# DataPlane.org - for operators, by operators # sipinvitation # 2019-12-04 03:00 - 2019-12-11 03:00 # # The sipinvitation report is free for non-commercial use ONLY. If you # wish to discuss commercial use of this service, please contact us at # info@dataplane.org. Redistribution of the sipinvitation report in # whole or in part without the express permission of DataPlane is # expressly prohibited. # # This report is made possible through the generous support of people # like you. Sensor, processing and distribution systems require # non-free resources to setup and maintain. We are always looking for # financial contributions to help pay the bills and hosting to increase # visibility. If you find what we do useful, please consider supporting # us. # # This report is informational. It is not a block list, but some may # choose to use it to actively protect their networks and systems. The # report is provided on an as-is basis with no expressed warranty or # guarantee of accuracy. Use of this data is at your own risk. If you # have questions about this report do not hesitate to contact us. # # Entries below consist of fields with identifying characteristics of a # a source IP address that has been seen initiating a SIP INVITE # operation to a remote host. This report lists hosts that are # suspicious of more than just port scanning. These hosts may be SIP # client cataloging or conducting various forms of telephony abuse. # Each entry is sorted according to a route origination ASN. An entry # for the IP address may be listed more than once if there are multiple # origin AS (MOAS) announcements for the covering prefix. We use the # Team Cymru IP address to ASN mapping service to construct an origin AS # number and name. For details about this Team Cymru service, see: # # . # # The report format is as follows: # # ASN | ASname | saddr | utc | category # # Each field is described below. Please note any special formatting # rules to aid in processing this file with automated tools and scripts. # Blank lines may be present to improve the visual display of this file. # Lines beginning with a hash ('#') character are comment lines. All # other lines are report entries. Each field is separated by a pipe # symbol ('|') and at least two whitespace characters on either side. # # ASN Autonomous system number originating a route for the entry # IP address. Note, 4-byte ASNs are supported and will be # displayed as a 32-bit integer. # # ASname A descriptive network name for the associated ASN. The # name is truncated to 30 characters. # # saddr The source IPv4 or IPv6 address that is being reported. # # utc A last seen timestamp formatted as YYYY-MM-DD HH:MM:SS # and in UTC time. # # category Descriptive tag name for this entry. For this report, # the text sipinvitation will appear. # # A commented footer section shows an aggregate count of ASNs and # addresses seen in the current report. # 8075 | MICROSOFT-CORP-MSN-AS-BLOCK - | 13.67.108.86 | 2019-12-10 02:55:55 | sipinvitation 8075 | MICROSOFT-CORP-MSN-AS-BLOCK - | 13.90.230.34 | 2019-12-10 14:57:32 | sipinvitation 12876 | Online SAS, FR | 62.210.28.186 | 2019-12-11 01:58:20 | sipinvitation 12876 | Online SAS, FR | 212.83.163.170 | 2019-12-11 00:18:31 | sipinvitation 12876 | Online SAS, FR | 51.158.21.170 | 2019-12-10 07:06:49 | sipinvitation 12876 | Online SAS, FR | 51.159.30.213 | 2019-12-09 13:57:42 | sipinvitation 12876 | Online SAS, FR | 51.15.146.74 | 2019-12-10 09:46:22 | sipinvitation 12876 | Online SAS, FR | 163.172.4.100 | 2019-12-10 22:36:09 | sipinvitation 12876 | Online SAS, FR | 62.210.90.177 | 2019-12-10 04:34:13 | sipinvitation 12876 | Online SAS, FR | 212.83.190.35 | 2019-12-11 00:57:34 | sipinvitation 12876 | Online SAS, FR | 195.154.38.114 | 2019-12-11 02:49:57 | sipinvitation 12876 | Online SAS, FR | 212.83.163.62 | 2019-12-10 10:58:23 | sipinvitation 12876 | Online SAS, FR | 212.83.140.139 | 2019-12-10 11:02:26 | sipinvitation 12876 | Online SAS, FR | 62.210.189.241 | 2019-12-10 13:21:11 | sipinvitation 12975 | PALTEL-AS PALTEL Autonomous Sy | 158.140.96.26 | 2019-12-05 11:48:21 | sipinvitation 12975 | PALTEL-AS PALTEL Autonomous Sy | 188.161.168.231 | 2019-12-04 23:11:15 | sipinvitation 16276 | OVH, FR | 51.79.121.113 | 2019-12-10 23:46:35 | sipinvitation 16276 | OVH, FR | 54.37.76.252 | 2019-12-06 11:56:36 | sipinvitation 16276 | OVH, FR | 5.135.72.183 | 2019-12-10 21:17:53 | sipinvitation 16276 | OVH, FR | 51.91.90.178 | 2019-12-10 20:57:57 | sipinvitation 16276 | OVH, FR | 176.31.131.255 | 2019-12-10 21:15:41 | sipinvitation 23033 | WOW - Wowrack.com, US | 216.244.65.114 | 2019-12-11 01:20:04 | sipinvitation 23033 | WOW - Wowrack.com, US | 216.244.65.130 | 2019-12-11 00:24:35 | sipinvitation 24940 | HETZNER-AS, DE | 95.216.166.210 | 2019-12-04 15:02:34 | sipinvitation 29550 | SIMPLYTRANSIT, GB | 31.193.136.163 | 2019-12-05 00:37:25 | sipinvitation 29791 | VOXEL-DOT-NET - Internap Corpo | 64.95.98.37 | 2019-12-09 20:28:29 | sipinvitation 30823 | COMBAHTON combahton GmbH, DE | 45.11.19.111 | 2019-12-09 21:50:18 | sipinvitation 34056 | KIEVNET KievNet ISP AS, UA | 46.229.55.92 | 2019-12-06 15:41:43 | sipinvitation 36352 | AS-COLOCROSSING - ColoCrossing | 192.227.144.220 | 2019-12-05 19:12:21 | sipinvitation 45706 | TGG-AS-ID Tele Globe Global, P | 150.107.251.38 | 2019-12-07 13:36:17 | sipinvitation 46475 | LIMESTONENETWORKS - Limestone | 74.63.227.26 | 2019-12-06 20:35:08 | sipinvitation 46475 | LIMESTONENETWORKS - Limestone | 216.245.210.78 | 2019-12-09 17:17:47 | sipinvitation 57704 | SPEED-CLICK-LTD, PS | 176.106.46.97 | 2019-12-05 09:15:56 | sipinvitation 199653 | ARUBAFR-AS, FR | 185.35.64.187 | 2019-12-10 09:46:45 | sipinvitation 202242 | ARUBA-CLOUD, IT | 217.61.60.65 | 2019-12-10 09:07:06 | sipinvitation 205727 | ARUBA, PL | 80.211.241.29 | 2019-12-10 08:37:06 | sipinvitation 208666 | ESTROWEB, NL | 37.49.230.34 | 2019-12-06 11:36:30 | sipinvitation 208666 | ESTROWEB, NL | 37.49.230.47 | 2019-12-06 11:20:46 | sipinvitation 208666 | ESTROWEB, NL | 37.49.230.57 | 2019-12-11 01:43:59 | sipinvitation 208666 | ESTROWEB, NL | 37.49.230.33 | 2019-12-11 01:17:00 | sipinvitation 209299 | VITOX-TELECOM VITOX TELECOM, N | 37.49.231.102 | 2019-12-08 22:14:03 | sipinvitation 209299 | VITOX-TELECOM VITOX TELECOM, N | 45.143.220.100 | 2019-12-05 04:48:30 | sipinvitation 209299 | VITOX-TELECOM VITOX TELECOM, N | 77.247.109.46 | 2019-12-10 22:05:56 | sipinvitation 209299 | VITOX-TELECOM VITOX TELECOM, N | 185.53.88.11 | 2019-12-04 03:31:47 | sipinvitation 209299 | VITOX-TELECOM VITOX TELECOM, N | 37.49.231.129 | 2019-12-10 20:52:50 | sipinvitation 209299 | VITOX-TELECOM VITOX TELECOM, N | 77.247.109.37 | 2019-12-10 17:31:50 | sipinvitation 209299 | VITOX-TELECOM VITOX TELECOM, N | 185.53.88.16 | 2019-12-04 03:08:37 | sipinvitation 209299 | VITOX-TELECOM VITOX TELECOM, N | 185.53.88.15 | 2019-12-04 03:02:14 | sipinvitation 209299 | VITOX-TELECOM VITOX TELECOM, N | 37.49.229.169 | 2019-12-10 17:47:59 | sipinvitation 209299 | VITOX-TELECOM VITOX TELECOM, N | 185.53.88.17 | 2019-12-04 03:38:52 | sipinvitation 209299 | VITOX-TELECOM VITOX TELECOM, N | 45.143.220.112 | 2019-12-08 19:59:12 | sipinvitation 209299 | VITOX-TELECOM VITOX TELECOM, N | 77.247.110.245 | 2019-12-11 02:06:45 | sipinvitation 209299 | VITOX-TELECOM VITOX TELECOM, N | 37.49.231.131 | 2019-12-11 01:33:47 | sipinvitation 209299 | VITOX-TELECOM VITOX TELECOM, N | 185.53.88.14 | 2019-12-04 03:31:34 | sipinvitation 209299 | VITOX-TELECOM VITOX TELECOM, N | 185.53.88.19 | 2019-12-04 03:37:28 | sipinvitation 209299 | VITOX-TELECOM VITOX TELECOM, N | 37.49.231.108 | 2019-12-10 20:10:02 | sipinvitation 396073 | MAJESTIC-HOSTING-01 - Majestic | 104.37.174.24 | 2019-12-11 01:09:11 | sipinvitation # # Statistics # ASNs: 20 # Addresses: 57