ONYPHE
datascan ctl threatlist sniffer vulnscan riskscan

Returning 10 result(s) out of 65,639 in 0.050 second(s)

  • 50.93.13.10:5060 (udp/sip) - last seen on 2024-11-01 at 02:32:59 UTC

    • IP
      50.93.13.10
      Network
      50.93.0.0/18
      Domain(s)
      telus.net
      Device

      <enterprise field>: device.class

      Reverse DNS
      d50-93-13-10.abhsia.telus.net
      ASN
      AS16509
      Organization
      AMAZON-02
      Protocol
      sip
      Source
      udpscan

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      02be62635d4968a5f7bebf7334aa26c8 
    • SIP/2.0 200 OK\x0d
Via: SIP/2.0/UDP nm;branch=foo;rport=12934;received=<srcip>\x0d
From: <sip:nm@nm>;tag=root\x0d
To: <sip:nm2@nm2>;tag=a6a1c5f60faecf035a1ae5b6e96e979a-1e840000\x0d
Call-ID: 50000\x0d
CSeq: 42 OPTIONS\x0d
X-KEY: 02e9f0770eb753e79d02fbd766cd60cf\x0d
Server: Wildix GW 20241022.1~2a556b81\x0d
Content-Length: 0\x0d
\x0d

    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-01T02:32:59.000Z",
   "app" : {
      "length" : "305"
   },
   "asn" : "AS16509",
   "city" : "Edmonton",
   "country" : "CA",
   "data" : "SIP/2.0 200 OK\\x0d\nVia: SIP/2.0/UDP nm;branch=foo;rport=12934;received=<srcip>\\x0d\nFrom: <sip:nm@nm>;tag=root\\x0d\nTo: <sip:nm2@nm2>;tag=a6a1c5f60faecf035a1ae5b6e96e979a-1e840000\\x0d\nCall-ID: 50000\\x0d\nCSeq: 42 OPTIONS\\x0d\nX-KEY: 02e9f0770eb753e79d02fbd766cd60cf\\x0d\nServer: Wildix GW 20241022.1~2a556b81\\x0d\nContent-Length: 0\\x0d\n\\x0d\n",
   "datamd5" : "02be62635d4968a5f7bebf7334aa26c8",
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "telus.net"
   ],
   "geolocus" : {
      "asn" : "AS852",
      "continent" : "NA",
      "continentname" : "North America",
      "country" : "CA",
      "countryname" : "Canada",
      "isineu" : "false",
      "latitude" : "56.130366",
      "location" : "56.130366,-106.346771",
      "longitude" : "-106.346771",
      "netname" : "TELUS-FIBRE-CLGRAB21",
      "organization" : "TELUS Communications Inc.",
      "subnet" : "50.93.0.0/17"
   },
   "host" : [
      "d50-93-13-10"
   ],
   "hostname" : [
      "d50-93-13-10.abhsia.telus.net"
   ],
   "ip" : "50.93.13.10",
   "ipv6" : "false",
   "latitude" : "53.4213",
   "location" : "53.4213,-113.5860",
   "longitude" : "-113.5860",
   "organization" : "AMAZON-02",
   "port" : "5060",
   "protocol" : "sip",
   "reverse" : [
      "d50-93-13-10.abhsia.telus.net"
   ],
   "seen_date" : "2024-11-01",
   "source" : "udpscan",
   "subdomains" : [
      "abhsia.telus.net"
   ],
   "subnet" : "50.93.0.0/18",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "net"
   ],
   "tls" : "false",
   "transport" : "udp"
}

  • 50.93.86.39:5060 (udp/sip) - last seen on 2024-11-01 at 02:32:59 UTC

    • IP
      50.93.86.39
      Network
      50.93.64.0/19
      Domain(s)
      telus.net
      Device

      <enterprise field>: device.class

      Reverse DNS
      d50-93-86-39.abhsia.telus.net
      ASN
      AS16509
      Organization
      AMAZON-02
      Protocol
      sip
      Source
      udpscan

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      c935f63b47878be613c6e5a946b4bae9 
    • SIP/2.0 200 OK\x0d
Via: SIP/2.0/UDP nm;branch=foo;rport=12934;received=<srcip>\x0d
From: <sip:nm@nm>;tag=root\x0d
To: <sip:nm2@nm2>;tag=a6a1c5f60faecf035a1ae5b6e96e979a-1e840000\x0d
Call-ID: 50000\x0d
CSeq: 42 OPTIONS\x0d
X-KEY: 2bd4c0b388e5f2cc7a0fbb2e6d776a17\x0d
Server: Wildix GW 20240911.1~b639c7e3\x0d
Content-Length: 0\x0d
\x0d

    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-01T02:32:59.000Z",
   "app" : {
      "length" : "305"
   },
   "asn" : "AS16509",
   "city" : "Frankfurt am Main",
   "country" : "DE",
   "data" : "SIP/2.0 200 OK\\x0d\nVia: SIP/2.0/UDP nm;branch=foo;rport=12934;received=<srcip>\\x0d\nFrom: <sip:nm@nm>;tag=root\\x0d\nTo: <sip:nm2@nm2>;tag=a6a1c5f60faecf035a1ae5b6e96e979a-1e840000\\x0d\nCall-ID: 50000\\x0d\nCSeq: 42 OPTIONS\\x0d\nX-KEY: 2bd4c0b388e5f2cc7a0fbb2e6d776a17\\x0d\nServer: Wildix GW 20240911.1~b639c7e3\\x0d\nContent-Length: 0\\x0d\n\\x0d\n",
   "datamd5" : "c935f63b47878be613c6e5a946b4bae9",
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "telus.net"
   ],
   "geolocus" : {
      "asn" : "AS852",
      "continent" : "NA",
      "continentname" : "North America",
      "country" : "CA",
      "countryname" : "Canada",
      "isineu" : "false",
      "latitude" : "56.130366",
      "location" : "56.130366,-106.346771",
      "longitude" : "-106.346771",
      "netname" : "TELUS-FIBRE-CLGRAB21",
      "organization" : "TELUS Communications Inc.",
      "subnet" : "50.93.0.0/17"
   },
   "host" : [
      "d50-93-86-39"
   ],
   "hostname" : [
      "d50-93-86-39.abhsia.telus.net"
   ],
   "ip" : "50.93.86.39",
   "ipv6" : "false",
   "latitude" : "50.1187",
   "location" : "50.1187,8.6842",
   "longitude" : "8.6842",
   "organization" : "AMAZON-02",
   "port" : "5060",
   "protocol" : "sip",
   "reverse" : [
      "d50-93-86-39.abhsia.telus.net"
   ],
   "seen_date" : "2024-11-01",
   "source" : "udpscan",
   "subdomains" : [
      "abhsia.telus.net"
   ],
   "subnet" : "50.93.64.0/19",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "net"
   ],
   "tls" : "false",
   "transport" : "udp"
}

  • 18.132.206.210:5060 (udp/sip) - last seen on 2024-11-01 at 02:32:45 UTC

    • IP
      18.132.206.210
      Network
      18.132.0.0/14
      Domain(s)
      amazonaws.com
      Device

      <enterprise field>: device.class

      Reverse DNS
      ec2-18-132-206-210.eu-west-2.compute.amazonaws.com
      ASN
      AS16509
      Organization
      AMAZON-02
      Protocol
      sip
      Source
      udpscan

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      f068149bcf4ebc13584d5138dcf2a813 
    • SIP/2.0 200 OK\x0d
Via: SIP/2.0/UDP nm;branch=foo;rport=12934;received=<srcip>\x0d
To: <sip:nm2@nm2>;tag=0b33d237\x0d
From: <sip:nm@nm>;tag=root\x0d
Call-ID: 50000\x0d
CSeq: 42 OPTIONS\x0d
Accept: application/sdp\x0d
Accept-Language: en\x0d
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REGISTER, SUBSCRIBE, NOTIFY, REFER, INFO, MESSAGE, UPDATE\x0d
Supported: replaces, timer\x0d
Allow-Events: message-summary, dialog, call-info, line-seize\x0d
Content-Length: 0\x0d
\x0d

    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-01T02:32:45.000Z",
   "app" : {
      "length" : "429"
   },
   "asn" : "AS16509",
   "city" : "London",
   "country" : "GB",
   "data" : "SIP/2.0 200 OK\\x0d\nVia: SIP/2.0/UDP nm;branch=foo;rport=12934;received=<srcip>\\x0d\nTo: <sip:nm2@nm2>;tag=0b33d237\\x0d\nFrom: <sip:nm@nm>;tag=root\\x0d\nCall-ID: 50000\\x0d\nCSeq: 42 OPTIONS\\x0d\nAccept: application/sdp\\x0d\nAccept-Language: en\\x0d\nAllow: INVITE, ACK, CANCEL, OPTIONS, BYE, REGISTER, SUBSCRIBE, NOTIFY, REFER, INFO, MESSAGE, UPDATE\\x0d\nSupported: replaces, timer\\x0d\nAllow-Events: message-summary, dialog, call-info, line-seize\\x0d\nContent-Length: 0\\x0d\n\\x0d\n",
   "datamd5" : "f068149bcf4ebc13584d5138dcf2a813",
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "amazonaws.com"
   ],
   "geolocus" : {
      "asn" : "AS16509",
      "continent" : "EU",
      "continentname" : "Europe",
      "country" : "GB",
      "countryname" : "United Kingdom",
      "isineu" : "false",
      "latitude" : "55.378051",
      "location" : "55.378051,-3.435973",
      "longitude" : "-3.435973",
      "netname" : "AMAZON-LHR",
      "organization" : "Amazon Data Services UK",
      "subnet" : "18.132.0.0/14"
   },
   "host" : [
      "ec2-18-132-206-210"
   ],
   "hostname" : [
      "ec2-18-132-206-210.eu-west-2.compute.amazonaws.com"
   ],
   "ip" : "18.132.206.210",
   "ipv6" : "false",
   "latitude" : "51.5088",
   "location" : "51.5088,-0.0930",
   "longitude" : "-0.0930",
   "organization" : "AMAZON-02",
   "port" : "5060",
   "protocol" : "sip",
   "reverse" : [
      "ec2-18-132-206-210.eu-west-2.compute.amazonaws.com"
   ],
   "seen_date" : "2024-11-01",
   "source" : "udpscan",
   "subdomains" : [
      "eu-west-2.compute.amazonaws.com",
      "compute.amazonaws.com"
   ],
   "subnet" : "18.132.0.0/14",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "com"
   ],
   "tls" : "false",
   "transport" : "udp"
}

  • 50.93.66.71:5060 (udp/sip) - last seen on 2024-11-01 at 02:32:45 UTC

    • IP
      50.93.66.71
      Network
      50.93.64.0/19
      Domain(s)
      telus.net
      Device

      <enterprise field>: device.class

      Reverse DNS
      d50-93-66-71.abhsia.telus.net
      ASN
      AS16509
      Organization
      AMAZON-02
      Protocol
      sip
      Source
      udpscan

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      9b7e8d0f0981cf1435d08550a970a965 
    • SIP/2.0 200 OK\x0d
Via: SIP/2.0/UDP nm;branch=foo;rport=12934;received=<srcip>\x0d
From: <sip:nm@nm>;tag=root\x0d
To: <sip:nm2@nm2>;tag=a6a1c5f60faecf035a1ae5b6e96e979a-1e840000\x0d
Call-ID: 50000\x0d
CSeq: 42 OPTIONS\x0d
X-KEY: 521b79b4c6f687734179c849aa1f51de\x0d
Server: Wildix GW 20240911.1~b639c7e3\x0d
Content-Length: 0\x0d
\x0d

    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-01T02:32:45.000Z",
   "app" : {
      "length" : "305"
   },
   "asn" : "AS16509",
   "city" : "Paris",
   "country" : "FR",
   "data" : "SIP/2.0 200 OK\\x0d\nVia: SIP/2.0/UDP nm;branch=foo;rport=12934;received=<srcip>\\x0d\nFrom: <sip:nm@nm>;tag=root\\x0d\nTo: <sip:nm2@nm2>;tag=a6a1c5f60faecf035a1ae5b6e96e979a-1e840000\\x0d\nCall-ID: 50000\\x0d\nCSeq: 42 OPTIONS\\x0d\nX-KEY: 521b79b4c6f687734179c849aa1f51de\\x0d\nServer: Wildix GW 20240911.1~b639c7e3\\x0d\nContent-Length: 0\\x0d\n\\x0d\n",
   "datamd5" : "9b7e8d0f0981cf1435d08550a970a965",
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "telus.net"
   ],
   "geolocus" : {
      "asn" : "AS852",
      "continent" : "NA",
      "continentname" : "North America",
      "country" : "CA",
      "countryname" : "Canada",
      "isineu" : "false",
      "latitude" : "56.130366",
      "location" : "56.130366,-106.346771",
      "longitude" : "-106.346771",
      "netname" : "TELUS-FIBRE-CLGRAB21",
      "organization" : "TELUS Communications Inc.",
      "subnet" : "50.93.0.0/17"
   },
   "host" : [
      "d50-93-66-71"
   ],
   "hostname" : [
      "d50-93-66-71.abhsia.telus.net"
   ],
   "ip" : "50.93.66.71",
   "ipv6" : "false",
   "latitude" : "48.8323",
   "location" : "48.8323,2.4075",
   "longitude" : "2.4075",
   "organization" : "AMAZON-02",
   "port" : "5060",
   "protocol" : "sip",
   "reverse" : [
      "d50-93-66-71.abhsia.telus.net"
   ],
   "seen_date" : "2024-11-01",
   "source" : "udpscan",
   "subdomains" : [
      "abhsia.telus.net"
   ],
   "subnet" : "50.93.64.0/19",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "net"
   ],
   "tls" : "false",
   "transport" : "udp"
}

  • 50.93.13.6:5060 (udp/sip) - last seen on 2024-11-01 at 02:32:29 UTC

    • IP
      50.93.13.6
      Network
      50.93.0.0/18
      Domain(s)
      telus.net
      Device

      <enterprise field>: device.class

      Reverse DNS
      d50-93-13-6.abhsia.telus.net
      ASN
      AS16509
      Organization
      AMAZON-02
      Protocol
      sip
      Source
      udpscan

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      24df21b64db88e5cb146ff441ca7c2b0 
    • SIP/2.0 200 OK\x0d
Via: SIP/2.0/UDP nm;branch=foo;rport=12934;received=<srcip>\x0d
From: <sip:nm@nm>;tag=root\x0d
To: <sip:nm2@nm2>;tag=a6a1c5f60faecf035a1ae5b6e96e979a-1e840000\x0d
Call-ID: 50000\x0d
CSeq: 42 OPTIONS\x0d
X-KEY: ef50b812be9b34936f404f29e54f88c0\x0d
Server: Wildix GW 20240911.1~b639c7e3\x0d
Content-Length: 0\x0d
\x0d

    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-01T02:32:29.000Z",
   "app" : {
      "length" : "305"
   },
   "asn" : "AS16509",
   "city" : "Edmonton",
   "country" : "CA",
   "data" : "SIP/2.0 200 OK\\x0d\nVia: SIP/2.0/UDP nm;branch=foo;rport=12934;received=<srcip>\\x0d\nFrom: <sip:nm@nm>;tag=root\\x0d\nTo: <sip:nm2@nm2>;tag=a6a1c5f60faecf035a1ae5b6e96e979a-1e840000\\x0d\nCall-ID: 50000\\x0d\nCSeq: 42 OPTIONS\\x0d\nX-KEY: ef50b812be9b34936f404f29e54f88c0\\x0d\nServer: Wildix GW 20240911.1~b639c7e3\\x0d\nContent-Length: 0\\x0d\n\\x0d\n",
   "datamd5" : "24df21b64db88e5cb146ff441ca7c2b0",
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "telus.net"
   ],
   "geolocus" : {
      "asn" : "AS852",
      "continent" : "NA",
      "continentname" : "North America",
      "country" : "CA",
      "countryname" : "Canada",
      "isineu" : "false",
      "latitude" : "56.130366",
      "location" : "56.130366,-106.346771",
      "longitude" : "-106.346771",
      "netname" : "TELUS-FIBRE-CLGRAB21",
      "organization" : "TELUS Communications Inc.",
      "subnet" : "50.93.0.0/17"
   },
   "host" : [
      "d50-93-13-6"
   ],
   "hostname" : [
      "d50-93-13-6.abhsia.telus.net"
   ],
   "ip" : "50.93.13.6",
   "ipv6" : "false",
   "latitude" : "53.4213",
   "location" : "53.4213,-113.5860",
   "longitude" : "-113.5860",
   "organization" : "AMAZON-02",
   "port" : "5060",
   "protocol" : "sip",
   "reverse" : [
      "d50-93-13-6.abhsia.telus.net"
   ],
   "seen_date" : "2024-11-01",
   "source" : "udpscan",
   "subdomains" : [
      "abhsia.telus.net"
   ],
   "subnet" : "50.93.0.0/18",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "net"
   ],
   "tls" : "false",
   "transport" : "udp"
}

  • 13.211.211.9:5060 (udp/sip) - last seen on 2024-11-01 at 02:32:13 UTC

    • IP
      13.211.211.9
      Network
      13.208.0.0/13
      Domain(s)
      amazonaws.com
      Device

      <enterprise field>: device.class

      Reverse DNS
      ec2-13-211-211-9.ap-southeast-2.compute.amazonaws.com
      ASN
      AS16509
      Organization
      AMAZON-02
      Protocol
      sip
      Source
      udpscan

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      656be75bbfa8d003ca85ec5bdbd1d870 
    • SIP/2.0 200 OK\x0d
Via: SIP/2.0/UDP nm;branch=foo;rport=12934;received=<srcip>\x0d
To: <sip:nm2@nm2>;tag=3f689344\x0d
From: <sip:nm@nm>;tag=root\x0d
Call-ID: 50000\x0d
CSeq: 42 OPTIONS\x0d
Accept: application/sdp\x0d
Accept-Language: en\x0d
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REGISTER, SUBSCRIBE, NOTIFY, REFER, INFO, MESSAGE, UPDATE\x0d
Supported: replaces, timer\x0d
Allow-Events: message-summary, dialog, call-info, line-seize\x0d
Content-Length: 0\x0d
\x0d

    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-01T02:32:13.000Z",
   "app" : {
      "length" : "429"
   },
   "asn" : "AS16509",
   "city" : "Sydney",
   "country" : "AU",
   "data" : "SIP/2.0 200 OK\\x0d\nVia: SIP/2.0/UDP nm;branch=foo;rport=12934;received=<srcip>\\x0d\nTo: <sip:nm2@nm2>;tag=3f689344\\x0d\nFrom: <sip:nm@nm>;tag=root\\x0d\nCall-ID: 50000\\x0d\nCSeq: 42 OPTIONS\\x0d\nAccept: application/sdp\\x0d\nAccept-Language: en\\x0d\nAllow: INVITE, ACK, CANCEL, OPTIONS, BYE, REGISTER, SUBSCRIBE, NOTIFY, REFER, INFO, MESSAGE, UPDATE\\x0d\nSupported: replaces, timer\\x0d\nAllow-Events: message-summary, dialog, call-info, line-seize\\x0d\nContent-Length: 0\\x0d\n\\x0d\n",
   "datamd5" : "656be75bbfa8d003ca85ec5bdbd1d870",
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "amazonaws.com"
   ],
   "geolocus" : {
      "asn" : "AS16509",
      "continent" : "OC",
      "continentname" : "Oceania",
      "country" : "AU",
      "countryname" : "Australia",
      "isineu" : "false",
      "latitude" : "-25.274398",
      "location" : "-25.274398,133.775136",
      "longitude" : "133.775136",
      "netname" : "AMAZO-SYD",
      "organization" : "Amazon Corporate Services Pty Ltd",
      "subnet" : "13.210.0.0/15"
   },
   "host" : [
      "ec2-13-211-211-9"
   ],
   "hostname" : [
      "ec2-13-211-211-9.ap-southeast-2.compute.amazonaws.com"
   ],
   "ip" : "13.211.211.9",
   "ipv6" : "false",
   "latitude" : "-33.8715",
   "location" : "-33.8715,151.2006",
   "longitude" : "151.2006",
   "organization" : "AMAZON-02",
   "port" : "5060",
   "protocol" : "sip",
   "reverse" : [
      "ec2-13-211-211-9.ap-southeast-2.compute.amazonaws.com"
   ],
   "seen_date" : "2024-11-01",
   "source" : "udpscan",
   "subdomains" : [
      "ap-southeast-2.compute.amazonaws.com",
      "compute.amazonaws.com"
   ],
   "subnet" : "13.208.0.0/13",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "com"
   ],
   "tls" : "false",
   "transport" : "udp"
}

  • 50.93.64.225:5060 (udp/sip) - last seen on 2024-11-01 at 02:31:44 UTC

    • IP
      50.93.64.225
      Network
      50.93.64.0/19
      Domain(s)
      telus.net
      Device

      <enterprise field>: device.class

      Reverse DNS
      d50-93-64-225.abhsia.telus.net
      ASN
      AS16509
      Organization
      AMAZON-02
      Protocol
      sip
      Source
      udpscan

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      0c9a9af78bb778c59b3c4a0d2884f05e 
    • SIP/2.0 200 OK\x0d
Via: SIP/2.0/UDP nm;branch=foo;rport=12934;received=<srcip>\x0d
From: <sip:nm@nm>;tag=root\x0d
To: <sip:nm2@nm2>;tag=a6a1c5f60faecf035a1ae5b6e96e979a-1e840000\x0d
Call-ID: 50000\x0d
CSeq: 42 OPTIONS\x0d
X-KEY: 020140976c82fc5fa6ed7011b46d78a4\x0d
Server: Wildix GW 20240911.1~b639c7e3\x0d
Content-Length: 0\x0d
\x0d

    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-01T02:31:44.000Z",
   "app" : {
      "length" : "305"
   },
   "asn" : "AS16509",
   "city" : "Paris",
   "country" : "FR",
   "data" : "SIP/2.0 200 OK\\x0d\nVia: SIP/2.0/UDP nm;branch=foo;rport=12934;received=<srcip>\\x0d\nFrom: <sip:nm@nm>;tag=root\\x0d\nTo: <sip:nm2@nm2>;tag=a6a1c5f60faecf035a1ae5b6e96e979a-1e840000\\x0d\nCall-ID: 50000\\x0d\nCSeq: 42 OPTIONS\\x0d\nX-KEY: 020140976c82fc5fa6ed7011b46d78a4\\x0d\nServer: Wildix GW 20240911.1~b639c7e3\\x0d\nContent-Length: 0\\x0d\n\\x0d\n",
   "datamd5" : "0c9a9af78bb778c59b3c4a0d2884f05e",
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "telus.net"
   ],
   "geolocus" : {
      "asn" : "AS852",
      "continent" : "NA",
      "continentname" : "North America",
      "country" : "CA",
      "countryname" : "Canada",
      "isineu" : "false",
      "latitude" : "56.130366",
      "location" : "56.130366,-106.346771",
      "longitude" : "-106.346771",
      "netname" : "TELUS-FIBRE-CLGRAB21",
      "organization" : "TELUS Communications Inc.",
      "subnet" : "50.93.0.0/17"
   },
   "host" : [
      "d50-93-64-225"
   ],
   "hostname" : [
      "d50-93-64-225.abhsia.telus.net"
   ],
   "ip" : "50.93.64.225",
   "ipv6" : "false",
   "latitude" : "48.8323",
   "location" : "48.8323,2.4075",
   "longitude" : "2.4075",
   "organization" : "AMAZON-02",
   "port" : "5060",
   "protocol" : "sip",
   "reverse" : [
      "d50-93-64-225.abhsia.telus.net"
   ],
   "seen_date" : "2024-11-01",
   "source" : "udpscan",
   "subdomains" : [
      "abhsia.telus.net"
   ],
   "subnet" : "50.93.64.0/19",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "net"
   ],
   "tls" : "false",
   "transport" : "udp"
}

  • 35.181.90.83:5060 (udp/sip) - last seen on 2024-11-01 at 02:31:43 UTC

    • IP
      35.181.90.83
      Network
      35.176.0.0/13
      Domain(s)
      amazonaws.com
      Device

      <enterprise field>: device.class

      Reverse DNS
      ec2-35-181-90-83.eu-west-3.compute.amazonaws.com
      ASN
      AS16509
      Organization
      AMAZON-02
      Protocol
      sip
      Source
      udpscan

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      bf642e6cdb3bd628376988f7c4042a92 
    • SIP/2.0 200 OK\x0d
Via: SIP/2.0/UDP nm;branch=foo;rport=12934;received=<srcip>\x0d
From: <sip:nm@nm>;tag=root\x0d
To: <sip:nm2@nm2>;tag=a6a1c5f60faecf035a1ae5b6e96e979a-1e840000\x0d
Call-ID: 50000\x0d
CSeq: 42 OPTIONS\x0d
X-KEY: 2f650f797f147488facfa5478b1ce242\x0d
Server: Wildix GW 20240911.1~b639c7e3\x0d
Content-Length: 0\x0d
\x0d

    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-01T02:31:43.000Z",
   "app" : {
      "length" : "305"
   },
   "asn" : "AS16509",
   "city" : "Paris",
   "country" : "FR",
   "data" : "SIP/2.0 200 OK\\x0d\nVia: SIP/2.0/UDP nm;branch=foo;rport=12934;received=<srcip>\\x0d\nFrom: <sip:nm@nm>;tag=root\\x0d\nTo: <sip:nm2@nm2>;tag=a6a1c5f60faecf035a1ae5b6e96e979a-1e840000\\x0d\nCall-ID: 50000\\x0d\nCSeq: 42 OPTIONS\\x0d\nX-KEY: 2f650f797f147488facfa5478b1ce242\\x0d\nServer: Wildix GW 20240911.1~b639c7e3\\x0d\nContent-Length: 0\\x0d\n\\x0d\n",
   "datamd5" : "bf642e6cdb3bd628376988f7c4042a92",
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "amazonaws.com"
   ],
   "geolocus" : {
      "asn" : "AS16509",
      "continent" : "EU",
      "continentname" : "Europe",
      "country" : "FR",
      "countryname" : "France",
      "isineu" : "true",
      "latitude" : "46.227638",
      "location" : "46.227638,2.213749",
      "longitude" : "2.213749",
      "netname" : "AMAZON-CDG",
      "organization" : "Amazon Data Services France",
      "subnet" : "35.181.0.0/16"
   },
   "host" : [
      "ec2-35-181-90-83"
   ],
   "hostname" : [
      "ec2-35-181-90-83.eu-west-3.compute.amazonaws.com"
   ],
   "ip" : "35.181.90.83",
   "ipv6" : "false",
   "latitude" : "48.8323",
   "location" : "48.8323,2.4075",
   "longitude" : "2.4075",
   "organization" : "AMAZON-02",
   "port" : "5060",
   "protocol" : "sip",
   "reverse" : [
      "ec2-35-181-90-83.eu-west-3.compute.amazonaws.com"
   ],
   "seen_date" : "2024-11-01",
   "source" : "udpscan",
   "subdomains" : [
      "compute.amazonaws.com",
      "eu-west-3.compute.amazonaws.com"
   ],
   "subnet" : "35.176.0.0/13",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "com"
   ],
   "tls" : "false",
   "transport" : "udp"
}

  • 13.42.94.177:5060 (udp/sip) - last seen on 2024-11-01 at 02:31:43 UTC

    • IP
      13.42.94.177
      Network
      13.40.0.0/14
      Domain(s)
      amazonaws.com
      Device

      <enterprise field>: device.class

      Reverse DNS
      ec2-13-42-94-177.eu-west-2.compute.amazonaws.com
      ASN
      AS16509
      Organization
      AMAZON-02
      Protocol
      sip
      Source
      udpscan

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      48d4bb01108df3e42dc14ed88e3a73f4 
    • SIP/2.0 200 OK\x0d
Via: SIP/2.0/UDP nm;branch=foo;rport=12934;received=<srcip>\x0d
To: <sip:nm2@nm2>;tag=640cdc57\x0d
From: <sip:nm@nm>;tag=root\x0d
Call-ID: 50000\x0d
CSeq: 42 OPTIONS\x0d
Accept: application/sdp\x0d
Accept-Language: en\x0d
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REGISTER, SUBSCRIBE, NOTIFY, REFER, INFO, MESSAGE, UPDATE\x0d
Supported: replaces, timer\x0d
Allow-Events: message-summary, dialog, call-info, line-seize\x0d
Content-Length: 0\x0d
\x0d

    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-01T02:31:43.000Z",
   "app" : {
      "length" : "429"
   },
   "asn" : "AS16509",
   "city" : "London",
   "country" : "GB",
   "data" : "SIP/2.0 200 OK\\x0d\nVia: SIP/2.0/UDP nm;branch=foo;rport=12934;received=<srcip>\\x0d\nTo: <sip:nm2@nm2>;tag=640cdc57\\x0d\nFrom: <sip:nm@nm>;tag=root\\x0d\nCall-ID: 50000\\x0d\nCSeq: 42 OPTIONS\\x0d\nAccept: application/sdp\\x0d\nAccept-Language: en\\x0d\nAllow: INVITE, ACK, CANCEL, OPTIONS, BYE, REGISTER, SUBSCRIBE, NOTIFY, REFER, INFO, MESSAGE, UPDATE\\x0d\nSupported: replaces, timer\\x0d\nAllow-Events: message-summary, dialog, call-info, line-seize\\x0d\nContent-Length: 0\\x0d\n\\x0d\n",
   "datamd5" : "48d4bb01108df3e42dc14ed88e3a73f4",
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "amazonaws.com"
   ],
   "geolocus" : {
      "asn" : "AS16509",
      "continent" : "EU",
      "continentname" : "Europe",
      "country" : "GB",
      "countryname" : "United Kingdom",
      "isineu" : "false",
      "latitude" : "55.378051",
      "location" : "55.378051,-3.435973",
      "longitude" : "-3.435973",
      "netname" : "AMAZON-LHR",
      "organization" : "Amazon Data Services UK",
      "subnet" : "13.40.0.0/14"
   },
   "host" : [
      "ec2-13-42-94-177"
   ],
   "hostname" : [
      "ec2-13-42-94-177.eu-west-2.compute.amazonaws.com"
   ],
   "ip" : "13.42.94.177",
   "ipv6" : "false",
   "latitude" : "51.5088",
   "location" : "51.5088,-0.0930",
   "longitude" : "-0.0930",
   "organization" : "AMAZON-02",
   "port" : "5060",
   "protocol" : "sip",
   "reverse" : [
      "ec2-13-42-94-177.eu-west-2.compute.amazonaws.com"
   ],
   "seen_date" : "2024-11-01",
   "source" : "udpscan",
   "subdomains" : [
      "eu-west-2.compute.amazonaws.com",
      "compute.amazonaws.com"
   ],
   "subnet" : "13.40.0.0/14",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "com"
   ],
   "tls" : "false",
   "transport" : "udp"
}

  • 35.89.231.115:5060 (udp/sip) - last seen on 2024-11-01 at 02:31:28 UTC

    • IP
      35.89.231.115
      Network
      35.80.0.0/12
      Domain(s)
      amazonaws.com
      Device

      <enterprise field>: device.class

      Reverse DNS
      ec2-35-89-231-115.us-west-2.compute.amazonaws.com
      ASN
      AS16509
      Organization
      AMAZON-02
      Protocol
      sip
      Source
      udpscan

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      1bbcb6201ced19424e883128d40e6d3d 
    • SIP/2.0 200 OK\x0d
Via: SIP/2.0/UDP nm;branch=foo;rport=12934;received=<srcip>\x0d
To: <sip:nm2@nm2>;tag=db4ee816\x0d
From: <sip:nm@nm>;tag=root\x0d
Call-ID: 50000\x0d
CSeq: 42 OPTIONS\x0d
Accept: application/sdp\x0d
Accept-Language: en\x0d
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REGISTER, SUBSCRIBE, NOTIFY, REFER, INFO, MESSAGE, UPDATE\x0d
Supported: replaces, timer\x0d
Allow-Events: message-summary, dialog, call-info, line-seize\x0d
Content-Length: 0\x0d
\x0d

    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-01T02:31:28.000Z",
   "app" : {
      "length" : "429"
   },
   "asn" : "AS16509",
   "city" : "Boardman",
   "country" : "US",
   "data" : "SIP/2.0 200 OK\\x0d\nVia: SIP/2.0/UDP nm;branch=foo;rport=12934;received=<srcip>\\x0d\nTo: <sip:nm2@nm2>;tag=db4ee816\\x0d\nFrom: <sip:nm@nm>;tag=root\\x0d\nCall-ID: 50000\\x0d\nCSeq: 42 OPTIONS\\x0d\nAccept: application/sdp\\x0d\nAccept-Language: en\\x0d\nAllow: INVITE, ACK, CANCEL, OPTIONS, BYE, REGISTER, SUBSCRIBE, NOTIFY, REFER, INFO, MESSAGE, UPDATE\\x0d\nSupported: replaces, timer\\x0d\nAllow-Events: message-summary, dialog, call-info, line-seize\\x0d\nContent-Length: 0\\x0d\n\\x0d\n",
   "datamd5" : "1bbcb6201ced19424e883128d40e6d3d",
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "amazonaws.com"
   ],
   "geolocus" : {
      "asn" : "AS16509",
      "continent" : "NA",
      "continentname" : "North America",
      "country" : "US",
      "countryname" : "United States",
      "isineu" : "false",
      "latitude" : "37.09024",
      "location" : "37.09024,-95.712891",
      "longitude" : "-95.712891",
      "netname" : "AMAZON-ZPDX",
      "organization" : "Amazon.com, Inc.",
      "subnet" : "35.80.0.0/12"
   },
   "host" : [
      "ec2-35-89-231-115"
   ],
   "hostname" : [
      "ec2-35-89-231-115.us-west-2.compute.amazonaws.com"
   ],
   "ip" : "35.89.231.115",
   "ipv6" : "false",
   "latitude" : "45.8491",
   "location" : "45.8491,-119.7143",
   "longitude" : "-119.7143",
   "organization" : "AMAZON-02",
   "port" : "5060",
   "protocol" : "sip",
   "reverse" : [
      "ec2-35-89-231-115.us-west-2.compute.amazonaws.com"
   ],
   "seen_date" : "2024-11-01",
   "source" : "udpscan",
   "subdomains" : [
      "us-west-2.compute.amazonaws.com",
      "compute.amazonaws.com"
   ],
   "subnet" : "35.80.0.0/12",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "com"
   ],
   "tls" : "false",
   "transport" : "udp"
}