# DataPlane.org - for operators, by operators # sipinvitation # 2021-01-09 11:00 - 2021-01-16 11:00 # # The sipinvitation report is free for non-commercial use ONLY. If you # wish to discuss commercial use of this service, please contact us at # info@dataplane.org. Redistribution of the sipinvitation report in # whole or in part without the express permission of DataPlane is # expressly prohibited. # # This report is made possible through the generous support of people # like you. Sensor, processing and distribution systems require # non-free resources to setup and maintain. We are always looking for # financial contributions to help pay the bills and hosting to increase # visibility. If you find what we do useful, please consider supporting # us. # # This report is informational. It is not a block list, but some may # choose to use it to actively protect their networks and systems. The # report is provided on an as-is basis with no expressed warranty or # guarantee of accuracy. Use of this data is at your own risk. If you # have questions about this report do not hesitate to contact us. # # Entries below consist of fields with identifying characteristics of a # a source IP address that has been seen initiating a SIP INVITE # operation to a remote host. This report lists hosts that are # suspicious of more than just port scanning. These hosts may be SIP # client cataloging or conducting various forms of telephony abuse. # Each entry is sorted according to a route origination ASN. An entry # for the IP address may be listed more than once if there are multiple # origin AS (MOAS) announcements for the covering prefix. We use the # Team Cymru IP address to ASN mapping service to construct an origin AS # number and name. For details about this Team Cymru service, see: # # . # # The report format is as follows: # # ASN | ASname | saddr | utc | category # # Each field is described below. Please note any special formatting # rules to aid in processing this file with automated tools and scripts. # Blank lines may be present to improve the visual display of this file. # Lines beginning with a hash ('#') character are comment lines. All # other lines are report entries. Each field is separated by a pipe # symbol ('|') and at least two whitespace characters on either side. # # ASN Autonomous system number originating a route for the entry # IP address. Note, 4-byte ASNs are supported and will be # displayed as a 32-bit integer. # # ASname A descriptive network name for the associated ASN. The # name is truncated to 30 characters. # # saddr The source IPv4 or IPv6 address that is being reported. # # utc A last seen timestamp formatted as YYYY-MM-DD HH:MM:SS # and in UTC time. # # category Descriptive tag name for this entry. For this report, # the text sipinvitation will appear. # # A commented footer section shows an aggregate count of ASNs and # addresses seen in the current report. # 6939 | HURRICANE, US | 209.51.186.132 | 2021-01-15 22:51:28 | sipinvitation 7922 | COMCAST-7922, US | 50.201.227.150 | 2021-01-16 10:22:57 | sipinvitation 7922 | COMCAST-7922, US | 96.86.67.234 | 2021-01-16 04:29:24 | sipinvitation 8075 | MICROSOFT-CORP-MSN-AS-BLOCK, U | 102.133.225.173 | 2021-01-15 13:47:18 | sipinvitation 9808 | CMNET-GD Guangdong Mobile Comm | 183.235.243.149 | 2021-01-16 09:24:18 | sipinvitation 10733 | DC MATRIX INTERNET S/A, BR | 200.201.199.49 | 2021-01-12 13:34:18 | sipinvitation 10733 | DC MATRIX INTERNET S/A, BR | 200.201.199.58 | 2021-01-11 07:32:45 | sipinvitation 11260 | EASTLINK-HSI, CA | 173.252.25.66 | 2021-01-15 19:22:02 | sipinvitation 12876 | AS12876 ONLINE S.A.S., FR | 51.158.29.191 | 2021-01-16 10:57:08 | sipinvitation 12876 | AS12876 ONLINE S.A.S., FR | 212.129.33.255 | 2021-01-16 10:37:24 | sipinvitation 12876 | AS12876 ONLINE S.A.S., FR | 51.158.24.19 | 2021-01-14 06:52:09 | sipinvitation 12876 | AS12876 ONLINE S.A.S., FR | 212.129.60.77 | 2021-01-16 08:59:33 | sipinvitation 12876 | AS12876 ONLINE S.A.S., FR | 163.172.220.151 | 2021-01-16 10:53:13 | sipinvitation 12975 | PALTEL-AS Palestine Telecommun | 188.161.25.86 | 2021-01-14 10:11:43 | sipinvitation 12975 | PALTEL-AS Palestine Telecommun | 158.140.115.31 | 2021-01-16 05:50:19 | sipinvitation 14061 | DIGITALOCEAN-ASN, US | 67.205.174.60 | 2021-01-14 16:19:30 | sipinvitation 14061 | DIGITALOCEAN-ASN, US | 107.170.100.124 | 2021-01-15 04:15:50 | sipinvitation 14061 | DIGITALOCEAN-ASN, US | 139.59.159.0 | 2021-01-16 07:18:59 | sipinvitation 14061 | DIGITALOCEAN-ASN, US | 167.99.107.115 | 2021-01-11 17:47:26 | sipinvitation 14061 | DIGITALOCEAN-ASN, US | 192.241.204.192 | 2021-01-14 14:05:49 | sipinvitation 14061 | DIGITALOCEAN-ASN, US | 45.55.57.51 | 2021-01-15 02:24:52 | sipinvitation 14061 | DIGITALOCEAN-ASN, US | 162.243.15.192 | 2021-01-16 06:33:31 | sipinvitation 14576 | HOSTING-SOLUTIONS, US | 185.162.128.136 | 2021-01-16 06:45:02 | sipinvitation 14576 | HOSTING-SOLUTIONS, US | 204.155.30.97 | 2021-01-09 19:17:07 | sipinvitation 14576 | HOSTING-SOLUTIONS, US | 185.209.162.253 | 2021-01-16 10:57:07 | sipinvitation 14618 | AMAZON-AES, US | 35.173.42.81 | 2021-01-12 21:47:09 | sipinvitation 15964 | CAMNET-AS, CM | 154.72.188.230 | 2021-01-16 07:26:39 | sipinvitation 16276 | OVH OVH SAS, FR | 198.50.157.19 | 2021-01-14 18:43:17 | sipinvitation 16276 | OVH OVH SAS, FR | 144.217.72.106 | 2021-01-12 22:36:44 | sipinvitation 16276 | OVH OVH SAS, FR | 144.217.77.48 | 2021-01-13 15:33:05 | sipinvitation 16276 | OVH OVH SAS, FR | 164.132.83.83 | 2021-01-11 03:19:41 | sipinvitation 16276 | OVH OVH SAS, FR | 37.187.152.164 | 2021-01-15 23:20:55 | sipinvitation 16276 | OVH OVH SAS, FR | 164.132.47.67 | 2021-01-15 20:04:02 | sipinvitation 16276 | OVH OVH SAS, FR | 217.182.199.121 | 2021-01-10 00:53:32 | sipinvitation 16276 | OVH OVH SAS, FR | 54.37.185.196 | 2021-01-16 06:40:37 | sipinvitation 16276 | OVH OVH SAS, FR | 37.187.152.177 | 2021-01-15 22:44:35 | sipinvitation 16276 | OVH OVH SAS, FR | 51.81.152.33 | 2021-01-11 02:28:11 | sipinvitation 16276 | OVH OVH SAS, FR | 142.44.212.109 | 2021-01-13 15:47:05 | sipinvitation 16276 | OVH OVH SAS, FR | 37.187.152.191 | 2021-01-14 16:07:19 | sipinvitation 16276 | OVH OVH SAS, FR | 51.75.191.89 | 2021-01-15 10:04:19 | sipinvitation 19180 | AMERICATEL PERU S.A., PE | 190.187.120.49 | 2021-01-13 03:51:08 | sipinvitation 20473 | AS-CHOOPA, US | 45.32.121.125 | 2021-01-11 04:23:47 | sipinvitation 20473 | AS-CHOOPA, US | 45.63.71.228 | 2021-01-11 13:45:21 | sipinvitation 20473 | AS-CHOOPA, US | 208.167.255.211 | 2021-01-16 07:14:38 | sipinvitation 20473 | AS-CHOOPA, US | 66.42.83.124 | 2021-01-09 15:54:30 | sipinvitation 20473 | AS-CHOOPA, US | 104.238.162.13 | 2021-01-10 04:36:48 | sipinvitation 20714 | Merlin-Telecom "Merlin-Telekom | 195.214.196.234 | 2021-01-16 08:56:57 | sipinvitation 21409 | IKOULA Ikoula Net SAS, FR | 213.246.56.162 | 2021-01-15 10:19:40 | sipinvitation 21554 | CYBERLYNK, US | 192.159.67.43 | 2021-01-10 19:59:21 | sipinvitation 21554 | CYBERLYNK, US | 162.217.84.68 | 2021-01-10 18:16:34 | sipinvitation 21554 | CYBERLYNK, US | 192.159.67.212 | 2021-01-10 18:40:09 | sipinvitation 21554 | CYBERLYNK, US | 38.39.191.175 | 2021-01-10 19:08:46 | sipinvitation 21554 | CYBERLYNK, US | 66.185.27.140 | 2021-01-15 14:55:51 | sipinvitation 22772 | LOGIN, US | 204.17.62.53 | 2021-01-15 22:14:46 | sipinvitation 24940 | HETZNER-AS Hetzner Online GmbH | 136.243.129.220 | 2021-01-12 12:16:01 | sipinvitation 24961 | MYLOC-AS myLoc managed IT AG, | 85.114.138.153 | 2021-01-13 20:20:10 | sipinvitation 25019 | SAUDINETSTC-AS Saudi Telecom C | 37.224.51.251 | 2021-01-16 05:32:27 | sipinvitation 25490 | STC-AS PJSC Rostelecom, RU | 83.239.99.95 | 2021-01-13 19:32:48 | sipinvitation 30083 | AS-30083-GO-DADDY-COM-LLC, US | 209.126.103.164 | 2021-01-12 00:22:13 | sipinvitation 32233 | PERSONA, CA | 173.252.25.66 | 2021-01-15 19:22:02 | sipinvitation 35478 | DATACENTER Bunea TELECOM SRL, | 193.29.14.121 | 2021-01-15 10:32:06 | sipinvitation 35478 | DATACENTER Bunea TELECOM SRL, | 193.29.14.103 | 2021-01-13 23:32:23 | sipinvitation 35478 | DATACENTER Bunea TELECOM SRL, | 193.29.14.101 | 2021-01-16 09:40:10 | sipinvitation 35478 | DATACENTER Bunea TELECOM SRL, | 193.29.14.115 | 2021-01-16 10:56:45 | sipinvitation 37153 | xneelo, ZA | 160.119.253.232 | 2021-01-16 07:19:14 | sipinvitation 39845 | LV-2CLOUD-ASN16 2 Cloud Ltd., | 185.176.220.184 | 2021-01-09 19:47:57 | sipinvitation 39845 | LV-2CLOUD-ASN16 2 Cloud Ltd., | 185.176.220.181 | 2021-01-09 19:43:41 | sipinvitation 39845 | LV-2CLOUD-ASN16 2 Cloud Ltd., | 185.176.220.182 | 2021-01-09 18:48:06 | sipinvitation 39845 | LV-2CLOUD-ASN16 2 Cloud Ltd., | 185.176.220.183 | 2021-01-09 19:36:16 | sipinvitation 45291 | PTINET-AS-ID PT Prima Telekom | 203.153.218.172 | 2021-01-10 14:23:43 | sipinvitation 45980 | CROSSONNET-AS-KR Cross On Net | 1.230.123.157 | 2021-01-13 20:24:45 | sipinvitation 46664 | VDI-NETWORK, US | 23.146.241.237 | 2021-01-12 06:44:53 | sipinvitation 46664 | VDI-NETWORK, US | 23.148.145.13 | 2021-01-16 10:05:51 | sipinvitation 46664 | VDI-NETWORK, US | 23.148.145.21 | 2021-01-15 19:35:09 | sipinvitation 46664 | VDI-NETWORK, US | 23.146.241.11 | 2021-01-16 07:14:29 | sipinvitation 46664 | VDI-NETWORK, US | 23.146.241.12 | 2021-01-16 08:20:56 | sipinvitation 46664 | VDI-NETWORK, US | 23.146.241.14 | 2021-01-14 06:45:24 | sipinvitation 46664 | VDI-NETWORK, US | 23.146.241.153 | 2021-01-13 00:30:50 | sipinvitation 46664 | VDI-NETWORK, US | 156.96.115.175 | 2021-01-14 22:01:00 | sipinvitation 46664 | VDI-NETWORK, US | 23.146.241.10 | 2021-01-14 08:16:22 | sipinvitation 47869 | NETROUTING-AS Ellada Projects | 185.126.34.214 | 2021-01-15 17:19:08 | sipinvitation 49223 | EVEREST-AS "Everest" Broadcast | 185.43.236.66 | 2021-01-16 06:39:56 | sipinvitation 51167 | CONTABO Contabo GmbH, DE | 161.97.176.222 | 2021-01-15 14:18:17 | sipinvitation 51167 | CONTABO Contabo GmbH, DE | 62.171.176.58 | 2021-01-16 01:15:36 | sipinvitation 55309 | MTT-AS-VN Minh Tu Telecom Limi | 103.235.210.15 | 2021-01-16 08:58:06 | sipinvitation 55836 | RELIANCEJIO-IN Reliance Jio In | 115.241.164.10 | 2021-01-11 08:47:55 | sipinvitation 56040 | CMNET-GUANGDONG-AP China Mobil | 183.235.243.149 | 2021-01-16 09:24:18 | sipinvitation 56493 | DLINE-AS Dream Line OOO, RU | 91.224.206.27 | 2021-01-15 17:16:53 | sipinvitation 58923 | INTERCLOUDLTD-AS-AP InterCloud | 118.67.220.102 | 2021-01-10 21:50:53 | sipinvitation 60117 | HS Host Sailor Ltd, AE | 212.8.251.69 | 2021-01-11 04:15:55 | sipinvitation 62563 | AS-GLOBALTELEHOST, CA | 198.57.27.233 | 2021-01-15 08:43:53 | sipinvitation 63949 | LINODE-AP Linode, LLC, US | 23.92.28.214 | 2021-01-13 16:34:15 | sipinvitation 63949 | LINODE-AP Linode, LLC, US | 104.237.156.28 | 2021-01-09 14:16:27 | sipinvitation 133398 | TELE-AS Tele Asia Limited, HK | 185.36.81.47 | 2021-01-13 09:42:48 | sipinvitation 136862 | IDNIC-KOMINFO-SERANG-KOTA-AS-I | 103.102.250.21 | 2021-01-16 08:20:30 | sipinvitation 201814 | PL-SKYTECH-AS Meverywhere sp. | 185.16.38.5 | 2021-01-14 10:42:51 | sipinvitation 201814 | PL-SKYTECH-AS Meverywhere sp. | 193.32.8.74 | 2021-01-12 08:05:20 | sipinvitation 201814 | PL-SKYTECH-AS Meverywhere sp. | 185.16.38.37 | 2021-01-12 14:02:32 | sipinvitation 201814 | PL-SKYTECH-AS Meverywhere sp. | 193.32.8.139 | 2021-01-11 17:50:26 | sipinvitation 201814 | PL-SKYTECH-AS Meverywhere sp. | 193.32.8.141 | 2021-01-09 16:20:33 | sipinvitation 201814 | PL-SKYTECH-AS Meverywhere sp. | 193.32.8.89 | 2021-01-16 04:52:37 | sipinvitation 201814 | PL-SKYTECH-AS Meverywhere sp. | 193.32.8.75 | 2021-01-15 10:07:33 | sipinvitation 201814 | PL-SKYTECH-AS Meverywhere sp. | 185.16.38.75 | 2021-01-16 09:14:00 | sipinvitation 201814 | PL-SKYTECH-AS Meverywhere sp. | 193.32.8.134 | 2021-01-10 03:22:16 | sipinvitation 201814 | PL-SKYTECH-AS Meverywhere sp. | 193.32.8.136 | 2021-01-12 20:19:49 | sipinvitation 201814 | PL-SKYTECH-AS Meverywhere sp. | 193.32.8.133 | 2021-01-12 23:27:31 | sipinvitation 201814 | PL-SKYTECH-AS Meverywhere sp. | 193.32.8.127 | 2021-01-11 07:15:52 | sipinvitation 213371 | SQUITTER-NETWORKS ABC Consulta | 37.49.229.192 | 2021-01-13 16:24:01 | sipinvitation 262253 | ECONOCABLE MEDIA SAC, PE | 181.224.249.10 | 2021-01-10 08:44:06 | sipinvitation 264210 | W2I TELECOM E SERVICOS LTDA - | 138.99.200.71 | 2021-01-16 03:01:41 | sipinvitation 265505 | INTELVID S.A. DE C.V., MX | 45.6.63.64 | 2021-01-16 10:08:49 | sipinvitation # # Statistics # ASNs: 49 # Addresses: 109