# DataPlane.org - for operators, by operators # sipinvitation # 2019-02-16 08:00 - 2019-02-23 08:00 # # The sipinvitation report is free for non-commercial use ONLY. If you # wish to discuss commercial use of this service, please contact us at # info@dataplane.org. Redistribution of the sipinvitation report in # whole or in part without the express permission of DataPlane is # expressly prohibited. # # This report is made possible through the generous support of people # like you. Sensor, processing and distribution systems require # non-free resources to setup and maintain. We are always looking for # financial contributions to help pay the bills and hosting to increase # visibility. If you find what we do useful, please consider supporting # us. # # This report is informational. It is not a block list, but some may # choose to use it to actively protect their networks and systems. The # report is provided on an as-is basis with no expressed warranty or # guarantee of accuracy. Use of this data is at your own risk. If you # have questions about this report do not hesitate to contact us. # # Entries below consist of fields with identifying characteristics of a # a source IP address that has been seen initiating a SIP INVITE # operation to a remote host. This report lists hosts that are # suspicious of more than just port scanning. These hosts may be SIP # client cataloging or conducting various forms of telephony abuse. # Each entry is sorted according to a route origination ASN. An entry # for the IP address may be listed more than once if there are multiple # origin AS (MOAS) announcements for the covering prefix. We use the # Team Cymru IP address to ASN mapping service to construct an origin AS # number and name. For details about this Team Cymru service, see: # # . # # The report format is as follows: # # ASN | ASname | saddr | utc | category # # Each field is described below. Please note any special formatting # rules to aid in processing this file with automated tools and scripts. # Blank lines may be present to improve the visual display of this file. # Lines beginning with a hash ('#') character are comment lines. All # other lines are report entries. Each field is separated by a pipe # symbol ('|') and at least two whitespace characters on either side. # # ASN Autonomous system number originating a route for the entry # IP address. Note, 4-byte ASNs are supported and will be # displayed as a 32-bit integer. # # ASname A descriptive network name for the associated ASN. The # name is truncated to 30 characters. # # saddr The source IPv4 or IPv6 address that is being reported. # # utc A last seen timestamp formatted as YYYY-MM-DD HH:MM:SS # and in UTC time. # # category Descriptive tag name for this entry. For this report, # the text sipinvitation will appear. # # A commented footer section shows an aggregate count of ASNs and # addresses seen in the current report. # 12876 | AS12876, FR | 62.210.86.93 | 2019-02-16 19:18:27 | sipinvitation 12876 | AS12876, FR | 163.172.18.197 | 2019-02-20 11:37:11 | sipinvitation 12876 | AS12876, FR | 62.210.83.139 | 2019-02-22 10:33:44 | sipinvitation 12876 | AS12876, FR | 62.210.101.81 | 2019-02-18 12:14:48 | sipinvitation 12876 | AS12876, FR | 62.210.88.58 | 2019-02-22 12:12:28 | sipinvitation 12876 | AS12876, FR | 195.154.207.38 | 2019-02-23 02:28:40 | sipinvitation 12876 | AS12876, FR | 62.210.142.104 | 2019-02-23 05:40:19 | sipinvitation 12876 | AS12876, FR | 62.210.247.215 | 2019-02-20 06:56:13 | sipinvitation 12876 | AS12876, FR | 51.15.152.59 | 2019-02-22 13:56:43 | sipinvitation 16276 | OVH, FR | 79.137.123.247 | 2019-02-20 17:02:01 | sipinvitation 24532 | INET-AS-ID PT. Inet Global Ind | 43.229.207.244 | 2019-02-18 20:59:52 | sipinvitation 34300 | SPACENET-AS Internet Service P | 62.173.149.149 | 2019-02-17 15:54:34 | sipinvitation 43350 | NFORCE, NL | 185.107.94.42 | 2019-02-20 05:38:17 | sipinvitation 43350 | NFORCE, NL | 185.107.94.41 | 2019-02-20 05:33:17 | sipinvitation 46475 | LIMESTONENETWORKS - Limestone | 216.245.196.222 | 2019-02-18 03:07:34 | sipinvitation 46664 | VDI-NETWORK - VolumeDrive, US | 102.165.48.8 | 2019-02-23 03:37:42 | sipinvitation 46664 | VDI-NETWORK - VolumeDrive, US | 102.165.36.88 | 2019-02-21 00:33:40 | sipinvitation 46664 | VDI-NETWORK - VolumeDrive, US | 102.165.52.222 | 2019-02-19 21:02:20 | sipinvitation 50113 | SUPERSERVERSDATACENTER, RU | 185.40.4.87 | 2019-02-18 05:29:06 | sipinvitation 51167 | CONTABO, DE | 173.212.254.238 | 2019-02-21 10:48:33 | sipinvitation 51167 | CONTABO, DE | 173.249.1.21 | 2019-02-21 17:31:34 | sipinvitation 51167 | CONTABO, DE | 173.212.248.9 | 2019-02-18 02:24:41 | sipinvitation 51167 | CONTABO, DE | 173.249.1.18 | 2019-02-22 00:36:13 | sipinvitation 51167 | CONTABO, DE | 173.212.247.242 | 2019-02-17 02:09:32 | sipinvitation 51167 | CONTABO, DE | 173.212.250.115 | 2019-02-20 02:51:10 | sipinvitation 61317 | ASDETUK http://www.host1plus.c | 102.165.48.8 | 2019-02-23 03:37:42 | sipinvitation 61317 | ASDETUK http://www.host1plus.c | 102.165.36.88 | 2019-02-21 00:33:40 | sipinvitation 61317 | ASDETUK http://www.host1plus.c | 102.165.52.222 | 2019-02-19 21:02:20 | sipinvitation 199264 | CLOUDSTAR CLOUD STAR HOSTING S | 185.53.91.66 | 2019-02-23 03:24:56 | sipinvitation 199264 | CLOUDSTAR CLOUD STAR HOSTING S | 185.53.91.62 | 2019-02-21 10:22:49 | sipinvitation 199264 | CLOUDSTAR CLOUD STAR HOSTING S | 37.49.231.56 | 2019-02-23 01:24:03 | sipinvitation 199264 | CLOUDSTAR CLOUD STAR HOSTING S | 185.53.91.6 | 2019-02-21 16:53:31 | sipinvitation 199264 | CLOUDSTAR CLOUD STAR HOSTING S | 185.53.88.60 | 2019-02-23 01:25:23 | sipinvitation 199264 | CLOUDSTAR CLOUD STAR HOSTING S | 37.49.231.171 | 2019-02-22 20:27:30 | sipinvitation 199264 | CLOUDSTAR CLOUD STAR HOSTING S | 37.49.231.235 | 2019-02-22 16:17:52 | sipinvitation 199264 | CLOUDSTAR CLOUD STAR HOSTING S | 37.49.231.87 | 2019-02-21 22:54:12 | sipinvitation 199264 | CLOUDSTAR CLOUD STAR HOSTING S | 185.53.88.84 | 2019-02-23 01:26:57 | sipinvitation 199264 | CLOUDSTAR CLOUD STAR HOSTING S | 185.53.88.41 | 2019-02-23 01:24:26 | sipinvitation 199264 | CLOUDSTAR CLOUD STAR HOSTING S | 37.49.231.161 | 2019-02-23 03:58:11 | sipinvitation 199264 | CLOUDSTAR CLOUD STAR HOSTING S | 185.53.91.30 | 2019-02-23 07:59:15 | sipinvitation 199264 | CLOUDSTAR CLOUD STAR HOSTING S | 185.53.91.46 | 2019-02-22 03:43:35 | sipinvitation # # Statistics # ASNs: 11 # Addresses: 38