# DataPlane.org - for operators, by operators # sipinvitation # 2020-11-24 23:00 - 2020-12-01 23:00 # # The sipinvitation report is free for non-commercial use ONLY. If you # wish to discuss commercial use of this service, please contact us at # info@dataplane.org. Redistribution of the sipinvitation report in # whole or in part without the express permission of DataPlane is # expressly prohibited. # # This report is made possible through the generous support of people # like you. Sensor, processing and distribution systems require # non-free resources to setup and maintain. We are always looking for # financial contributions to help pay the bills and hosting to increase # visibility. If you find what we do useful, please consider supporting # us. # # This report is informational. It is not a block list, but some may # choose to use it to actively protect their networks and systems. The # report is provided on an as-is basis with no expressed warranty or # guarantee of accuracy. Use of this data is at your own risk. If you # have questions about this report do not hesitate to contact us. # # Entries below consist of fields with identifying characteristics of a # a source IP address that has been seen initiating a SIP INVITE # operation to a remote host. This report lists hosts that are # suspicious of more than just port scanning. These hosts may be SIP # client cataloging or conducting various forms of telephony abuse. # Each entry is sorted according to a route origination ASN. An entry # for the IP address may be listed more than once if there are multiple # origin AS (MOAS) announcements for the covering prefix. We use the # Team Cymru IP address to ASN mapping service to construct an origin AS # number and name. For details about this Team Cymru service, see: # # . # # The report format is as follows: # # ASN | ASname | saddr | utc | category # # Each field is described below. Please note any special formatting # rules to aid in processing this file with automated tools and scripts. # Blank lines may be present to improve the visual display of this file. # Lines beginning with a hash ('#') character are comment lines. All # other lines are report entries. Each field is separated by a pipe # symbol ('|') and at least two whitespace characters on either side. # # ASN Autonomous system number originating a route for the entry # IP address. Note, 4-byte ASNs are supported and will be # displayed as a 32-bit integer. # # ASname A descriptive network name for the associated ASN. The # name is truncated to 30 characters. # # saddr The source IPv4 or IPv6 address that is being reported. # # utc A last seen timestamp formatted as YYYY-MM-DD HH:MM:SS # and in UTC time. # # category Descriptive tag name for this entry. For this report, # the text sipinvitation will appear. # # A commented footer section shows an aggregate count of ASNs and # addresses seen in the current report. # NA | NA | 156.96.128.142 | 2020-11-30 16:28:30 | sipinvitation NA | NA | 156.96.117.151 | 2020-11-29 11:55:59 | sipinvitation 4766 | KIXS-AS-KR Korea Telecom, KR | 14.54.237.7 | 2020-12-01 03:39:17 | sipinvitation 7489 | HOSTUS-GLOBAL-AS HostUS, HK | 45.249.91.246 | 2020-11-28 11:39:34 | sipinvitation 7922 | COMCAST-7922, US | 96.86.67.234 | 2020-12-01 21:33:52 | sipinvitation 8075 | MICROSOFT-CORP-MSN-AS-BLOCK, U | 20.51.214.254 | 2020-11-25 22:02:48 | sipinvitation 8075 | MICROSOFT-CORP-MSN-AS-BLOCK, U | 13.74.165.56 | 2020-11-26 19:35:52 | sipinvitation 8075 | MICROSOFT-CORP-MSN-AS-BLOCK, U | 20.37.45.217 | 2020-11-30 02:07:17 | sipinvitation 8075 | MICROSOFT-CORP-MSN-AS-BLOCK, U | 40.82.199.4 | 2020-11-25 21:47:57 | sipinvitation 8075 | MICROSOFT-CORP-MSN-AS-BLOCK, U | 52.186.156.89 | 2020-12-01 00:08:34 | sipinvitation 8075 | MICROSOFT-CORP-MSN-AS-BLOCK, U | 52.167.52.250 | 2020-11-29 03:23:35 | sipinvitation 8075 | MICROSOFT-CORP-MSN-AS-BLOCK, U | 40.82.198.187 | 2020-11-26 10:00:12 | sipinvitation 8075 | MICROSOFT-CORP-MSN-AS-BLOCK, U | 40.121.93.149 | 2020-11-30 11:30:22 | sipinvitation 8075 | MICROSOFT-CORP-MSN-AS-BLOCK, U | 20.51.221.172 | 2020-11-26 17:38:04 | sipinvitation 9009 | M247 M247 Ltd, GB | 217.138.198.188 | 2020-12-01 13:58:25 | sipinvitation 9009 | M247 M247 Ltd, GB | 217.138.206.44 | 2020-12-01 15:39:16 | sipinvitation 9009 | M247 M247 Ltd, GB | 5.181.234.212 | 2020-12-01 22:47:34 | sipinvitation 12876 | AS12876 ONLINE S.A.S., FR | 195.154.60.3 | 2020-11-26 14:11:38 | sipinvitation 12876 | AS12876 ONLINE S.A.S., FR | 195.154.63.224 | 2020-11-30 09:30:28 | sipinvitation 12876 | AS12876 ONLINE S.A.S., FR | 51.159.93.108 | 2020-11-25 09:31:39 | sipinvitation 12876 | AS12876 ONLINE S.A.S., FR | 51.158.29.191 | 2020-12-01 22:38:22 | sipinvitation 12876 | AS12876 ONLINE S.A.S., FR | 62.210.101.43 | 2020-12-01 05:17:22 | sipinvitation 12876 | AS12876 ONLINE S.A.S., FR | 163.172.106.39 | 2020-12-01 14:12:12 | sipinvitation 12876 | AS12876 ONLINE S.A.S., FR | 195.154.182.69 | 2020-12-01 16:38:38 | sipinvitation 14061 | DIGITALOCEAN-ASN, US | 167.71.140.42 | 2020-11-30 11:28:57 | sipinvitation 14061 | DIGITALOCEAN-ASN, US | 192.241.204.192 | 2020-12-01 18:49:11 | sipinvitation 14061 | DIGITALOCEAN-ASN, US | 162.243.15.192 | 2020-12-01 21:58:25 | sipinvitation 14061 | DIGITALOCEAN-ASN, US | 167.172.58.127 | 2020-12-01 03:09:16 | sipinvitation 14061 | DIGITALOCEAN-ASN, US | 107.170.100.124 | 2020-12-01 20:58:32 | sipinvitation 14061 | DIGITALOCEAN-ASN, US | 157.230.220.179 | 2020-11-28 17:40:59 | sipinvitation 14061 | DIGITALOCEAN-ASN, US | 139.59.159.0 | 2020-11-27 01:42:03 | sipinvitation 14061 | DIGITALOCEAN-ASN, US | 178.62.112.122 | 2020-12-01 17:36:31 | sipinvitation 14929 | VITELITY, US | 207.166.131.243 | 2020-12-01 22:07:59 | sipinvitation 14929 | VITELITY, US | 207.166.131.238 | 2020-12-01 11:33:59 | sipinvitation 15964 | CAMNET-AS, CM | 154.72.188.230 | 2020-11-30 00:49:41 | sipinvitation 16276 | OVH OVH SAS, FR | 149.56.186.152 | 2020-11-28 04:13:21 | sipinvitation 16276 | OVH OVH SAS, FR | 54.36.123.206 | 2020-12-01 00:55:38 | sipinvitation 16276 | OVH OVH SAS, FR | 51.75.242.212 | 2020-11-26 21:52:31 | sipinvitation 16276 | OVH OVH SAS, FR | 145.239.51.233 | 2020-12-01 05:50:27 | sipinvitation 16276 | OVH OVH SAS, FR | 142.44.214.3 | 2020-12-01 16:48:41 | sipinvitation 16276 | OVH OVH SAS, FR | 142.44.213.196 | 2020-12-01 17:33:43 | sipinvitation 16276 | OVH OVH SAS, FR | 198.50.157.19 | 2020-12-01 21:57:01 | sipinvitation 16276 | OVH OVH SAS, FR | 66.70.176.173 | 2020-12-01 02:25:05 | sipinvitation 20714 | Merlin-Telecom "Merlin-Telekom | 195.214.196.234 | 2020-11-29 20:19:24 | sipinvitation 35913 | DEDIPATH-LLC, US | 185.240.246.4 | 2020-12-01 22:22:19 | sipinvitation 37153 | xneelo, ZA | 160.119.253.232 | 2020-11-25 05:11:01 | sipinvitation 39845 | LV-2CLOUD-ASN16 2 Cloud Ltd., | 185.176.220.239 | 2020-11-30 14:41:15 | sipinvitation 39845 | LV-2CLOUD-ASN16 2 Cloud Ltd., | 185.176.220.5 | 2020-12-01 22:00:24 | sipinvitation 39845 | LV-2CLOUD-ASN16 2 Cloud Ltd., | 185.176.220.182 | 2020-12-01 20:37:20 | sipinvitation 46562 | PERFORMIVE, US | 172.98.72.203 | 2020-11-27 09:45:21 | sipinvitation 46664 | VDI-NETWORK, US | 45.249.91.246 | 2020-11-28 11:39:34 | sipinvitation 49223 | EVEREST-AS "Everest" Broadcast | 185.43.236.66 | 2020-12-01 22:54:36 | sipinvitation 50113 | SuperServersDatacenter NTX Tec | 185.40.4.108 | 2020-12-01 12:46:53 | sipinvitation 56493 | DLINE-AS Dream Line OOO, RU | 91.224.206.27 | 2020-12-01 18:42:24 | sipinvitation 62068 | SpectraIP SpectraIP B.V., NL | 45.87.43.10 | 2020-12-01 17:35:43 | sipinvitation 62068 | SpectraIP SpectraIP B.V., NL | 45.14.224.68 | 2020-11-25 11:36:58 | sipinvitation 62240 | Clouvider Clouvider Limited, G | 62.182.99.89 | 2020-12-01 20:08:45 | sipinvitation 133334 | DCNBSI-AS-AP DCTV Cable Networ | 103.225.136.151 | 2020-12-01 20:16:35 | sipinvitation 201814 | PL-SKYTECH-AS Meverywhere sp. | 193.32.8.51 | 2020-12-01 15:41:16 | sipinvitation 201814 | PL-SKYTECH-AS Meverywhere sp. | 193.32.8.64 | 2020-12-01 21:31:48 | sipinvitation 201814 | PL-SKYTECH-AS Meverywhere sp. | 193.32.8.17 | 2020-11-25 21:58:18 | sipinvitation 201814 | PL-SKYTECH-AS Meverywhere sp. | 193.32.8.74 | 2020-11-30 09:49:55 | sipinvitation 201814 | PL-SKYTECH-AS Meverywhere sp. | 193.32.8.19 | 2020-11-25 22:00:37 | sipinvitation 201814 | PL-SKYTECH-AS Meverywhere sp. | 193.32.8.75 | 2020-11-30 10:40:31 | sipinvitation 201814 | PL-SKYTECH-AS Meverywhere sp. | 193.32.8.48 | 2020-11-30 22:05:03 | sipinvitation 201814 | PL-SKYTECH-AS Meverywhere sp. | 193.32.8.49 | 2020-12-01 15:39:29 | sipinvitation 201814 | PL-SKYTECH-AS Meverywhere sp. | 193.32.8.61 | 2020-11-26 13:19:33 | sipinvitation 201814 | PL-SKYTECH-AS Meverywhere sp. | 193.32.8.54 | 2020-12-01 21:03:41 | sipinvitation 201814 | PL-SKYTECH-AS Meverywhere sp. | 193.32.8.42 | 2020-11-30 15:31:59 | sipinvitation 201814 | PL-SKYTECH-AS Meverywhere sp. | 193.32.8.85 | 2020-11-28 15:07:16 | sipinvitation 201814 | PL-SKYTECH-AS Meverywhere sp. | 193.32.8.84 | 2020-12-01 22:47:27 | sipinvitation 201814 | PL-SKYTECH-AS Meverywhere sp. | 193.32.8.70 | 2020-12-01 22:44:38 | sipinvitation 201814 | PL-SKYTECH-AS Meverywhere sp. | 193.32.8.77 | 2020-11-28 18:54:16 | sipinvitation 201814 | PL-SKYTECH-AS Meverywhere sp. | 193.32.8.60 | 2020-11-27 23:17:08 | sipinvitation 201814 | PL-SKYTECH-AS Meverywhere sp. | 193.32.8.81 | 2020-11-27 01:54:45 | sipinvitation 201814 | PL-SKYTECH-AS Meverywhere sp. | 193.32.8.50 | 2020-12-01 15:40:58 | sipinvitation 201814 | PL-SKYTECH-AS Meverywhere sp. | 193.32.8.52 | 2020-12-01 20:55:56 | sipinvitation 201814 | PL-SKYTECH-AS Meverywhere sp. | 193.32.8.66 | 2020-12-01 22:59:00 | sipinvitation 202053 | UPCLOUD UpCloud Ltd, FI | 94.237.65.139 | 2020-11-30 13:12:24 | sipinvitation 213371 | SQUITTER-NETWORKS ABC Consulta | 80.94.93.62 | 2020-12-01 19:12:06 | sipinvitation 213371 | SQUITTER-NETWORKS ABC Consulta | 37.49.229.41 | 2020-11-30 06:42:35 | sipinvitation 213371 | SQUITTER-NETWORKS ABC Consulta | 37.49.230.153 | 2020-11-28 20:29:54 | sipinvitation 213371 | SQUITTER-NETWORKS ABC Consulta | 103.145.13.115 | 2020-12-01 14:17:32 | sipinvitation 213371 | SQUITTER-NETWORKS ABC Consulta | 103.145.13.109 | 2020-12-01 22:09:54 | sipinvitation 213371 | SQUITTER-NETWORKS ABC Consulta | 80.94.93.57 | 2020-11-28 23:38:26 | sipinvitation 213371 | SQUITTER-NETWORKS ABC Consulta | 37.49.230.232 | 2020-12-01 01:20:46 | sipinvitation 213371 | SQUITTER-NETWORKS ABC Consulta | 45.143.221.110 | 2020-11-27 09:47:19 | sipinvitation 213371 | SQUITTER-NETWORKS ABC Consulta | 103.145.12.47 | 2020-12-01 22:16:32 | sipinvitation 213371 | SQUITTER-NETWORKS ABC Consulta | 37.49.230.203 | 2020-11-28 05:05:37 | sipinvitation 213371 | SQUITTER-NETWORKS ABC Consulta | 103.145.13.171 | 2020-11-26 00:37:35 | sipinvitation 213371 | SQUITTER-NETWORKS ABC Consulta | 37.49.230.170 | 2020-12-01 02:07:01 | sipinvitation 265505 | INTELVID S.A. DE C.V., MX | 45.6.63.64 | 2020-11-29 10:34:07 | sipinvitation # # Statistics # ASNs: 26 # Addresses: 91