# DataPlane.org - for operators, by operators # sipinvitation # 2020-01-13 03:00 - 2020-01-20 03:00 # # The sipinvitation report is free for non-commercial use ONLY. If you # wish to discuss commercial use of this service, please contact us at # info@dataplane.org. Redistribution of the sipinvitation report in # whole or in part without the express permission of DataPlane is # expressly prohibited. # # This report is made possible through the generous support of people # like you. Sensor, processing and distribution systems require # non-free resources to setup and maintain. We are always looking for # financial contributions to help pay the bills and hosting to increase # visibility. If you find what we do useful, please consider supporting # us. # # This report is informational. It is not a block list, but some may # choose to use it to actively protect their networks and systems. The # report is provided on an as-is basis with no expressed warranty or # guarantee of accuracy. Use of this data is at your own risk. If you # have questions about this report do not hesitate to contact us. # # Entries below consist of fields with identifying characteristics of a # a source IP address that has been seen initiating a SIP INVITE # operation to a remote host. This report lists hosts that are # suspicious of more than just port scanning. These hosts may be SIP # client cataloging or conducting various forms of telephony abuse. # Each entry is sorted according to a route origination ASN. An entry # for the IP address may be listed more than once if there are multiple # origin AS (MOAS) announcements for the covering prefix. We use the # Team Cymru IP address to ASN mapping service to construct an origin AS # number and name. For details about this Team Cymru service, see: # # . # # The report format is as follows: # # ASN | ASname | saddr | utc | category # # Each field is described below. Please note any special formatting # rules to aid in processing this file with automated tools and scripts. # Blank lines may be present to improve the visual display of this file. # Lines beginning with a hash ('#') character are comment lines. All # other lines are report entries. Each field is separated by a pipe # symbol ('|') and at least two whitespace characters on either side. # # ASN Autonomous system number originating a route for the entry # IP address. Note, 4-byte ASNs are supported and will be # displayed as a 32-bit integer. # # ASname A descriptive network name for the associated ASN. The # name is truncated to 30 characters. # # saddr The source IPv4 or IPv6 address that is being reported. # # utc A last seen timestamp formatted as YYYY-MM-DD HH:MM:SS # and in UTC time. # # category Descriptive tag name for this entry. For this report, # the text sipinvitation will appear. # # A commented footer section shows an aggregate count of ASNs and # addresses seen in the current report. # 174 | COGENT-174, US | 38.89.143.12 | 2020-01-13 20:27:38 | sipinvitation 12876 | Online SAS, FR | 163.172.53.65 | 2020-01-19 18:56:36 | sipinvitation 12876 | Online SAS, FR | 212.129.63.228 | 2020-01-14 12:30:14 | sipinvitation 12876 | Online SAS, FR | 51.15.156.14 | 2020-01-20 01:26:58 | sipinvitation 12876 | Online SAS, FR | 163.172.121.164 | 2020-01-17 17:02:05 | sipinvitation 12876 | Online SAS, FR | 212.83.144.113 | 2020-01-18 20:52:47 | sipinvitation 12876 | Online SAS, FR | 163.172.116.24 | 2020-01-18 21:08:18 | sipinvitation 12876 | Online SAS, FR | 62.210.167.131 | 2020-01-20 02:42:59 | sipinvitation 12876 | Online SAS, FR | 163.172.196.2 | 2020-01-16 14:53:48 | sipinvitation 12876 | Online SAS, FR | 51.158.20.55 | 2020-01-16 07:32:29 | sipinvitation 12876 | Online SAS, FR | 62.210.6.56 | 2020-01-14 08:16:24 | sipinvitation 12876 | Online SAS, FR | 195.154.29.10 | 2020-01-19 07:30:39 | sipinvitation 12876 | Online SAS, FR | 195.154.37.78 | 2020-01-14 12:13:27 | sipinvitation 12876 | Online SAS, FR | 62.210.10.196 | 2020-01-18 17:25:49 | sipinvitation 12876 | Online SAS, FR | 51.15.159.134 | 2020-01-16 19:49:09 | sipinvitation 12876 | Online SAS, FR | 51.158.25.171 | 2020-01-18 17:00:18 | sipinvitation 12876 | Online SAS, FR | 62.210.30.210 | 2020-01-16 01:56:17 | sipinvitation 12876 | Online SAS, FR | 212.83.185.121 | 2020-01-18 13:42:31 | sipinvitation 16276 | OVH, FR | 46.105.91.255 | 2020-01-13 21:40:54 | sipinvitation 16276 | OVH, FR | 54.36.134.249 | 2020-01-20 02:55:33 | sipinvitation 16276 | OVH, FR | 37.59.243.173 | 2020-01-17 01:05:42 | sipinvitation 16276 | OVH, FR | 51.89.99.55 | 2020-01-19 12:32:49 | sipinvitation 16276 | OVH, FR | 54.38.31.0 | 2020-01-13 21:41:31 | sipinvitation 16276 | OVH, FR | 51.254.4.226 | 2020-01-20 02:57:53 | sipinvitation 16276 | OVH, FR | 92.222.204.120 | 2020-01-13 21:51:55 | sipinvitation 16276 | OVH, FR | 51.75.232.162 | 2020-01-20 02:50:55 | sipinvitation 24940 | HETZNER-AS, DE | 136.243.7.213 | 2020-01-20 02:25:00 | sipinvitation 29066 | VELIANET-AS velia.net Internet | 151.106.62.2 | 2020-01-20 02:09:35 | sipinvitation 199653 | ARUBAFR-AS, FR | 217.61.97.218 | 2020-01-14 08:18:08 | sipinvitation 208666 | ESTROWEB, NL | 37.49.230.102 | 2020-01-17 01:37:42 | sipinvitation 208666 | ESTROWEB, NL | 37.49.230.109 | 2020-01-20 02:07:14 | sipinvitation 208666 | ESTROWEB, NL | 37.49.230.108 | 2020-01-20 02:59:26 | sipinvitation 209299 | VITOX-TELECOM VITOX TELECOM, N | 37.49.229.173 | 2020-01-14 23:20:57 | sipinvitation 209299 | VITOX-TELECOM VITOX TELECOM, N | 37.49.231.181 | 2020-01-20 02:03:07 | sipinvitation 209299 | VITOX-TELECOM VITOX TELECOM, N | 185.53.88.45 | 2020-01-19 05:36:17 | sipinvitation 209299 | VITOX-TELECOM VITOX TELECOM, N | 77.247.110.77 | 2020-01-19 04:16:57 | sipinvitation 209299 | VITOX-TELECOM VITOX TELECOM, N | 37.49.231.182 | 2020-01-13 07:27:57 | sipinvitation 209299 | VITOX-TELECOM VITOX TELECOM, N | 77.247.110.245 | 2020-01-20 02:34:15 | sipinvitation 209299 | VITOX-TELECOM VITOX TELECOM, N | 77.247.110.15 | 2020-01-19 21:38:57 | sipinvitation 209299 | VITOX-TELECOM VITOX TELECOM, N | 45.143.220.164 | 2020-01-18 01:23:30 | sipinvitation 209299 | VITOX-TELECOM VITOX TELECOM, N | 45.143.221.33 | 2020-01-15 02:45:49 | sipinvitation 209299 | VITOX-TELECOM VITOX TELECOM, N | 185.53.88.44 | 2020-01-19 05:48:02 | sipinvitation 209299 | VITOX-TELECOM VITOX TELECOM, N | 37.49.231.131 | 2020-01-15 18:30:35 | sipinvitation 209299 | VITOX-TELECOM VITOX TELECOM, N | 185.53.88.25 | 2020-01-15 00:03:24 | sipinvitation 209299 | VITOX-TELECOM VITOX TELECOM, N | 77.247.109.46 | 2020-01-16 06:32:52 | sipinvitation 209299 | VITOX-TELECOM VITOX TELECOM, N | 185.53.88.111 | 2020-01-20 02:43:11 | sipinvitation 209605 | HOSTBALTIC, LT | 141.98.10.132 | 2020-01-14 21:34:41 | sipinvitation 209605 | HOSTBALTIC, LT | 141.98.10.129 | 2020-01-18 18:00:45 | sipinvitation # # Statistics # ASNs: 9 # Addresses: 48