# DataPlane.org - for operators, by operators # sipinvitation # 2017-09-17 17:00 - 2017-09-24 17:00 # # The sipinvitation report is free for non-commercial use ONLY. If you # wish to discuss commercial use of this service, please contact us at # info@dataplane.org. Redistribution of the sipinvitation report in # whole or in part without the express permission of DataPlane is # expressly prohibited. # # This report is made possible through the generous support of people # like you. Sensor, processing and distribution systems require # non-free resources to setup and maintain. We are always looking for # financial contributions to help pay the bills and hosting to increase # visibility. If you find what we do useful, please consider supporting # us. # # This report is informational. It is not a blacklist, but some may # choose to use it to actively protect their networks and systems. The # report is provided on an as-is basis with no expressed warranty or # guarantee of accuracy. Use of this data is at your own risk. If you # have questions about this report do not hesitate to contact us. # # Entries below consist of fields with identifying characteristics of a # a source IP address that has been seen initiating a SIP INVITE # operation to a remote host. This report lists hosts that are # suspicious of more than just port scanning. These hosts may be SIP # client cataloging or conducting various forms of telephony abuse. # Each entry is sorted according to a route origination ASN. An entry # for the IP address may be listed more than once if there are multiple # origin AS (MOAS) announcements for the covering prefix. We use the # Team Cymru IP address to ASN mapping service to construct an origin AS # number and name. For details about this Team Cymru service, see: # # . # # The report format is as follows: # # ASN | ASname | saddr | utc | category # # Each field is described below. Please note any special formatting # rules to aid in processing this file with automated tools and scripts. # Blank lines may be present to improve the visual display of this file. # Lines beginning with a hash ('#') character are comment lines. All # other lines are report entries. Each field is separated by a pipe # symbol ('|') and at least two whitespace characters on either side. # # ASN Autonomous system number originating a route for the entry # IP address. Note, 4-byte ASNs are supported and will be # displayed as a 32-bit integer. # # ASname A descriptive network name for the associated ASN. The # name is truncated to 30 characters. # # saddr The source IPv4 or IPv6 address that is being reported. # # utc A last seen timestamp formatted as YYYY-MM-DD HH:MM:SS # and in UTC time. # # category Descriptive tag name for this entry. For this report, # the text sipinvitation will appear. # # A commented footer section shows an aggregate count of ASNs and # addresses seen in the current report. # 12876 | AS12876, FR | 195.154.182.240 | 2017-09-21 17:58:26 | sipinvitation 12876 | AS12876, FR | 195.154.185.232 | 2017-09-24 16:07:47 | sipinvitation 12876 | AS12876, FR | 195.154.185.216 | 2017-09-23 08:59:47 | sipinvitation 12876 | AS12876, FR | 62.210.181.149 | 2017-09-24 13:07:08 | sipinvitation 12876 | AS12876, FR | 195.154.179.7 | 2017-09-19 18:47:04 | sipinvitation 16125 | CHERRYSERVERS1-AS, LT | 93.115.27.34 | 2017-09-24 17:41:06 | sipinvitation 16125 | CHERRYSERVERS1-AS, LT | 93.115.26.145 | 2017-09-19 16:26:31 | sipinvitation 16125 | CHERRYSERVERS1-AS, LT | 188.214.128.61 | 2017-09-20 22:44:24 | sipinvitation 36493 | 295CA-TOR-ASN - FIBERNETICS CO | 199.127.108.130 | 2017-09-24 16:42:35 | sipinvitation 40065 | CNSERVERS - CNSERVERS LLC, US | 198.12.12.146 | 2017-09-23 16:48:55 | sipinvitation 50113 | SUPERSERVERSDATACENTER, RU | 185.40.4.199 | 2017-09-19 18:23:48 | sipinvitation 51167 | CONTABO to AS1299 announce AS3 | 5.189.167.227 | 2017-09-19 21:53:57 | sipinvitation 51852 | PLI-AS, CH | 176.223.111.186 | 2017-09-20 14:58:25 | sipinvitation 55053 | COLOWAREHOUSEONTARIO - 2267921 | 199.127.108.130 | 2017-09-24 16:42:35 | sipinvitation 62370 | SNEL, NL | 185.62.57.118 | 2017-09-22 15:31:09 | sipinvitation 62370 | SNEL, NL | 185.62.57.117 | 2017-09-22 15:10:04 | sipinvitation 62370 | SNEL, NL | 185.62.57.119 | 2017-09-22 14:15:53 | sipinvitation 62370 | SNEL, NL | 185.62.57.116 | 2017-09-23 11:02:35 | sipinvitation 62370 | SNEL, NL | 185.62.57.97 | 2017-09-22 11:55:03 | sipinvitation # # Statistics # ASNs: 9 # Addresses: 18