# DataPlane.org - for operators, by operators # sipregistration # 2019-08-16 23:00 - 2019-08-23 23:00 # # The sipregistration report is free for non-commercial use ONLY. If # you wish to discuss commercial use of this service, please contact us # at info@dataplane.org. Redistribution of the sipregistration report # in whole or in part without the express permission of DataPlane is # expressly prohibited. # # This report is made possible through the generous support of people # like you. Sensor, processing and distribution systems require # non-free resources to setup and maintain. We are always looking for # financial contributions to help pay the bills and hosting to increase # visibility. If you find what we do useful, please consider supporting # us. # # This report is informational. It is not a block list, but some may # choose to use it to actively protect their networks and systems. The # report is provided on an as-is basis with no expressed warranty or # guarantee of accuracy. Use of this data is at your own risk. If you # have questions about this report do not hesitate to contact us. # # Entries below consist of fields with identifying characteristics of a # a source IP address that has been seen initiating a SIP REGISTER # operation to a remote host. This report lists hosts that are # suspicious of more than just port scanning. These hosts may be SIP # client cataloging or conducting various forms of telephony abuse. # Each entry is sorted according to a route origination ASN. An entry # for the IP address may be listed more than once if there are multiple # origin AS (MOAS) announcements for the covering prefix. We use the # Team Cymru IP address to ASN mapping service to construct an origin AS # number and name. For details about this Team Cymru service, see: # # . # # The report format is as follows: # # ASN | ASname | saddr | utc | category # # Each field is described below. Please note any special formatting # rules to aid in processing this file with automated tools and scripts. # Blank lines may be present to improve the visual display of this file. # Lines beginning with a hash ('#') character are comment lines. All # other lines are report entries. Each field is separated by a pipe # symbol ('|') and at least two whitespace characters on either side. # # ASN Autonomous system number originating a route for the entry # IP address. Note, 4-byte ASNs are supported and will be # displayed as a 32-bit integer. # # ASname A descriptive network name for the associated ASN. The # name is truncated to 30 characters. # # saddr The source IPv4 or IPv6 address that is being reported. # # utc A last seen timestamp formatted as YYYY-MM-DD HH:MM:SS # and in UTC time. # # category Descriptive tag name for this entry. For this report, # the text sipregistration will appear. # # A commented footer section shows an aggregate count of ASNs and # addresses seen in the current report. # 4134 | CHINANET-BACKBONE No.31,Jin-ro | 116.7.8.254 | 2019-08-19 17:02:02 | sipregistration 4134 | CHINANET-BACKBONE No.31,Jin-ro | 1.196.157.49 | 2019-08-22 07:28:19 | sipregistration 4134 | CHINANET-BACKBONE No.31,Jin-ro | 123.178.231.130 | 2019-08-17 11:04:01 | sipregistration 4134 | CHINANET-BACKBONE No.31,Jin-ro | 182.40.206.18 | 2019-08-18 10:24:18 | sipregistration 4808 | CHINA169-BJ China Unicom Beiji | 106.75.84.197 | 2019-08-20 01:14:21 | sipregistration 4808 | CHINA169-BJ China Unicom Beiji | 106.75.64.59 | 2019-08-17 00:24:56 | sipregistration 4808 | CHINA169-BJ China Unicom Beiji | 117.50.6.160 | 2019-08-23 08:07:52 | sipregistration 4808 | CHINA169-BJ China Unicom Beiji | 117.50.5.94 | 2019-08-20 05:51:01 | sipregistration 4808 | CHINA169-BJ China Unicom Beiji | 117.50.7.159 | 2019-08-21 22:24:07 | sipregistration 4808 | CHINA169-BJ China Unicom Beiji | 106.75.79.172 | 2019-08-20 22:11:42 | sipregistration 4808 | CHINA169-BJ China Unicom Beiji | 106.75.2.81 | 2019-08-18 02:30:20 | sipregistration 4808 | CHINA169-BJ China Unicom Beiji | 106.75.3.52 | 2019-08-20 13:37:25 | sipregistration 4808 | CHINA169-BJ China Unicom Beiji | 106.75.106.221 | 2019-08-21 11:42:48 | sipregistration 4808 | CHINA169-BJ China Unicom Beiji | 117.50.63.227 | 2019-08-23 01:09:10 | sipregistration 4837 | CHINA169-BACKBONE CHINA UNICOM | 221.10.206.191 | 2019-08-22 22:39:41 | sipregistration 9009 | M247, GB | 185.245.84.58 | 2019-08-22 21:27:50 | sipregistration 12876 | AS12876, FR | 195.154.41.15 | 2019-08-22 17:42:13 | sipregistration 12876 | AS12876, FR | 195.154.40.99 | 2019-08-23 00:36:53 | sipregistration 12876 | AS12876, FR | 195.154.38.114 | 2019-08-23 13:18:34 | sipregistration 12876 | AS12876, FR | 212.83.164.247 | 2019-08-19 22:37:14 | sipregistration 12876 | AS12876, FR | 212.83.148.177 | 2019-08-17 16:02:36 | sipregistration 12876 | AS12876, FR | 212.129.3.22 | 2019-08-22 15:41:47 | sipregistration 12876 | AS12876, FR | 163.172.109.70 | 2019-08-17 18:12:33 | sipregistration 12876 | AS12876, FR | 195.154.40.170 | 2019-08-23 14:50:43 | sipregistration 12876 | AS12876, FR | 212.83.144.113 | 2019-08-23 11:10:37 | sipregistration 12876 | AS12876, FR | 212.83.149.170 | 2019-08-22 07:30:15 | sipregistration 12876 | AS12876, FR | 212.83.153.110 | 2019-08-23 22:03:17 | sipregistration 12876 | AS12876, FR | 212.83.129.157 | 2019-08-20 12:42:39 | sipregistration 12876 | AS12876, FR | 212.83.141.87 | 2019-08-22 23:56:13 | sipregistration 14061 | DIGITALOCEAN-ASN - DigitalOcea | 206.189.56.81 | 2019-08-23 13:12:33 | sipregistration 16276 | OVH, FR | 54.37.130.172 | 2019-08-20 23:05:55 | sipregistration 23724 | CHINANET-IDC-BJ-AP IDC, China | 119.61.6.133 | 2019-08-23 08:55:33 | sipregistration 29066 | VELIANET-AS velia.net Internet | 185.19.216.246 | 2019-08-23 22:55:02 | sipregistration 34300 | SPACENET-AS Internet Service P | 62.173.149.65 | 2019-08-22 17:05:39 | sipregistration 209299 | VITOX-TELECOM VITOX TELECOM, N | 77.247.110.233 | 2019-08-20 22:10:42 | sipregistration 209299 | VITOX-TELECOM VITOX TELECOM, N | 77.247.110.216 | 2019-08-23 22:15:47 | sipregistration 209299 | VITOX-TELECOM VITOX TELECOM, N | 77.247.110.26 | 2019-08-22 20:34:01 | sipregistration 209299 | VITOX-TELECOM VITOX TELECOM, N | 77.247.110.27 | 2019-08-22 22:29:37 | sipregistration 209299 | VITOX-TELECOM VITOX TELECOM, N | 77.247.110.24 | 2019-08-20 10:54:47 | sipregistration 209299 | VITOX-TELECOM VITOX TELECOM, N | 185.53.88.56 | 2019-08-22 20:53:07 | sipregistration 209299 | VITOX-TELECOM VITOX TELECOM, N | 77.247.108.182 | 2019-08-23 00:56:42 | sipregistration # # Statistics # ASNs: 11 # Addresses: 41