ONYPHE
datascan ctl threatlist sniffer vulnscan riskscan

Returning 10 result(s) out of 2,683,531 in 0.094 second(s)

  • 85.154.191.198:5060 (udp/sip) - last seen on 2024-11-01 at 02:22:12 UTC

    • IP
      85.154.191.198
      Network
      85.154.0.0/16
      Device

      <enterprise field>: device.class

      ASN
      AS28885
      Organization
      Oman Telecommunications Company (S.A.O.G)
      Protocol
      sip
      Source
      udpscan

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      2857c471b660275518944f3b3f6cc226 
    • OPTIONS sip:nm SIP/2.0\x0d
Via: SIP/2.0/UDP nm;branch=foo;rport\x0d
From: <sip:nm@nm>;tag=root\x0d
To: <sip:nm2@nm2>\x0d
Call-ID: 50000\x0d
CSeq: 42 OPTIONS\x0d
Max-Forwards: 70\x0d
Content-Length: 0\x0d
Contact: <sip:nm@nm>\x0d
Accept: application/sdp\x0d
\x0d

    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-01T02:22:12.000Z",
   "app" : {
      "length" : "229"
   },
   "asn" : "AS28885",
   "city" : "Salalah",
   "country" : "OM",
   "data" : "OPTIONS sip:nm SIP/2.0\\x0d\nVia: SIP/2.0/UDP nm;branch=foo;rport\\x0d\nFrom: <sip:nm@nm>;tag=root\\x0d\nTo: <sip:nm2@nm2>\\x0d\nCall-ID: 50000\\x0d\nCSeq: 42 OPTIONS\\x0d\nMax-Forwards: 70\\x0d\nContent-Length: 0\\x0d\nContact: <sip:nm@nm>\\x0d\nAccept: application/sdp\\x0d\n\\x0d\n",
   "datamd5" : "2857c471b660275518944f3b3f6cc226",
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS19905",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "OM",
      "countryname" : "Oman",
      "isineu" : "false",
      "latitude" : "21.512583",
      "location" : "21.512583,55.923255",
      "longitude" : "55.923255",
      "netname" : "OM-GTO-OMAN-20041101",
      "organization" : "Oman Telecommunications Company (S.A.O.G)",
      "subnet" : "85.154.0.0/16"
   },
   "ip" : "85.154.191.198",
   "ipv6" : "false",
   "latitude" : "16.9930",
   "location" : "16.9930,54.0931",
   "longitude" : "54.0931",
   "organization" : "Oman Telecommunications Company (S.A.O.G)",
   "port" : "5060",
   "protocol" : "sip",
   "seen_date" : "2024-11-01",
   "source" : "udpscan",
   "subnet" : "85.154.0.0/16",
   "tls" : "false",
   "transport" : "udp"
}

  • 79.19.67.145:5060 (udp/sip) - last seen on 2024-11-01 at 02:22:12 UTC

    • IP
      79.19.67.145
      Network
      79.0.0.0/11
      Domain(s)
      telecomitalia.it
      Device

      <enterprise field>: device.class

      Reverse DNS
      host-79-19-67-145.retail.telecomitalia.it
      ASN
      AS3269
      Organization
      TIM
      Protocol
      sip
      Source
      udpscan

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      4988dbdb79cfb8a7434f0b3a813be2f5 
    • SIP/2.0 200 OK\x0d
Via: SIP/2.0/UDP nm;rport=48384;received=<srcip>;branch=foo\x0d
Call-ID: 50000\x0d
From: <sip:nm@nm>;tag=root\x0d
To: <sip:nm2@nm2>;tag=foo\x0d
CSeq: 42 OPTIONS\x0d
Allow: PRACK, INVITE, ACK, BYE, CANCEL, UPDATE, SUBSCRIBE, NOTIFY, REFER, OPTIONS\x0d
Accept: application/sdp, application/simple-message-summary, message/sipfrag;version=2.0\x0d
Supported: replaces, 100rel, timer, norefersub\x0d
Allow-Events: message-summary, refer\x0d
User-Agent: TP-Link SIP Stack V1.0.0\x0d
Content-Type: application/sdp\x0d
Content-Length:   330\x0d
\x0d
v=0\x0d
o=- 3939416523 3939416523 IN IP4 <ip>\x0d
s=pjmedia\x0d
c=IN IP4 <ip>\x0d
t=0 0\x0d
m=audio 60840 RTP/AVP 0 8 9 2 110 18\x0d
a=rtcp:60841 IN IP4 <ip>\x0d
a=rtpmap:0 PCMU/8000\x0d
a=rtpmap:8 PCMA/8000\x0d
a=rtpmap:9 G722/16000\x0d
a=rtpmap:2 G726-32/8000\x0d
a=rtpmap:110 G726-32/8000\x0d
a=rtpmap:18 G729/8000\x0d
a=sendrecv\x0d
a=ptime:0\x0d

    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-01T02:22:12.000Z",
   "app" : {
      "length" : "825"
   },
   "asn" : "AS3269",
   "city" : "Poncarale",
   "country" : "IT",
   "data" : "SIP/2.0 200 OK\\x0d\nVia: SIP/2.0/UDP nm;rport=48384;received=<srcip>;branch=foo\\x0d\nCall-ID: 50000\\x0d\nFrom: <sip:nm@nm>;tag=root\\x0d\nTo: <sip:nm2@nm2>;tag=foo\\x0d\nCSeq: 42 OPTIONS\\x0d\nAllow: PRACK, INVITE, ACK, BYE, CANCEL, UPDATE, SUBSCRIBE, NOTIFY, REFER, OPTIONS\\x0d\nAccept: application/sdp, application/simple-message-summary, message/sipfrag;version=2.0\\x0d\nSupported: replaces, 100rel, timer, norefersub\\x0d\nAllow-Events: message-summary, refer\\x0d\nUser-Agent: TP-Link SIP Stack V1.0.0\\x0d\nContent-Type: application/sdp\\x0d\nContent-Length:   330\\x0d\n\\x0d\nv=0\\x0d\no=- 3939416523 3939416523 IN IP4 <ip>\\x0d\ns=pjmedia\\x0d\nc=IN IP4 <ip>\\x0d\nt=0 0\\x0d\nm=audio 60840 RTP/AVP 0 8 9 2 110 18\\x0d\na=rtcp:60841 IN IP4 <ip>\\x0d\na=rtpmap:0 PCMU/8000\\x0d\na=rtpmap:8 PCMA/8000\\x0d\na=rtpmap:9 G722/16000\\x0d\na=rtpmap:2 G726-32/8000\\x0d\na=rtpmap:110 G726-32/8000\\x0d\na=rtpmap:18 G729/8000\\x0d\na=sendrecv\\x0d\na=ptime:0\\x0d\n",
   "datamd5" : "4988dbdb79cfb8a7434f0b3a813be2f5",
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "telecomitalia.it"
   ],
   "geolocus" : {
      "asn" : "AS3269",
      "continent" : "EU",
      "continentname" : "Europe",
      "country" : "IT",
      "countryname" : "Italy",
      "isineu" : "true",
      "latitude" : "41.87194",
      "location" : "41.87194,12.56738",
      "longitude" : "12.56738",
      "netname" : "TELECOM-ADSL-POOL",
      "organization" : "INTERBUSINESS",
      "subnet" : "79.19.0.0/17"
   },
   "host" : [
      "host-79-19-67-145"
   ],
   "hostname" : [
      "host-79-19-67-145.retail.telecomitalia.it"
   ],
   "ip" : "79.19.67.145",
   "ipv6" : "false",
   "latitude" : "45.4596",
   "location" : "45.4596,10.1787",
   "longitude" : "10.1787",
   "organization" : "TIM",
   "port" : "5060",
   "protocol" : "sip",
   "reverse" : [
      "host-79-19-67-145.retail.telecomitalia.it"
   ],
   "seen_date" : "2024-11-01",
   "source" : "udpscan",
   "subdomains" : [
      "retail.telecomitalia.it"
   ],
   "subnet" : "79.0.0.0/11",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "it"
   ],
   "tls" : "false",
   "transport" : "udp"
}

  • 149.71.54.145:5060 (udp/sip) - last seen on 2024-11-01 at 02:22:12 UTC

    • IP
      149.71.54.145
      Network
      149.71.48.0/21
      Device

      <enterprise field>: device.class

      ASN
      AS203591
      Organization
      Tecno General S.r.l
      Protocol
      sip
      Source
      udpscan

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      20906de6418bbdaeb48b52c9f4f53901 
    • SIP/2.0 200 OK\x0d
Via: SIP/2.0/UDP nm;rport=48384;received=<srcip>;branch=foo\x0d
Call-ID: 50000\x0d
From: <sip:nm@nm>;tag=root\x0d
To: <sip:nm2@nm2>;tag=foo\x0d
CSeq: 42 OPTIONS\x0d
Allow: PRACK, INVITE, ACK, BYE, CANCEL, UPDATE, SUBSCRIBE, NOTIFY, REFER, OPTIONS\x0d
Accept: application/sdp, application/simple-message-summary, message/sipfrag;version=2.0\x0d
Supported: replaces, 100rel, timer, norefersub\x0d
Allow-Events: message-summary, refer\x0d
User-Agent: TP-Link SIP Stack V1.0.0\x0d
Content-Type: application/sdp\x0d
Content-Length:   333\x0d
\x0d
v=0\x0d
o=- 3939416523 3939416523 IN IP4 <ip>\x0d
s=pjmedia\x0d
c=IN IP4 <ip>\x0d
t=0 0\x0d
m=audio 60000 RTP/AVP 0 8 9 2 110 18\x0d
a=rtcp:60001 IN IP4 <ip>\x0d
a=rtpmap:0 PCMU/8000\x0d
a=rtpmap:8 PCMA/8000\x0d
a=rtpmap:9 G722/16000\x0d
a=rtpmap:2 G726-32/8000\x0d
a=rtpmap:110 G726-32/8000\x0d
a=rtpmap:18 G729/8000\x0d
a=sendrecv\x0d
a=ptime:0\x0d

    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-01T02:22:12.000Z",
   "app" : {
      "length" : "825"
   },
   "asn" : "AS203591",
   "city" : "Rotella",
   "country" : "IT",
   "data" : "SIP/2.0 200 OK\\x0d\nVia: SIP/2.0/UDP nm;rport=48384;received=<srcip>;branch=foo\\x0d\nCall-ID: 50000\\x0d\nFrom: <sip:nm@nm>;tag=root\\x0d\nTo: <sip:nm2@nm2>;tag=foo\\x0d\nCSeq: 42 OPTIONS\\x0d\nAllow: PRACK, INVITE, ACK, BYE, CANCEL, UPDATE, SUBSCRIBE, NOTIFY, REFER, OPTIONS\\x0d\nAccept: application/sdp, application/simple-message-summary, message/sipfrag;version=2.0\\x0d\nSupported: replaces, 100rel, timer, norefersub\\x0d\nAllow-Events: message-summary, refer\\x0d\nUser-Agent: TP-Link SIP Stack V1.0.0\\x0d\nContent-Type: application/sdp\\x0d\nContent-Length:   333\\x0d\n\\x0d\nv=0\\x0d\no=- 3939416523 3939416523 IN IP4 <ip>\\x0d\ns=pjmedia\\x0d\nc=IN IP4 <ip>\\x0d\nt=0 0\\x0d\nm=audio 60000 RTP/AVP 0 8 9 2 110 18\\x0d\na=rtcp:60001 IN IP4 <ip>\\x0d\na=rtpmap:0 PCMU/8000\\x0d\na=rtpmap:8 PCMA/8000\\x0d\na=rtpmap:9 G722/16000\\x0d\na=rtpmap:2 G726-32/8000\\x0d\na=rtpmap:110 G726-32/8000\\x0d\na=rtpmap:18 G729/8000\\x0d\na=sendrecv\\x0d\na=ptime:0\\x0d\n",
   "datamd5" : "20906de6418bbdaeb48b52c9f4f53901",
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS203591",
      "continent" : "NA",
      "continentname" : "North America",
      "country" : "US",
      "countryname" : "United States",
      "isineu" : "false",
      "latitude" : "37.09024",
      "location" : "37.09024,-95.712891",
      "longitude" : "-95.712891",
      "netname" : "NET-149-71-48-0-1",
      "organization" : "PSINet, Inc.",
      "subnet" : "149.71.48.0/21"
   },
   "ip" : "149.71.54.145",
   "ipv6" : "false",
   "latitude" : "42.9511",
   "location" : "42.9511,13.5615",
   "longitude" : "13.5615",
   "organization" : "Tecno General S.r.l",
   "port" : "5060",
   "protocol" : "sip",
   "seen_date" : "2024-11-01",
   "source" : "udpscan",
   "subnet" : "149.71.48.0/21",
   "tag" : "<enterprise field>: tag",
   "tls" : "false",
   "transport" : "udp"
}

  • 218.214.214.198:5060 (udp/sip) - last seen on 2024-11-01 at 02:22:12 UTC

    • IP
      218.214.214.198
      Network
      218.214.0.0/15
      Domain(s)
      wbroadband.net.au
      Device

      <enterprise field>: device.class

      Reverse DNS
      198.214.214.218.sta.wbroadband.net.au
      ASN
      AS9443
      Organization
      Vocus Retail
      Protocol
      sip
      Source
      udpscan

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      6978a7a4518149872c9f1d5dea5aeda3 
    • SIP/2.0 200 OK\x0d
Via: SIP/2.0/UDP nm;rport=48384;received=<srcip>;branch=foo\x0d
Call-ID: 50000\x0d
From: <sip:nm@nm>;tag=root\x0d
To: <sip:nm2@nm2>;tag=foo\x0d
CSeq: 42 OPTIONS\x0d
Allow: PRACK, INVITE, ACK, BYE, CANCEL, UPDATE, SUBSCRIBE, NOTIFY, REFER, OPTIONS\x0d
Accept: application/sdp, application/simple-message-summary, message/sipfrag;version=2.0\x0d
Supported: replaces, 100rel, timer, norefersub\x0d
Allow-Events: message-summary, refer\x0d
User-Agent: TP-Link SIP Stack V1.0.0\x0d
Content-Type: application/sdp\x0d
Content-Length:   389\x0d
\x0d
v=0\x0d
o=- 3939416525 3939416525 IN IP4 <ip>\x0d
s=pjmedia\x0d
c=IN IP4 <ip>\x0d
t=0 0\x0d
m=audio 60926 RTP/AVP 0 8 9 110 2 18 96\x0d
a=rtcp:60927 IN IP4 <ip>\x0d
a=rtpmap:0 PCMU/8000\x0d
a=rtpmap:8 PCMA/8000\x0d
a=rtpmap:9 G722/16000\x0d
a=rtpmap:110 G726-32/8000\x0d
a=rtpmap:2 G721/8000\x0d
a=rtpmap:18 G729/8000\x0d
a=sendrecv\x0d
a=ptime:0\x0d
a=rtpmap:96 telephone-event/8000\x0d
a=fmtp:96 0-15\x0d

    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-01T02:22:12.000Z",
   "app" : {
      "length" : "875"
   },
   "asn" : "AS9443",
   "city" : "Melbourne",
   "country" : "AU",
   "data" : "SIP/2.0 200 OK\\x0d\nVia: SIP/2.0/UDP nm;rport=48384;received=<srcip>;branch=foo\\x0d\nCall-ID: 50000\\x0d\nFrom: <sip:nm@nm>;tag=root\\x0d\nTo: <sip:nm2@nm2>;tag=foo\\x0d\nCSeq: 42 OPTIONS\\x0d\nAllow: PRACK, INVITE, ACK, BYE, CANCEL, UPDATE, SUBSCRIBE, NOTIFY, REFER, OPTIONS\\x0d\nAccept: application/sdp, application/simple-message-summary, message/sipfrag;version=2.0\\x0d\nSupported: replaces, 100rel, timer, norefersub\\x0d\nAllow-Events: message-summary, refer\\x0d\nUser-Agent: TP-Link SIP Stack V1.0.0\\x0d\nContent-Type: application/sdp\\x0d\nContent-Length:   389\\x0d\n\\x0d\nv=0\\x0d\no=- 3939416525 3939416525 IN IP4 <ip>\\x0d\ns=pjmedia\\x0d\nc=IN IP4 <ip>\\x0d\nt=0 0\\x0d\nm=audio 60926 RTP/AVP 0 8 9 110 2 18 96\\x0d\na=rtcp:60927 IN IP4 <ip>\\x0d\na=rtpmap:0 PCMU/8000\\x0d\na=rtpmap:8 PCMA/8000\\x0d\na=rtpmap:9 G722/16000\\x0d\na=rtpmap:110 G726-32/8000\\x0d\na=rtpmap:2 G721/8000\\x0d\na=rtpmap:18 G729/8000\\x0d\na=sendrecv\\x0d\na=ptime:0\\x0d\na=rtpmap:96 telephone-event/8000\\x0d\na=fmtp:96 0-15\\x0d\n",
   "datamd5" : "6978a7a4518149872c9f1d5dea5aeda3",
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "wbroadband.net.au"
   ],
   "geolocus" : {
      "asn" : "AS9443",
      "continent" : "OC",
      "continentname" : "Oceania",
      "country" : "AU",
      "countryname" : "Australia",
      "isineu" : "false",
      "latitude" : "-25.274398",
      "location" : "-25.274398,133.775136",
      "longitude" : "133.775136",
      "netname" : "VOCUS-RETAIL-AU",
      "organization" : "VOCUS PTY LTD",
      "subnet" : "218.214.0.0/16"
   },
   "host" : [
      "198"
   ],
   "hostname" : [
      "198.214.214.218.sta.wbroadband.net.au"
   ],
   "ip" : "218.214.214.198",
   "ipv6" : "false",
   "latitude" : "-37.8269",
   "location" : "-37.8269,144.9881",
   "longitude" : "144.9881",
   "organization" : "Vocus Retail",
   "port" : "5060",
   "protocol" : "sip",
   "reverse" : [
      "198.214.214.218.sta.wbroadband.net.au"
   ],
   "seen_date" : "2024-11-01",
   "source" : "udpscan",
   "subdomains" : [
      "214.218.sta.wbroadband.net.au",
      "214.214.218.sta.wbroadband.net.au",
      "218.sta.wbroadband.net.au",
      "sta.wbroadband.net.au"
   ],
   "subnet" : "218.214.0.0/15",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "net.au"
   ],
   "tls" : "false",
   "transport" : "udp"
}

  • 159.203.121.60:5060 (udp/sip) - last seen on 2024-11-01 at 02:22:12 UTC

    • IP
      159.203.121.60
      Network
      159.203.0.0/16
      Device

      <enterprise field>: device.class

      ASN
      AS14061
      Organization
      DIGITALOCEAN-ASN
      Protocol
      sip
      Source
      udpscan

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      f788a31378debcfa29781b0ac332c762 
    • SIP/2.0 401 Unauthorized\x0d
Via: SIP/2.0/UDP nm;rport=48384;received=<srcip>;branch=foo\x0d
Call-ID: 50000\x0d
From: <sip:nm@nm>;tag=root\x0d
To: <sip:nm2@nm2>;tag=foo\x0d
CSeq: 42 OPTIONS\x0d
WWW-Authenticate: Digest realm="asterisk",nonce="1730427727/dbed76cac2d9a16bf881831172f5a1d7",opaque="3c9395e10d922a7f",algorithm=MD5,qop="auth"\x0d
Server: FPBX-16.0.40.8(16.28.0)\x0d
Content-Length:  0\x0d
\x0d

    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-01T02:22:12.000Z",
   "app" : {
      "extract" : {
         "ip" : [
            "16.0.40.8"
         ]
      },
      "length" : "377"
   },
   "asn" : "AS14061",
   "city" : "Clifton",
   "country" : "US",
   "data" : "SIP/2.0 401 Unauthorized\\x0d\nVia: SIP/2.0/UDP nm;rport=48384;received=<srcip>;branch=foo\\x0d\nCall-ID: 50000\\x0d\nFrom: <sip:nm@nm>;tag=root\\x0d\nTo: <sip:nm2@nm2>;tag=foo\\x0d\nCSeq: 42 OPTIONS\\x0d\nWWW-Authenticate: Digest realm=\"asterisk\",nonce=\"1730427727/dbed76cac2d9a16bf881831172f5a1d7\",opaque=\"3c9395e10d922a7f\",algorithm=MD5,qop=\"auth\"\\x0d\nServer: FPBX-16.0.40.8(16.28.0)\\x0d\nContent-Length:  0\\x0d\n\\x0d\n",
   "datamd5" : "f788a31378debcfa29781b0ac332c762",
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS14061",
      "continent" : "NA",
      "continentname" : "North America",
      "country" : "US",
      "countryname" : "United States",
      "isineu" : "false",
      "latitude" : "37.09024",
      "location" : "37.09024,-95.712891",
      "longitude" : "-95.712891",
      "netname" : "DIGITALOCEAN-159-203-0-0",
      "organization" : "DigitalOcean, LLC",
      "subnet" : "159.203.64.0/18"
   },
   "ip" : "159.203.121.60",
   "ipv6" : "false",
   "latitude" : "40.8364",
   "location" : "40.8364,-74.1403",
   "longitude" : "-74.1403",
   "organization" : "DIGITALOCEAN-ASN",
   "port" : "5060",
   "protocol" : "sip",
   "seen_date" : "2024-11-01",
   "source" : "udpscan",
   "subnet" : "159.203.0.0/16",
   "tag" : "<enterprise field>: tag",
   "tls" : "false",
   "transport" : "udp"
}

  • 183.62.101.60:5060 (udp/sip) - last seen on 2024-11-01 at 02:22:12 UTC

    • IP
      183.62.101.60
      Network
      183.60.0.0/14
      Device

      <enterprise field>: device.class

      ASN
      AS4134
      Organization
      Chinanet
      Protocol
      sip
      Source
      udpscan

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      f4f72f64a62eb4bf8a72e079a092df05 
    • SIP/2.0 200 OK\x0d
Via: SIP/2.0/UDP nm;branch=foo;received=<srcip>;rport=48384\x0d
Call-ID: 50000\x0d
From: <sip:nm@nm>;tag=root\x0d
To: <sip:nm2@nm2>;tag=a8y7y33x\x0d
CSeq: 42 OPTIONS\x0d
Allow: INVITE,ACK,OPTIONS,BYE,CANCEL,REGISTER,INFO,PRACK,SUBSCRIBE,NOTIFY,UPDATE,REFER\x0d
Content-Length: 0\x0d
\x0d

    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-01T02:22:12.000Z",
   "app" : {
      "length" : "280"
   },
   "asn" : "AS4134",
   "city" : "Shenzhen",
   "country" : "CN",
   "data" : "SIP/2.0 200 OK\\x0d\nVia: SIP/2.0/UDP nm;branch=foo;received=<srcip>;rport=48384\\x0d\nCall-ID: 50000\\x0d\nFrom: <sip:nm@nm>;tag=root\\x0d\nTo: <sip:nm2@nm2>;tag=a8y7y33x\\x0d\nCSeq: 42 OPTIONS\\x0d\nAllow: INVITE,ACK,OPTIONS,BYE,CANCEL,REGISTER,INFO,PRACK,SUBSCRIBE,NOTIFY,UPDATE,REFER\\x0d\nContent-Length: 0\\x0d\n\\x0d\n",
   "datamd5" : "f4f72f64a62eb4bf8a72e079a092df05",
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS4134",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "CN",
      "countryname" : "China",
      "isineu" : "false",
      "latitude" : "35.86166",
      "location" : "35.86166,104.195397",
      "longitude" : "104.195397",
      "netname" : "CHINANET-GD",
      "organization" : "CHINANET Guangdong province network",
      "subnet" : "183.60.0.0/14"
   },
   "ip" : "183.62.101.60",
   "ipv6" : "false",
   "latitude" : "22.5559",
   "location" : "22.5559,114.0577",
   "longitude" : "114.0577",
   "organization" : "Chinanet",
   "port" : "5060",
   "protocol" : "sip",
   "seen_date" : "2024-11-01",
   "source" : "udpscan",
   "subnet" : "183.60.0.0/14",
   "tag" : "<enterprise field>: tag",
   "tls" : "false",
   "transport" : "udp"
}

  • 151.63.79.198:5060 (udp/sip) - last seen on 2024-11-01 at 02:22:12 UTC

    • IP
      151.63.79.198
      Network
      151.48.0.0/12
      Device

      <enterprise field>: device.class

      ASN
      AS1267
      Organization
      Wind Tre S.p.A.
      Protocol
      sip
      Source
      udpscan

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      1e3f7add06d773f8b0ec34e7493774f7 
    • SIP/2.0 200 OK\x0d
Via: SIP/2.0/UDP nm;rport=48384;received=<srcip>;branch=foo\x0d
Call-ID: 50000\x0d
From: <sip:nm@nm>;tag=root\x0d
To: <sip:nm2@nm2>;tag=foo\x0d
CSeq: 42 OPTIONS\x0d
Allow: PRACK, INVITE, ACK, BYE, CANCEL, UPDATE, SUBSCRIBE, NOTIFY, REFER, OPTIONS\x0d
Accept: application/sdp, application/simple-message-summary, message/sipfrag;version=2.0\x0d
Supported: replaces, 100rel, timer, norefersub\x0d
Allow-Events: message-summary, refer\x0d
User-Agent: TP-Link SIP Stack V1.0.0\x0d
Content-Type: application/sdp\x0d
Content-Length:   303\x0d
\x0d
v=0\x0d
o=- 3939416524 3939416524 IN IP4 <ip>\x0d
s=pjmedia\x0d
c=IN IP4 <ip>\x0d
t=0 0\x0d
m=audio 60000 RTP/AVP 18 8 0 96\x0d
a=rtcp:60001 IN IP4 <ip>\x0d
a=rtpmap:18 G729/8000\x0d
a=rtpmap:8 PCMA/8000\x0d
a=rtpmap:0 PCMU/8000\x0d
a=sendrecv\x0d
a=ptime:0\x0d
a=rtpmap:96 telephone-event/8000\x0d
a=fmtp:96 0-15\x0d

    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-01T02:22:12.000Z",
   "app" : {
      "length" : "795"
   },
   "asn" : "AS1267",
   "city" : "Palermo",
   "country" : "IT",
   "data" : "SIP/2.0 200 OK\\x0d\nVia: SIP/2.0/UDP nm;rport=48384;received=<srcip>;branch=foo\\x0d\nCall-ID: 50000\\x0d\nFrom: <sip:nm@nm>;tag=root\\x0d\nTo: <sip:nm2@nm2>;tag=foo\\x0d\nCSeq: 42 OPTIONS\\x0d\nAllow: PRACK, INVITE, ACK, BYE, CANCEL, UPDATE, SUBSCRIBE, NOTIFY, REFER, OPTIONS\\x0d\nAccept: application/sdp, application/simple-message-summary, message/sipfrag;version=2.0\\x0d\nSupported: replaces, 100rel, timer, norefersub\\x0d\nAllow-Events: message-summary, refer\\x0d\nUser-Agent: TP-Link SIP Stack V1.0.0\\x0d\nContent-Type: application/sdp\\x0d\nContent-Length:   303\\x0d\n\\x0d\nv=0\\x0d\no=- 3939416524 3939416524 IN IP4 <ip>\\x0d\ns=pjmedia\\x0d\nc=IN IP4 <ip>\\x0d\nt=0 0\\x0d\nm=audio 60000 RTP/AVP 18 8 0 96\\x0d\na=rtcp:60001 IN IP4 <ip>\\x0d\na=rtpmap:18 G729/8000\\x0d\na=rtpmap:8 PCMA/8000\\x0d\na=rtpmap:0 PCMU/8000\\x0d\na=sendrecv\\x0d\na=ptime:0\\x0d\na=rtpmap:96 telephone-event/8000\\x0d\na=fmtp:96 0-15\\x0d\n",
   "datamd5" : "1e3f7add06d773f8b0ec34e7493774f7",
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS1267",
      "continent" : "EU",
      "continentname" : "Europe",
      "country" : "IT",
      "countryname" : "Italy",
      "isineu" : "true",
      "latitude" : "41.87194",
      "location" : "41.87194,12.56738",
      "longitude" : "12.56738",
      "netname" : "WIND-EX-IUNET",
      "organization" : "WIND TRE S.P.A.",
      "subnet" : "151.63.64.0/18"
   },
   "ip" : "151.63.79.198",
   "ipv6" : "false",
   "latitude" : "38.1302",
   "location" : "38.1302,13.3290",
   "longitude" : "13.3290",
   "organization" : "Wind Tre S.p.A.",
   "port" : "5060",
   "protocol" : "sip",
   "seen_date" : "2024-11-01",
   "source" : "udpscan",
   "subnet" : "151.48.0.0/12",
   "tag" : "<enterprise field>: tag",
   "tls" : "false",
   "transport" : "udp"
}

  • 217.25.221.145:5060 (udp/sip) - last seen on 2024-11-01 at 02:22:12 UTC

    • IP
      217.25.221.145
      Network
      217.25.208.0/20
      Domain(s)
      omkc.ru
      Device

      <enterprise field>: device.class

      Reverse DNS
      pppoe145.net221.omkc.ru
      ASN
      AS47165
      Organization
      Omskie kabelnye seti Ltd.
      Protocol
      sip
      Source
      udpscan

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      41bd9196813c641adb3a670e2e5ff49a 
    • SIP/2.0 200 OK\x0d
Via: SIP/2.0/UDP nm;branch=foo;rport=48384;received=<srcip>\x0d
From: <sip:nm@nm>;tag=root\x0d
To: <sip:nm2@nm2>\x0d
CSeq: 42 OPTIONS\x0d
Call-ID: 50000\x0d
Allow: INVITE, ACK, CANCEL, OPTIONS, INFO, MESSAGE, BYE, REFER, NOTIFY\x0d
Content-Length: 0\x0d
\x0d

    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-01T02:22:12.000Z",
   "app" : {
      "length" : "251"
   },
   "asn" : "AS47165",
   "city" : "Omsk",
   "country" : "RU",
   "data" : "SIP/2.0 200 OK\\x0d\nVia: SIP/2.0/UDP nm;branch=foo;rport=48384;received=<srcip>\\x0d\nFrom: <sip:nm@nm>;tag=root\\x0d\nTo: <sip:nm2@nm2>\\x0d\nCSeq: 42 OPTIONS\\x0d\nCall-ID: 50000\\x0d\nAllow: INVITE, ACK, CANCEL, OPTIONS, INFO, MESSAGE, BYE, REFER, NOTIFY\\x0d\nContent-Length: 0\\x0d\n\\x0d\n",
   "datamd5" : "41bd9196813c641adb3a670e2e5ff49a",
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "omkc.ru"
   ],
   "geolocus" : {
      "asn" : "AS47165",
      "continent" : "EU",
      "continentname" : "Europe",
      "country" : "RU",
      "countryname" : "Russia",
      "isineu" : "false",
      "latitude" : "61.52401",
      "location" : "61.52401,105.318756",
      "longitude" : "105.318756",
      "netname" : "OKC-NET",
      "organization" : "Omskie kabelnye seti Ltd.",
      "subnet" : "217.25.216.0/21"
   },
   "host" : [
      "pppoe145"
   ],
   "hostname" : [
      "pppoe145.net221.omkc.ru"
   ],
   "ip" : "217.25.221.145",
   "ipv6" : "false",
   "latitude" : "54.9896",
   "location" : "54.9896,73.3729",
   "longitude" : "73.3729",
   "organization" : "Omskie kabelnye seti Ltd.",
   "port" : "5060",
   "protocol" : "sip",
   "reverse" : [
      "pppoe145.net221.omkc.ru"
   ],
   "seen_date" : "2024-11-01",
   "source" : "udpscan",
   "subdomains" : [
      "net221.omkc.ru"
   ],
   "subnet" : "217.25.208.0/20",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "ru"
   ],
   "tls" : "false",
   "transport" : "udp"
}

  • 62.231.236.57:5060 (udp/sip) - last seen on 2024-11-01 at 02:22:12 UTC

    • IP
      62.231.236.57
      Network
      62.231.224.0/20
      Device

      <enterprise field>: device.class

      ASN
      AS28885
      Organization
      Oman Telecommunications Company (S.A.O.G)
      Protocol
      sip
      Source
      udpscan

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      2857c471b660275518944f3b3f6cc226 
    • OPTIONS sip:nm SIP/2.0\x0d
Via: SIP/2.0/UDP nm;branch=foo;rport\x0d
From: <sip:nm@nm>;tag=root\x0d
To: <sip:nm2@nm2>\x0d
Call-ID: 50000\x0d
CSeq: 42 OPTIONS\x0d
Max-Forwards: 70\x0d
Content-Length: 0\x0d
Contact: <sip:nm@nm>\x0d
Accept: application/sdp\x0d
\x0d

    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-01T02:22:12.000Z",
   "app" : {
      "length" : "229"
   },
   "asn" : "AS28885",
   "city" : "Muscat",
   "country" : "OM",
   "data" : "OPTIONS sip:nm SIP/2.0\\x0d\nVia: SIP/2.0/UDP nm;branch=foo;rport\\x0d\nFrom: <sip:nm@nm>;tag=root\\x0d\nTo: <sip:nm2@nm2>\\x0d\nCall-ID: 50000\\x0d\nCSeq: 42 OPTIONS\\x0d\nMax-Forwards: 70\\x0d\nContent-Length: 0\\x0d\nContact: <sip:nm@nm>\\x0d\nAccept: application/sdp\\x0d\n\\x0d\n",
   "datamd5" : "2857c471b660275518944f3b3f6cc226",
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS28885",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "OM",
      "countryname" : "Oman",
      "isineu" : "false",
      "latitude" : "21.512583",
      "location" : "21.512583,55.923255",
      "longitude" : "55.923255",
      "netname" : "OMAN-EXPN-2003",
      "organization" : "OM-GTO-OMAN",
      "subnet" : "62.231.224.0/20"
   },
   "ip" : "62.231.236.57",
   "ipv6" : "false",
   "latitude" : "23.5780",
   "location" : "23.5780,58.4021",
   "longitude" : "58.4021",
   "organization" : "Oman Telecommunications Company (S.A.O.G)",
   "port" : "5060",
   "protocol" : "sip",
   "seen_date" : "2024-11-01",
   "source" : "udpscan",
   "subnet" : "62.231.224.0/20",
   "tls" : "false",
   "transport" : "udp"
}

  • 79.232.85.145:5060 (udp/sip) - last seen on 2024-11-01 at 02:22:12 UTC

    • IP
      79.232.85.145
      Network
      79.224.0.0/11
      Domain(s)
      t-ipconnect.de
      Device

      <enterprise field>: device.class

      Reverse DNS
      p4fe85591.dip0.t-ipconnect.de
      ASN
      AS3320
      Organization
      Deutsche Telekom AG
      Protocol
      sip
      Source
      udpscan

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      3f3f365be62630855d2cbcd695e10c51 
    • SIP/2.0 404 Not Found\x0d
Via: SIP/2.0/UDP nm;branch=foo;rport=48384;received=<srcip>\x0d
From: <sip:nm@nm>;tag=root\x0d
To: <sip:nm2@nm2>;tag=DB2ABDA643F3D9A9\x0d
Call-ID: 50000\x0d
CSeq: 42 OPTIONS\x0d
User-Agent: FRITZ!OS\x0d
Content-Length: 0\x0d
\x0d

    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-01T02:22:12.000Z",
   "app" : {
      "length" : "229"
   },
   "asn" : "AS3320",
   "city" : "Munich",
   "country" : "DE",
   "data" : "SIP/2.0 404 Not Found\\x0d\nVia: SIP/2.0/UDP nm;branch=foo;rport=48384;received=<srcip>\\x0d\nFrom: <sip:nm@nm>;tag=root\\x0d\nTo: <sip:nm2@nm2>;tag=DB2ABDA643F3D9A9\\x0d\nCall-ID: 50000\\x0d\nCSeq: 42 OPTIONS\\x0d\nUser-Agent: FRITZ!OS\\x0d\nContent-Length: 0\\x0d\n\\x0d\n",
   "datamd5" : "3f3f365be62630855d2cbcd695e10c51",
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "t-ipconnect.de"
   ],
   "geolocus" : {
      "asn" : "AS3320",
      "continent" : "EU",
      "continentname" : "Europe",
      "country" : "DE",
      "countryname" : "Germany",
      "isineu" : "true",
      "latitude" : "51.165691",
      "location" : "51.165691,10.451526",
      "longitude" : "10.451526",
      "netname" : "DTAG-DIAL24",
      "organization" : "Deutsche Telekom AG",
      "subnet" : "79.224.0.0/12"
   },
   "host" : [
      "p4fe85591"
   ],
   "hostname" : [
      "p4fe85591.dip0.t-ipconnect.de"
   ],
   "ip" : "79.232.85.145",
   "ipv6" : "false",
   "latitude" : "48.1470",
   "location" : "48.1470,11.4472",
   "longitude" : "11.4472",
   "organization" : "Deutsche Telekom AG",
   "port" : "5060",
   "protocol" : "sip",
   "reverse" : [
      "p4fe85591.dip0.t-ipconnect.de"
   ],
   "seen_date" : "2024-11-01",
   "source" : "udpscan",
   "subdomains" : [
      "dip0.t-ipconnect.de"
   ],
   "subnet" : "79.224.0.0/11",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "de"
   ],
   "tls" : "false",
   "transport" : "udp"
}