# DataPlane.org - for operators, by operators # sipinvitation # 2020-03-26 18:00 - 2020-04-02 18:00 # # The sipinvitation report is free for non-commercial use ONLY. If you # wish to discuss commercial use of this service, please contact us at # info@dataplane.org. Redistribution of the sipinvitation report in # whole or in part without the express permission of DataPlane is # expressly prohibited. # # This report is made possible through the generous support of people # like you. Sensor, processing and distribution systems require # non-free resources to setup and maintain. We are always looking for # financial contributions to help pay the bills and hosting to increase # visibility. If you find what we do useful, please consider supporting # us. # # This report is informational. It is not a block list, but some may # choose to use it to actively protect their networks and systems. The # report is provided on an as-is basis with no expressed warranty or # guarantee of accuracy. Use of this data is at your own risk. If you # have questions about this report do not hesitate to contact us. # # Entries below consist of fields with identifying characteristics of a # a source IP address that has been seen initiating a SIP INVITE # operation to a remote host. This report lists hosts that are # suspicious of more than just port scanning. These hosts may be SIP # client cataloging or conducting various forms of telephony abuse. # Each entry is sorted according to a route origination ASN. An entry # for the IP address may be listed more than once if there are multiple # origin AS (MOAS) announcements for the covering prefix. We use the # Team Cymru IP address to ASN mapping service to construct an origin AS # number and name. For details about this Team Cymru service, see: # # . # # The report format is as follows: # # ASN | ASname | saddr | utc | category # # Each field is described below. Please note any special formatting # rules to aid in processing this file with automated tools and scripts. # Blank lines may be present to improve the visual display of this file. # Lines beginning with a hash ('#') character are comment lines. All # other lines are report entries. Each field is separated by a pipe # symbol ('|') and at least two whitespace characters on either side. # # ASN Autonomous system number originating a route for the entry # IP address. Note, 4-byte ASNs are supported and will be # displayed as a 32-bit integer. # # ASname A descriptive network name for the associated ASN. The # name is truncated to 30 characters. # # saddr The source IPv4 or IPv6 address that is being reported. # # utc A last seen timestamp formatted as YYYY-MM-DD HH:MM:SS # and in UTC time. # # category Descriptive tag name for this entry. For this report, # the text sipinvitation will appear. # # A commented footer section shows an aggregate count of ASNs and # addresses seen in the current report. # 8075 | MICROSOFT-CORP-MSN-AS-BLOCK, U | 138.91.122.165 | 2020-03-28 23:35:42 | sipinvitation 12876 | Online SAS, FR | 62.210.162.99 | 2020-04-01 01:08:39 | sipinvitation 12876 | Online SAS, FR | 195.154.37.78 | 2020-04-02 17:51:01 | sipinvitation 12876 | Online SAS, FR | 195.154.28.205 | 2020-04-02 17:58:49 | sipinvitation 12876 | Online SAS, FR | 51.158.29.191 | 2020-04-02 17:20:12 | sipinvitation 12876 | Online SAS, FR | 212.129.63.209 | 2020-04-02 17:41:08 | sipinvitation 12876 | Online SAS, FR | 51.158.29.207 | 2020-04-02 09:51:50 | sipinvitation 12876 | Online SAS, FR | 212.83.142.219 | 2020-04-02 16:02:22 | sipinvitation 12876 | Online SAS, FR | 163.172.226.61 | 2020-04-02 17:55:51 | sipinvitation 12876 | Online SAS, FR | 163.172.121.164 | 2020-04-02 17:38:33 | sipinvitation 14061 | DIGITALOCEAN-ASN, US | 165.22.61.50 | 2020-04-02 15:57:06 | sipinvitation 14061 | DIGITALOCEAN-ASN, US | 104.248.120.250 | 2020-03-29 20:48:21 | sipinvitation 14061 | DIGITALOCEAN-ASN, US | 206.189.197.118 | 2020-04-02 15:28:28 | sipinvitation 15975 | HADARA-AS, PS | 37.8.13.42 | 2020-03-28 04:35:53 | sipinvitation 16276 | OVH, FR | 188.165.235.75 | 2020-04-02 17:14:12 | sipinvitation 20857 | TRANSIP-AS Amsterdam, the Neth | 149.210.172.17 | 2020-03-31 17:08:54 | sipinvitation 23470 | RELIABLESITE, US | 104.238.220.49 | 2020-04-02 17:56:27 | sipinvitation 23470 | RELIABLESITE, US | 206.221.176.146 | 2020-04-02 17:51:45 | sipinvitation 23470 | RELIABLESITE, US | 104.194.10.157 | 2020-04-02 16:57:56 | sipinvitation 23470 | RELIABLESITE, US | 199.127.63.202 | 2020-04-02 12:00:40 | sipinvitation 23470 | RELIABLESITE, US | 104.194.11.244 | 2020-03-26 22:34:11 | sipinvitation 35913 | DEDIPATH-LLC, US | 92.118.234.242 | 2020-03-29 21:10:35 | sipinvitation 35913 | DEDIPATH-LLC, US | 91.212.38.234 | 2020-03-29 06:53:47 | sipinvitation 35913 | DEDIPATH-LLC, US | 92.118.234.186 | 2020-03-29 20:29:57 | sipinvitation 35913 | DEDIPATH-LLC, US | 194.55.132.234 | 2020-04-02 17:57:38 | sipinvitation 35913 | DEDIPATH-LLC, US | 91.212.38.210 | 2020-04-02 17:58:05 | sipinvitation 46562 | TOTAL-SERVER-SOLUTIONS, US | 66.115.173.146 | 2020-04-01 04:50:52 | sipinvitation 50113 | SUPERSERVERSDATACENTER, RU | 185.40.4.165 | 2020-04-02 16:20:31 | sipinvitation 60781 | LEASEWEB-NL-AMS-01 Netherlands | 95.168.171.98 | 2020-03-28 09:59:08 | sipinvitation 133398 | TELE-AS Tele Asia Limited, HK | 45.125.65.46 | 2020-03-30 23:36:56 | sipinvitation 208666 | ESTROWEB, NL | 37.49.226.105 | 2020-03-27 14:07:36 | sipinvitation 208666 | ESTROWEB, NL | 37.49.226.104 | 2020-03-31 18:06:11 | sipinvitation 208666 | ESTROWEB, NL | 37.49.226.117 | 2020-04-02 15:31:58 | sipinvitation 208666 | ESTROWEB, NL | 37.49.230.32 | 2020-04-02 09:20:18 | sipinvitation 208666 | ESTROWEB, NL | 37.49.226.154 | 2020-04-02 07:10:46 | sipinvitation 209299 | VITOX-TELECOM VITOX TELECOM, N | 45.143.220.213 | 2020-04-02 17:31:11 | sipinvitation 209299 | VITOX-TELECOM VITOX TELECOM, N | 103.145.13.2 | 2020-04-02 03:09:29 | sipinvitation 209299 | VITOX-TELECOM VITOX TELECOM, N | 45.143.220.116 | 2020-04-01 02:43:10 | sipinvitation 209299 | VITOX-TELECOM VITOX TELECOM, N | 103.145.13.5 | 2020-04-02 17:27:03 | sipinvitation 209299 | VITOX-TELECOM VITOX TELECOM, N | 45.143.220.245 | 2020-03-29 00:32:01 | sipinvitation 209299 | VITOX-TELECOM VITOX TELECOM, N | 45.143.220.99 | 2020-03-30 02:17:46 | sipinvitation 209299 | VITOX-TELECOM VITOX TELECOM, N | 77.247.110.245 | 2020-04-02 09:04:16 | sipinvitation 209299 | VITOX-TELECOM VITOX TELECOM, N | 45.143.220.246 | 2020-04-02 15:15:01 | sipinvitation 209299 | VITOX-TELECOM VITOX TELECOM, N | 77.247.110.28 | 2020-03-31 20:38:53 | sipinvitation 209299 | VITOX-TELECOM VITOX TELECOM, N | 45.143.220.33 | 2020-04-01 02:23:57 | sipinvitation 209299 | VITOX-TELECOM VITOX TELECOM, N | 45.143.220.247 | 2020-04-02 15:41:40 | sipinvitation 209299 | VITOX-TELECOM VITOX TELECOM, N | 45.143.220.251 | 2020-04-02 07:23:55 | sipinvitation 209299 | VITOX-TELECOM VITOX TELECOM, N | 45.143.220.214 | 2020-04-02 15:04:58 | sipinvitation 209299 | VITOX-TELECOM VITOX TELECOM, N | 45.143.221.54 | 2020-04-02 17:21:05 | sipinvitation 209299 | VITOX-TELECOM VITOX TELECOM, N | 103.145.13.3 | 2020-04-02 15:43:06 | sipinvitation # # Statistics # ASNs: 14 # Addresses: 50