.251.205 | 2019-08-21 08:26:26 | sipinvitation 209299 | VITOX-TELECOM VITOX TELECOM, N | 77.247.109.3 | 2019-08-19 03:28:31 | sipinvitation 209299 | VITOX-TELECOM VITOX TELECOM, N | 77.247.110.216 | 2019-08-21 20:51:50 | sipinvitation 209299 | VITOX-TELECOM VITOX TELECOM, N | 77.247.110.26 | 2019-08-22 17:43:43 | sipinvitation 209299 | VITOX-TELECOM VITOX TELECOM, N | 185.53.88.25 | 2019-08-23 23:15:22 | sipinvitation 209299 | VITOX-TELECOM VITOX TELECOM, N | 77.247.110.38 | 2019-08-23 13:25:14 | sipinvitation 209299 | VITOX-TELECOM VITOX TELECOM, N | 77.247.110.22 | 2019-08-23 03:30:29 | sipinvitation 209299 | VITOX-TELECOM VITOX TELECOM, N | 77.247.110.27 | 2019-08-23 01:57:14 | sipinvitation 209299 | VITOX-TELECOM VITOX TELECOM, N | 77.247.110.49 | 2019-08-23 17:11:42 | sipinvitation 209299 | VITOX-TELECOM VITOX TELECOM, N | 77.247.110.40 | 2019-08-23 22:37:11 | sipinvitation 209299 | VITOX-TELECOM VITOX TELECOM, N | 77.247.110.39 | 2019-08-22 08:01:57 | sipinvitation 209299 | VITOX-TELECOM VITOX TELECOM, N | 185.53.88.56 | 2019-08-22 21:21:30 | sipinvitation 209299 | VITOX-TELECOM VITOX TELECOM, N | 77.247.110.36 | 2019-08-23 19:54:35 | sipinvitation 209299 | VITOX-TELECOM VITOX TELECOM, N | 77.247.110.44 | 2019-08-23 12:23:44 | sipinvitation 209299 | VITOX-TELECOM VITOX TELECOM, N | 77.247.108.171 | 2019-08-17 20:44:20 | sipinvitation 209299 | VITOX-TELECOM VITOX TELECOM, N | 185.53.88.41 | 2019-08-23 22:38:57 | sipinvitation 209299 | VITOX-TELECOM VITOX TELECOM, N | 77.247.110.47 | 2019-08-23 04:06:41 | sipinvitation # # Statistics # ASNs: 15 # Addresses: 52