ONYPHE
datascan ctl threatlist sniffer vulnscan riskscan

Returning 3 result(s) out of 3 in 0.039 second(s)

  • 96.30.79.57:5060 (udp/sip) - last seen on 2024-10-31 at 08:35:54 UTC

    • IP
      96.30.79.57
      Network
      96.30.79.0/24
      Domain(s)
      symphony.net.th
      Device

      <enterprise field>: device.class

      Reverse DNS
      bb-96-30-79-57.symphony.net.th
      ASN
      AS136393
      Organization
      Symphony Communication Thailand PCL.
      Protocol
      sip
      Source
      udpscan
    • NOTE
      This tab is a merge from current page results.
      Domain(s)
      symphony.net.th
      Hostname(s)
      bb-96-30-79-56.symphony.net.th bb-96-30-79-57.symphony.net.th di-83-118-34-14.symphony.net.th
      IP(s)
      83.118.34.14 96.30.79.56 96.30.79.57
      Port(s)
      5060
      Protocol(s)
      sip
      Tag(s)

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      734a05021c6db7c31449009b36fbba18 
    • SIP/2.0 404 Not Found\x0d
Via: SIP/2.0/UDP nm:5060;branch=foo;received=<srcip>;rport=25851\x0d
From: <sip:nm@nm>;tag=root\x0d
To: <sip:nm2@nm2>;tag=b72e12N2667234160-24c593dc\x0d
Call-ID: 50000\x0d
CSeq: 42 OPTIONS\x0d
Accept: multipart/mixed,application/sdp,application/simple-message-summary,application/broadsoft,application/dialog-info+xml,application/simservs+xml,application/vnd.etsi.aoc+xml;sv=2,application/vnd.etsi.aoc+xml;schemaversion=2,application/vnd.etsi.aoc+xml\x0d
Allow: INVITE,ACK,CANCEL,BYE,PRACK,UPDATE,SUBSCRIBE\x0d
Supported: 100rel,timer\x0d
Content-Length: 0\x0d
\x0d

    • {
   "@category" : "datascan",
   "@timestamp" : "2024-10-31T08:35:54.000Z",
   "app" : {
      "length" : "559"
   },
   "asn" : "AS136393",
   "city" : "Pattaya",
   "country" : "TH",
   "data" : "SIP/2.0 404 Not Found\\x0d\nVia: SIP/2.0/UDP nm:5060;branch=foo;received=<srcip>;rport=25851\\x0d\nFrom: <sip:nm@nm>;tag=root\\x0d\nTo: <sip:nm2@nm2>;tag=b72e12N2667234160-24c593dc\\x0d\nCall-ID: 50000\\x0d\nCSeq: 42 OPTIONS\\x0d\nAccept: multipart/mixed,application/sdp,application/simple-message-summary,application/broadsoft,application/dialog-info+xml,application/simservs+xml,application/vnd.etsi.aoc+xml;sv=2,application/vnd.etsi.aoc+xml;schemaversion=2,application/vnd.etsi.aoc+xml\\x0d\nAllow: INVITE,ACK,CANCEL,BYE,PRACK,UPDATE,SUBSCRIBE\\x0d\nSupported: 100rel,timer\\x0d\nContent-Length: 0\\x0d\n\\x0d\n",
   "datamd5" : "734a05021c6db7c31449009b36fbba18",
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "symphony.net.th"
   ],
   "geolocus" : {
      "asn" : "AS136393",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "TH",
      "countryname" : "Thailand",
      "isineu" : "false",
      "latitude" : "15.870032",
      "location" : "15.870032,100.992541",
      "longitude" : "100.992541",
      "netname" : "SYMPHONY-BROADBAND",
      "organization" : "Symphony Communication Public Company Limited",
      "subnet" : "96.30.79.0/24"
   },
   "host" : [
      "bb-96-30-79-57"
   ],
   "hostname" : [
      "bb-96-30-79-57.symphony.net.th"
   ],
   "ip" : "96.30.79.57",
   "ipv6" : "false",
   "latitude" : "13.0508",
   "location" : "13.0508,100.9367",
   "longitude" : "100.9367",
   "organization" : "Symphony Communication Thailand PCL.",
   "port" : "5060",
   "protocol" : "sip",
   "reverse" : [
      "bb-96-30-79-57.symphony.net.th"
   ],
   "seen_date" : "2024-10-31",
   "source" : "udpscan",
   "subnet" : "96.30.79.0/24",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "net.th"
   ],
   "tls" : "false",
   "transport" : "udp"
}

  • 96.30.79.56:5060 (udp/sip) - last seen on 2024-10-21 at 05:42:36 UTC

    • IP
      96.30.79.56
      Network
      96.30.79.0/24
      Domain(s)
      symphony.net.th
      Device

      <enterprise field>: device.class

      Reverse DNS
      bb-96-30-79-56.symphony.net.th
      ASN
      AS136393
      Organization
      Symphony Communication Thailand PCL.
      Protocol
      sip
      Source
      udpscan
    • NOTE
      This tab is a merge from current page results.
      Domain(s)
      symphony.net.th
      Hostname(s)
      bb-96-30-79-56.symphony.net.th bb-96-30-79-57.symphony.net.th di-83-118-34-14.symphony.net.th
      IP(s)
      83.118.34.14 96.30.79.56 96.30.79.57
      Port(s)
      5060
      Protocol(s)
      sip
      Tag(s)

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      09b3429d196c0ac467bdef467793deff 
    • SIP/2.0 404 Not Found\x0d
Via: SIP/2.0/UDP nm:5060;branch=foo;received=<srcip>;rport=64339\x0d
From: <sip:nm@nm>;tag=root\x0d
To: <sip:nm2@nm2>;tag=b72e12N266715e9c5-51b7c146\x0d
Call-ID: 50000\x0d
CSeq: 42 OPTIONS\x0d
Accept: multipart/mixed,application/sdp,application/simple-message-summary,application/broadsoft,application/dialog-info+xml,application/simservs+xml,application/vnd.etsi.aoc+xml;sv=2,application/vnd.etsi.aoc+xml;schemaversion=2,application/vnd.etsi.aoc+xml\x0d
Allow: INVITE,ACK,CANCEL,BYE,PRACK,UPDATE,SUBSCRIBE\x0d
Supported: 100rel,timer\x0d
Content-Length: 0\x0d
\x0d

    • {
   "@category" : "datascan",
   "@timestamp" : "2024-10-21T05:42:36.000Z",
   "app" : {
      "length" : "559"
   },
   "asn" : "AS136393",
   "city" : "Pattaya",
   "country" : "TH",
   "data" : "SIP/2.0 404 Not Found\\x0d\nVia: SIP/2.0/UDP nm:5060;branch=foo;received=<srcip>;rport=64339\\x0d\nFrom: <sip:nm@nm>;tag=root\\x0d\nTo: <sip:nm2@nm2>;tag=b72e12N266715e9c5-51b7c146\\x0d\nCall-ID: 50000\\x0d\nCSeq: 42 OPTIONS\\x0d\nAccept: multipart/mixed,application/sdp,application/simple-message-summary,application/broadsoft,application/dialog-info+xml,application/simservs+xml,application/vnd.etsi.aoc+xml;sv=2,application/vnd.etsi.aoc+xml;schemaversion=2,application/vnd.etsi.aoc+xml\\x0d\nAllow: INVITE,ACK,CANCEL,BYE,PRACK,UPDATE,SUBSCRIBE\\x0d\nSupported: 100rel,timer\\x0d\nContent-Length: 0\\x0d\n\\x0d\n",
   "datamd5" : "09b3429d196c0ac467bdef467793deff",
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "symphony.net.th"
   ],
   "geolocus" : {
      "asn" : "AS136393",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "TH",
      "countryname" : "Thailand",
      "isineu" : "false",
      "latitude" : "15.870032",
      "location" : "15.870032,100.992541",
      "longitude" : "100.992541",
      "netname" : "SYMPHONY-BROADBAND",
      "organization" : "Symphony Communication Public Company Limited",
      "subnet" : "96.30.79.0/24"
   },
   "host" : [
      "bb-96-30-79-56"
   ],
   "hostname" : [
      "bb-96-30-79-56.symphony.net.th"
   ],
   "ip" : "96.30.79.56",
   "ipv6" : "false",
   "latitude" : "13.0508",
   "location" : "13.0508,100.9367",
   "longitude" : "100.9367",
   "organization" : "Symphony Communication Thailand PCL.",
   "port" : "5060",
   "protocol" : "sip",
   "reverse" : [
      "bb-96-30-79-56.symphony.net.th"
   ],
   "seen_date" : "2024-10-21",
   "source" : "udpscan",
   "subnet" : "96.30.79.0/24",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "net.th"
   ],
   "tls" : "false",
   "transport" : "udp"
}

  • 83.118.34.14:5060 (udp/sip) - last seen on 2024-10-05 at 03:00:02 UTC

    • IP
      83.118.34.14
      Network
      83.118.32.0/21
      Domain(s)
      symphony.net.th
      Device

      <enterprise field>: device.class

      Reverse DNS
      di-83-118-34-14.symphony.net.th
      ASN
      AS132280
      Organization
      Symphony Communication Thailand PCL.
      Protocol
      sip
      Source
      udpscan
    • NOTE
      This tab is a merge from current page results.
      Domain(s)
      symphony.net.th
      Hostname(s)
      bb-96-30-79-56.symphony.net.th bb-96-30-79-57.symphony.net.th di-83-118-34-14.symphony.net.th
      IP(s)
      83.118.34.14 96.30.79.56 96.30.79.57
      Port(s)
      5060
      Protocol(s)
      sip
      Tag(s)

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      564f29b0a79695ac3431e0f425e4ac8c 
    • SIP/2.0 200 OK\x0d
Via: SIP/2.0/UDP nm;rport=31489;received=172.26.55.138;branch=foo\x0d
Call-ID: 50000\x0d
From: <sip:nm@nm>;tag=root\x0d
To: <sip:nm2@nm2>;tag=foo\x0d
CSeq: 42 OPTIONS\x0d
Accept: application/sdp, application/xpidf+xml, application/cpim-pidf+xml, application/pidf+xml, application/simple-message-summary, application/pidf+xml, application/dialog-info+xml, application/dialog-info+xml, application/simple-message-summary, message/sipfrag;version=2.0\x0d
Allow: OPTIONS, NOTIFY, SUBSCRIBE, NOTIFY, PUBLISH, INVITE, ACK, BYE, CANCEL, UPDATE, PRACK, REFER, MESSAGE, REGISTER\x0d
Supported: 100rel, timer, replaces, norefersub\x0d
Accept-Encoding: text/plain\x0d
Accept-Language: en\x0d
Server: Yeastar P560\x0d
Content-Length:  0\x0d
\x0d

    • {
   "@category" : "datascan",
   "@timestamp" : "2024-10-05T03:00:02.000Z",
   "app" : {
      "extract" : {
         "ip" : [
            "172.26.55.138"
         ]
      },
      "length" : "711"
   },
   "asn" : "AS132280",
   "country" : "TH",
   "data" : "SIP/2.0 200 OK\\x0d\nVia: SIP/2.0/UDP nm;rport=31489;received=172.26.55.138;branch=foo\\x0d\nCall-ID: 50000\\x0d\nFrom: <sip:nm@nm>;tag=root\\x0d\nTo: <sip:nm2@nm2>;tag=foo\\x0d\nCSeq: 42 OPTIONS\\x0d\nAccept: application/sdp, application/xpidf+xml, application/cpim-pidf+xml, application/pidf+xml, application/simple-message-summary, application/pidf+xml, application/dialog-info+xml, application/dialog-info+xml, application/simple-message-summary, message/sipfrag;version=2.0\\x0d\nAllow: OPTIONS, NOTIFY, SUBSCRIBE, NOTIFY, PUBLISH, INVITE, ACK, BYE, CANCEL, UPDATE, PRACK, REFER, MESSAGE, REGISTER\\x0d\nSupported: 100rel, timer, replaces, norefersub\\x0d\nAccept-Encoding: text/plain\\x0d\nAccept-Language: en\\x0d\nServer: Yeastar P560\\x0d\nContent-Length:  0\\x0d\n\\x0d\n",
   "datamd5" : "564f29b0a79695ac3431e0f425e4ac8c",
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "symphony.net.th"
   ],
   "host" : [
      "di-83-118-34-14"
   ],
   "hostname" : [
      "di-83-118-34-14.symphony.net.th"
   ],
   "ip" : "83.118.34.14",
   "ipv6" : "false",
   "latitude" : "13.7442",
   "location" : "13.7442,100.4608",
   "longitude" : "100.4608",
   "organization" : "Symphony Communication Thailand PCL.",
   "port" : "5060",
   "protocol" : "sip",
   "reverse" : [
      "di-83-118-34-14.symphony.net.th"
   ],
   "seen_date" : "2024-10-05",
   "source" : "udpscan",
   "subnet" : "83.118.32.0/21",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "net.th"
   ],
   "tls" : "false",
   "transport" : "udp"
}