Cyber Defense Search Engine

IP
37.113.134.242

Network
37.113.128.0/18

Domain(s)
ertelecom.ru

Device

<enterprise field>: device.class

Reverse DNS
37x113x134x242.static-business.chel.ertelecom.ru

ASN
AS41661

Organization
JSC ER-Telecom Holding

Protocol
unknown

Source
udpscan

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
cb492b7df9b5c170d7c87527940eff3b
```
\x0d
\x0d
```

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T05:55:40.000Z",
   "app" : {
      "length" : "4"
   },
   "asn" : "AS41661",
   "city" : "Chelyabinsk",
   "country" : "RU",
   "data" : "\\x0d\n\\x0d\n",
   "datamd5" : "cb492b7df9b5c170d7c87527940eff3b",
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "ertelecom.ru"
   ],
   "geolocus" : {
      "asn" : "AS41661",
      "continent" : "EU",
      "continentname" : "Europe",
      "country" : "RU",
      "countryname" : "Russia",
      "isineu" : "false",
      "latitude" : "61.52401",
      "location" : "61.52401,105.318756",
      "longitude" : "105.318756",
      "netname" : "ERTH-CHEL-PPPOE-26-NET",
      "organization" : "JSC \"ER-Telecom Holding\" Chelyabinsk Branch",
      "subnet" : "37.113.128.0/18"
   },
   "host" : [
      "37x113x134x242"
   ],
   "hostname" : [
      "37x113x134x242.static-business.chel.ertelecom.ru"
   ],
   "ip" : "37.113.134.242",
   "ipv6" : "false",
   "latitude" : "55.1581",
   "location" : "55.1581,61.4313",
   "longitude" : "61.4313",
   "organization" : "JSC ER-Telecom Holding",
   "port" : "5060",
   "protocol" : "unknown",
   "reverse" : [
      "37x113x134x242.static-business.chel.ertelecom.ru"
   ],
   "seen_date" : "2024-11-07",
   "source" : "udpscan",
   "subdomains" : [
      "chel.ertelecom.ru",
      "static-business.chel.ertelecom.ru"
   ],
   "subnet" : "37.113.128.0/18",
   "tld" : [
      "ru"
   ],
   "tls" : "false",
   "transport" : "udp"
}

IP
82.178.70.251

Network
82.178.64.0/18

Device

<enterprise field>: device.class

ASN
AS28885

Organization
Oman Telecommunications Company (S.A.O.G)

Protocol
sip

Source
udpscan

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
2857c471b660275518944f3b3f6cc226

OPTIONS sip:nm SIP/2.0\x0d
Via: SIP/2.0/UDP nm;branch=foo;rport\x0d
From: <sip:nm@nm>;tag=root\x0d
To: <sip:nm2@nm2>\x0d
Call-ID: 50000\x0d
CSeq: 42 OPTIONS\x0d
Max-Forwards: 70\x0d
Content-Length: 0\x0d
Contact: <sip:nm@nm>\x0d
Accept: application/sdp\x0d
\x0d

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T05:55:40.000Z",
   "app" : {
      "length" : "229"
   },
   "asn" : "AS28885",
   "country" : "OM",
   "data" : "OPTIONS sip:nm SIP/2.0\\x0d\nVia: SIP/2.0/UDP nm;branch=foo;rport\\x0d\nFrom: <sip:nm@nm>;tag=root\\x0d\nTo: <sip:nm2@nm2>\\x0d\nCall-ID: 50000\\x0d\nCSeq: 42 OPTIONS\\x0d\nMax-Forwards: 70\\x0d\nContent-Length: 0\\x0d\nContact: <sip:nm@nm>\\x0d\nAccept: application/sdp\\x0d\n\\x0d\n",
   "datamd5" : "2857c471b660275518944f3b3f6cc226",
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "ip" : "82.178.70.251",
   "ipv6" : "false",
   "latitude" : "21.0037",
   "location" : "21.0037,56.9997",
   "longitude" : "56.9997",
   "organization" : "Oman Telecommunications Company (S.A.O.G)",
   "port" : "5060",
   "protocol" : "sip",
   "seen_date" : "2024-11-07",
   "source" : "udpscan",
   "subnet" : "82.178.64.0/18",
   "tls" : "false",
   "transport" : "udp"
}

IP
31.154.165.251

Network
31.154.0.0/16

Device

<enterprise field>: device.class

ASN
AS12400

Organization
Partner Communications Ltd.

Protocol
sip

Source
udpscan

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
12239dd4d19ffa7aa9ad057892111dd4

SIP/2.0 200 OK\x0d
Via: SIP/2.0/UDP nm;rport=28201;received=<srcip>;branch=foo\x0d
Call-ID: 50000\x0d
From: <sip:nm@nm>;tag=root\x0d
To: <sip:nm2@nm2>\x0d
CSeq: 42 OPTIONS\x0d
Allow: PRACK, INVITE, ACK, BYE, CANCEL, UPDATE, SUBSCRIBE, NOTIFY, REFER, MESSAGE, OPTIONS\x0d
Accept: application/sdp, application/pidf+xml, application/xpidf+xml, application/simple-message-summary, message/sipfrag;version=2.0, application/im-iscomposing+xml, text/plain\x0d
Supported: replaces, 100rel, timer, norefersub\x0d
Allow-Events: presence, message-summary, refer\x0d
User-Agent: VOIP_Agent_001\x0d
Content-Type: application/sdp\x0d
Content-Length:   338\x0d
\x0d
v=0\x0d
o=- 2224069560 2224069560 IN IP4 <ip>\x0d
s=pjmedia\x0d
c=IN IP4 <ip>\x0d
t=0 0\x0d
m=audio 5000 RTP/AVP 4 18 0 8 119 100\x0d
a=rtpmap:4 G723/8000\x0d
a=fmtp:4 bitrate=6.3\x0d
a=rtpmap:18 G729/8000\x0d
a=rtpmap:0 PCMU/8000\x0d
a=rtpmap:8 PCMA/8000\x0d
a=rtpmap:119 G726-16/8000\x0d
a=sendrecv\x0d
a=rtpmap:100 telephone-event/8000\x0d
a=fmtp:100 0-15\x0d

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T05:55:40.000Z",
   "app" : {
      "length" : "927"
   },
   "asn" : "AS12400",
   "city" : "Ramat Gan",
   "country" : "IL",
   "data" : "SIP/2.0 200 OK\\x0d\nVia: SIP/2.0/UDP nm;rport=28201;received=<srcip>;branch=foo\\x0d\nCall-ID: 50000\\x0d\nFrom: <sip:nm@nm>;tag=root\\x0d\nTo: <sip:nm2@nm2>\\x0d\nCSeq: 42 OPTIONS\\x0d\nAllow: PRACK, INVITE, ACK, BYE, CANCEL, UPDATE, SUBSCRIBE, NOTIFY, REFER, MESSAGE, OPTIONS\\x0d\nAccept: application/sdp, application/pidf+xml, application/xpidf+xml, application/simple-message-summary, message/sipfrag;version=2.0, application/im-iscomposing+xml, text/plain\\x0d\nSupported: replaces, 100rel, timer, norefersub\\x0d\nAllow-Events: presence, message-summary, refer\\x0d\nUser-Agent: VOIP_Agent_001\\x0d\nContent-Type: application/sdp\\x0d\nContent-Length:   338\\x0d\n\\x0d\nv=0\\x0d\no=- 2224069560 2224069560 IN IP4 <ip>\\x0d\ns=pjmedia\\x0d\nc=IN IP4 <ip>\\x0d\nt=0 0\\x0d\nm=audio 5000 RTP/AVP 4 18 0 8 119 100\\x0d\na=rtpmap:4 G723/8000\\x0d\na=fmtp:4 bitrate=6.3\\x0d\na=rtpmap:18 G729/8000\\x0d\na=rtpmap:0 PCMU/8000\\x0d\na=rtpmap:8 PCMA/8000\\x0d\na=rtpmap:119 G726-16/8000\\x0d\na=sendrecv\\x0d\na=rtpmap:100 telephone-event/8000\\x0d\na=fmtp:100 0-15\\x0d\n",
   "datamd5" : "12239dd4d19ffa7aa9ad057892111dd4",
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS12400",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "IL",
      "countryname" : "Israel",
      "isineu" : "false",
      "latitude" : "31.046051",
      "location" : "31.046051,34.851612",
      "longitude" : "34.851612",
      "netname" : "IL-PARTNERCOM-20110303",
      "organization" : "Partner Communications Ltd.",
      "subnet" : "31.154.0.0/16"
   },
   "ip" : "31.154.165.251",
   "ipv6" : "false",
   "latitude" : "32.0717",
   "location" : "32.0717,34.8307",
   "longitude" : "34.8307",
   "organization" : "Partner Communications Ltd.",
   "port" : "5060",
   "protocol" : "sip",
   "seen_date" : "2024-11-07",
   "source" : "udpscan",
   "subnet" : "31.154.0.0/16",
   "tag" : "<enterprise field>: tag",
   "tls" : "false",
   "transport" : "udp"
}

IP
151.237.78.205

Network
151.237.78.0/23

Device

<enterprise field>: device.class

ASN
AS62110

Organization
Leader PI CI Ltd.

Protocol
sip

Source
udpscan

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
4fe99bf43259847f373ccaeff7c8dcb8

SIP/2.0 404 Not Found\x0d
Via: SIP/2.0/UDP nm;received=<srcip>;rport;branch=foo\x0d
To: <sip:nm2@nm2>;tag=5e49eb63dfb11889-ceb5e05b\x0d
From: <sip:nm@nm>;tag=root\x0d
Call-ID: 50000\x0d
CSeq: 42 OPTIONS\x0d
Server: F660/V5.0.2P1T4\x0d
Content-Length: 0\x0d
\x0d

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T05:55:40.000Z",
   "app" : {
      "length" : "235"
   },
   "asn" : "AS62110",
   "country" : "BG",
   "data" : "SIP/2.0 404 Not Found\\x0d\nVia: SIP/2.0/UDP nm;received=<srcip>;rport;branch=foo\\x0d\nTo: <sip:nm2@nm2>;tag=5e49eb63dfb11889-ceb5e05b\\x0d\nFrom: <sip:nm@nm>;tag=root\\x0d\nCall-ID: 50000\\x0d\nCSeq: 42 OPTIONS\\x0d\nServer: F660/V5.0.2P1T4\\x0d\nContent-Length: 0\\x0d\n\\x0d\n",
   "datamd5" : "4fe99bf43259847f373ccaeff7c8dcb8",
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS20750",
      "continent" : "EU",
      "continentname" : "Europe",
      "country" : "BG",
      "countryname" : "Bulgaria",
      "isineu" : "true",
      "latitude" : "42.733883",
      "location" : "42.733883,25.48583",
      "longitude" : "25.48583",
      "netname" : "BG-NETLAN",
      "organization" : "NetLan Ltd.",
      "subnet" : "151.237.72.0/21"
   },
   "ip" : "151.237.78.205",
   "ipv6" : "false",
   "latitude" : "42.6960",
   "location" : "42.6960,23.3320",
   "longitude" : "23.3320",
   "organization" : "Leader PI CI Ltd.",
   "port" : "5060",
   "protocol" : "sip",
   "seen_date" : "2024-11-07",
   "source" : "udpscan",
   "subnet" : "151.237.78.0/23",
   "tag" : "<enterprise field>: tag",
   "tls" : "false",
   "transport" : "udp"
}

IP
95.114.1.79

Network
95.112.0.0/13

Domain(s)
telefonica.de

Device

<enterprise field>: device.class

Reverse DNS
dynamic-095-114-001-079.95.114.pool.telefonica.de

ASN
AS6805

Organization
Telefonica Germany

Protocol
sip

Source
udpscan

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
a7e6b796b0ef57d74226ebd250a1a3e3

SIP/2.0 200 OK\x0d
Via: SIP/2.0/UDP nm;branch=foo;rport=28201;received=<srcip>\x0d
From: <sip:nm@nm>;tag=root\x0d
To: <sip:nm2@nm2>;tag=251997719\x0d
Call-ID: 50000\x0d
CSeq: 42 OPTIONS\x0d
User-Agent: o2-ZyXEL-1.00(AAJG.0)D20_1-VDSL_IAD_BSA_WLAN\x0d
Content-Length: 0\x0d
\x0d

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T05:55:40.000Z",
   "app" : {
      "length" : "251"
   },
   "asn" : "AS6805",
   "city" : "Munich",
   "country" : "DE",
   "data" : "SIP/2.0 200 OK\\x0d\nVia: SIP/2.0/UDP nm;branch=foo;rport=28201;received=<srcip>\\x0d\nFrom: <sip:nm@nm>;tag=root\\x0d\nTo: <sip:nm2@nm2>;tag=251997719\\x0d\nCall-ID: 50000\\x0d\nCSeq: 42 OPTIONS\\x0d\nUser-Agent: o2-ZyXEL-1.00(AAJG.0)D20_1-VDSL_IAD_BSA_WLAN\\x0d\nContent-Length: 0\\x0d\n\\x0d\n",
   "datamd5" : "a7e6b796b0ef57d74226ebd250a1a3e3",
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "telefonica.de"
   ],
   "geolocus" : {
      "asn" : "AS6805",
      "continent" : "EU",
      "continentname" : "Europe",
      "country" : "DE",
      "countryname" : "Germany",
      "isineu" : "true",
      "latitude" : "51.165691",
      "location" : "51.165691,10.451526",
      "longitude" : "10.451526",
      "netname" : "TEDE-LLU",
      "organization" : "Telefonica Germany GmbH & Co. OHG",
      "subnet" : "95.112.0.0/14"
   },
   "host" : [
      "dynamic-095-114-001-079"
   ],
   "hostname" : [
      "dynamic-095-114-001-079.95.114.pool.telefonica.de"
   ],
   "ip" : "95.114.1.79",
   "ipv6" : "false",
   "latitude" : "48.1663",
   "location" : "48.1663,11.5683",
   "longitude" : "11.5683",
   "organization" : "Telefonica Germany",
   "port" : "5060",
   "protocol" : "sip",
   "reverse" : [
      "dynamic-095-114-001-079.95.114.pool.telefonica.de"
   ],
   "seen_date" : "2024-11-07",
   "source" : "udpscan",
   "subdomains" : [
      "114.pool.telefonica.de",
      "pool.telefonica.de",
      "95.114.pool.telefonica.de"
   ],
   "subnet" : "95.112.0.0/13",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "de"
   ],
   "tls" : "false",
   "transport" : "udp"
}

IP
88.98.213.205

Network
88.98.192.0/18

Domain(s)
bcube.co.uk

Device

<enterprise field>: device.class

Reverse DNS
88.98.213.205.bcube.co.uk

ASN
AS56478

Organization
Hyperoptic Ltd

Protocol
sip

Source
udpscan

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
58e0c84428375b0d47ddf4708ce54b1b

SIP/2.0 403 SIP request not received from active SIP server\x0d
Via: SIP/2.0/UDP nm;branch=foo;rport\x0d
From: <sip:nm@nm>;tag=root\x0d
To: <sip:nm2@nm2>;tag=b72e12N26672c5659-e07c68b\x0d
Call-ID: 50000\x0d
CSeq: 42 OPTIONS\x0d
Content-Length: 0\x0d
\x0d

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T05:55:40.000Z",
   "app" : {
      "length" : "231"
   },
   "asn" : "AS56478",
   "city" : "Wandsworth",
   "country" : "GB",
   "data" : "SIP/2.0 403 SIP request not received from active SIP server\\x0d\nVia: SIP/2.0/UDP nm;branch=foo;rport\\x0d\nFrom: <sip:nm@nm>;tag=root\\x0d\nTo: <sip:nm2@nm2>;tag=b72e12N26672c5659-e07c68b\\x0d\nCall-ID: 50000\\x0d\nCSeq: 42 OPTIONS\\x0d\nContent-Length: 0\\x0d\n\\x0d\n",
   "datamd5" : "58e0c84428375b0d47ddf4708ce54b1b",
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "bcube.co.uk"
   ],
   "geolocus" : {
      "asn" : "AS56478",
      "continent" : "EU",
      "continentname" : "Europe",
      "country" : "GB",
      "countryname" : "United Kingdom",
      "isineu" : "false",
      "latitude" : "55.378051",
      "location" : "55.378051,-3.435973",
      "longitude" : "-3.435973",
      "netname" : "UK-BCUBE-20050803",
      "organization" : "Hyperoptic Ltd",
      "subnet" : "88.98.192.0/18"
   },
   "host" : [
      "88"
   ],
   "hostname" : [
      "88.98.213.205.bcube.co.uk"
   ],
   "ip" : "88.98.213.205",
   "ipv6" : "false",
   "latitude" : "51.4719",
   "location" : "51.4719,-0.1616",
   "longitude" : "-0.1616",
   "organization" : "Hyperoptic Ltd",
   "port" : "5060",
   "protocol" : "sip",
   "reverse" : [
      "88.98.213.205.bcube.co.uk"
   ],
   "seen_date" : "2024-11-07",
   "source" : "udpscan",
   "subdomains" : [
      "98.213.205.bcube.co.uk",
      "213.205.bcube.co.uk",
      "205.bcube.co.uk"
   ],
   "subnet" : "88.98.192.0/18",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "co.uk"
   ],
   "tls" : "false",
   "transport" : "udp"
}

IP
167.99.206.205

Network
167.99.0.0/16

Device

<enterprise field>: device.class

ASN
AS14061

Organization
DIGITALOCEAN-ASN

Protocol
sip

Source
udpscan

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
387dcd7888bf3612eaec19aeafff1be7

SIP/2.0 200 OK\x0d
Via: SIP/2.0/UDP nm;branch=foo;rport=28201;received=<srcip>\x0d
To: <sip:nm2@nm2>;tag=a83a3100\x0d
From: <sip:nm@nm>;tag=root\x0d
Call-ID: 50000\x0d
CSeq: 42 OPTIONS\x0d
Accept: application/sdp\x0d
Accept-Language: en\x0d
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REGISTER, SUBSCRIBE, NOTIFY, REFER, INFO, MESSAGE, UPDATE\x0d
Supported: replaces, timer\x0d
Allow-Events: message-summary, dialog, call-info, line-seize\x0d
Content-Length: 0\x0d
\x0d

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T05:55:40.000Z",
   "app" : {
      "length" : "429"
   },
   "asn" : "AS14061",
   "city" : "Slough",
   "country" : "GB",
   "data" : "SIP/2.0 200 OK\\x0d\nVia: SIP/2.0/UDP nm;branch=foo;rport=28201;received=<srcip>\\x0d\nTo: <sip:nm2@nm2>;tag=a83a3100\\x0d\nFrom: <sip:nm@nm>;tag=root\\x0d\nCall-ID: 50000\\x0d\nCSeq: 42 OPTIONS\\x0d\nAccept: application/sdp\\x0d\nAccept-Language: en\\x0d\nAllow: INVITE, ACK, CANCEL, OPTIONS, BYE, REGISTER, SUBSCRIBE, NOTIFY, REFER, INFO, MESSAGE, UPDATE\\x0d\nSupported: replaces, timer\\x0d\nAllow-Events: message-summary, dialog, call-info, line-seize\\x0d\nContent-Length: 0\\x0d\n\\x0d\n",
   "datamd5" : "387dcd7888bf3612eaec19aeafff1be7",
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS14061",
      "continent" : "NA",
      "continentname" : "North America",
      "country" : "US",
      "countryname" : "United States",
      "isineu" : "false",
      "latitude" : "37.09024",
      "location" : "37.09024,-95.712891",
      "longitude" : "-95.712891",
      "netname" : "DIGITALOCEAN-167-99-0-0",
      "organization" : "DigitalOcean, LLC",
      "subnet" : "167.99.192.0/20"
   },
   "ip" : "167.99.206.205",
   "ipv6" : "false",
   "latitude" : "51.5368",
   "location" : "51.5368,-0.6718",
   "longitude" : "-0.6718",
   "organization" : "DIGITALOCEAN-ASN",
   "port" : "5060",
   "protocol" : "sip",
   "seen_date" : "2024-11-07",
   "source" : "udpscan",
   "subnet" : "167.99.0.0/16",
   "tag" : "<enterprise field>: tag",
   "tls" : "false",
   "transport" : "udp"
}

IP
179.49.207.79

Network
179.49.204.0/22

Device

<enterprise field>: device.class

ASN
AS271212

Organization
RL Connect Telecomunicacao LTDA

Protocol
sip

Source
udpscan

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
537f532bc89b366202626ed002fbc8e7

SIP/2.0 200 OK\x0d
Via: SIP/2.0/UDP nm;rport=28201;received=<srcip>;branch=foo\x0d
Call-ID: 50000\x0d
From: <sip:nm@nm>;tag=root\x0d
To: <sip:nm2@nm2>;tag=foo\x0d
CSeq: 42 OPTIONS\x0d
Allow: PRACK, INVITE, ACK, BYE, CANCEL, UPDATE, SUBSCRIBE, NOTIFY, REFER, OPTIONS\x0d
Accept: application/sdp, application/simple-message-summary, message/sipfrag;version=2.0\x0d
Supported: replaces, 100rel, timer, norefersub\x0d
Allow-Events: message-summary, refer\x0d
User-Agent: TP-Link SIP Stack V1.0.0\x0d
Content-Type: application/sdp\x0d
Content-Length:   333\x0d
\x0d
v=0\x0d
o=- 3939947739 3939947739 IN IP4 <ip>\x0d
s=pjmedia\x0d
c=IN IP4 <ip>\x0d
t=0 0\x0d
m=audio 60672 RTP/AVP 0 8 9 2 110 18\x0d
a=rtcp:60673 IN IP4 <ip>\x0d
a=rtpmap:0 PCMU/8000\x0d
a=rtpmap:8 PCMA/8000\x0d
a=rtpmap:9 G722/16000\x0d
a=rtpmap:2 G726-32/8000\x0d
a=rtpmap:110 G726-32/8000\x0d
a=rtpmap:18 G729/8000\x0d
a=sendrecv\x0d
a=ptime:0\x0d

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T05:55:40.000Z",
   "app" : {
      "length" : "825"
   },
   "asn" : "AS271212",
   "city" : "Rio de Janeiro",
   "country" : "BR",
   "data" : "SIP/2.0 200 OK\\x0d\nVia: SIP/2.0/UDP nm;rport=28201;received=<srcip>;branch=foo\\x0d\nCall-ID: 50000\\x0d\nFrom: <sip:nm@nm>;tag=root\\x0d\nTo: <sip:nm2@nm2>;tag=foo\\x0d\nCSeq: 42 OPTIONS\\x0d\nAllow: PRACK, INVITE, ACK, BYE, CANCEL, UPDATE, SUBSCRIBE, NOTIFY, REFER, OPTIONS\\x0d\nAccept: application/sdp, application/simple-message-summary, message/sipfrag;version=2.0\\x0d\nSupported: replaces, 100rel, timer, norefersub\\x0d\nAllow-Events: message-summary, refer\\x0d\nUser-Agent: TP-Link SIP Stack V1.0.0\\x0d\nContent-Type: application/sdp\\x0d\nContent-Length:   333\\x0d\n\\x0d\nv=0\\x0d\no=- 3939947739 3939947739 IN IP4 <ip>\\x0d\ns=pjmedia\\x0d\nc=IN IP4 <ip>\\x0d\nt=0 0\\x0d\nm=audio 60672 RTP/AVP 0 8 9 2 110 18\\x0d\na=rtcp:60673 IN IP4 <ip>\\x0d\na=rtpmap:0 PCMU/8000\\x0d\na=rtpmap:8 PCMA/8000\\x0d\na=rtpmap:9 G722/16000\\x0d\na=rtpmap:2 G726-32/8000\\x0d\na=rtpmap:110 G726-32/8000\\x0d\na=rtpmap:18 G729/8000\\x0d\na=sendrecv\\x0d\na=ptime:0\\x0d\n",
   "datamd5" : "537f532bc89b366202626ed002fbc8e7",
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS271212",
      "continent" : "SA",
      "continentname" : "South America",
      "country" : "BR",
      "countryname" : "Brazil",
      "isineu" : "false",
      "latitude" : "-14.235004",
      "location" : "-14.235004,-51.92528",
      "longitude" : "-51.92528",
      "netname" : "26.812.720/0001-45",
      "organization" : "RL Connect Telecomunicacao LTDA",
      "subnet" : "179.49.204.0/22"
   },
   "ip" : "179.49.207.79",
   "ipv6" : "false",
   "latitude" : "-22.9201",
   "location" : "-22.9201,-43.0811",
   "longitude" : "-43.0811",
   "organization" : "RL Connect Telecomunicacao LTDA",
   "port" : "5060",
   "protocol" : "sip",
   "seen_date" : "2024-11-07",
   "source" : "udpscan",
   "subnet" : "179.49.204.0/22",
   "tag" : "<enterprise field>: tag",
   "tls" : "false",
   "transport" : "udp"
}

IP
217.80.201.81

Network
217.80.0.0/15

Domain(s)
t-ipconnect.de

Device

<enterprise field>: device.class

Reverse DNS
pd950c951.dip0.t-ipconnect.de

ASN
AS3320

Organization
Deutsche Telekom AG

Protocol
sip

Source
udpscan

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
316a1b30baad0b999e9e49204b1f7284

SIP/2.0 404 Not Found\x0d
Via: SIP/2.0/UDP nm;branch=foo;rport=28201;received=<srcip>\x0d
From: <sip:nm@nm>;tag=root\x0d
To: <sip:nm2@nm2>;tag=CBB1CD710EA09C06\x0d
Call-ID: 50000\x0d
CSeq: 42 OPTIONS\x0d
User-Agent: FRITZ!OS\x0d
Content-Length: 0\x0d
\x0d

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T05:55:40.000Z",
   "app" : {
      "length" : "229"
   },
   "asn" : "AS3320",
   "city" : "Landau",
   "country" : "DE",
   "data" : "SIP/2.0 404 Not Found\\x0d\nVia: SIP/2.0/UDP nm;branch=foo;rport=28201;received=<srcip>\\x0d\nFrom: <sip:nm@nm>;tag=root\\x0d\nTo: <sip:nm2@nm2>;tag=CBB1CD710EA09C06\\x0d\nCall-ID: 50000\\x0d\nCSeq: 42 OPTIONS\\x0d\nUser-Agent: FRITZ!OS\\x0d\nContent-Length: 0\\x0d\n\\x0d\n",
   "datamd5" : "316a1b30baad0b999e9e49204b1f7284",
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "t-ipconnect.de"
   ],
   "geolocus" : {
      "asn" : "AS3320",
      "continent" : "EU",
      "continentname" : "Europe",
      "country" : "DE",
      "countryname" : "Germany",
      "isineu" : "true",
      "latitude" : "51.165691",
      "location" : "51.165691,10.451526",
      "longitude" : "10.451526",
      "netname" : "DTAG-DIAL14",
      "organization" : "Deutsche Telekom AG",
      "subnet" : "217.80.0.0/14"
   },
   "host" : [
      "pd950c951"
   ],
   "hostname" : [
      "pd950c951.dip0.t-ipconnect.de"
   ],
   "ip" : "217.80.201.81",
   "ipv6" : "false",
   "latitude" : "49.1968",
   "location" : "49.1968,8.1219",
   "longitude" : "8.1219",
   "organization" : "Deutsche Telekom AG",
   "port" : "5060",
   "protocol" : "sip",
   "reverse" : [
      "pd950c951.dip0.t-ipconnect.de"
   ],
   "seen_date" : "2024-11-07",
   "source" : "udpscan",
   "subdomains" : [
      "dip0.t-ipconnect.de"
   ],
   "subnet" : "217.80.0.0/15",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "de"
   ],
   "tls" : "false",
   "transport" : "udp"
}

IP
129.10.64.20

Network
129.10.0.0/16

Device

<enterprise field>: device.class

ASN
AS156

Organization
NORTHEASTERN-GW-AS

Protocol
unknown

Source
udpscan

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
cb492b7df9b5c170d7c87527940eff3b
```
\x0d
\x0d
```

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T05:55:34.000Z",
   "app" : {
      "length" : "4"
   },
   "asn" : "AS156",
   "city" : "Watertown",
   "country" : "US",
   "data" : "\\x0d\n\\x0d\n",
   "datamd5" : "cb492b7df9b5c170d7c87527940eff3b",
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS156",
      "continent" : "NA",
      "continentname" : "North America",
      "country" : "US",
      "countryname" : "United States",
      "isineu" : "false",
      "latitude" : "37.09024",
      "location" : "37.09024,-95.712891",
      "longitude" : "-95.712891",
      "netname" : "NORTHEASTERN-NET",
      "organization" : "Northeastern University",
      "subnet" : "129.10.0.0/16"
   },
   "ip" : "129.10.64.20",
   "ipv6" : "false",
   "latitude" : "42.3725",
   "location" : "42.3725,-71.1814",
   "longitude" : "-71.1814",
   "organization" : "NORTHEASTERN-GW-AS",
   "port" : "5060",
   "protocol" : "unknown",
   "seen_date" : "2024-11-07",
   "source" : "udpscan",
   "subnet" : "129.10.0.0/16",
   "tls" : "false",
   "transport" : "udp"
}

Returning 10 result(s) out of 2,570,891 in 0.153 second(s)

37.113.134.242:5060 (udp/unknown) - last seen on 2024-11-07 at 05:55:40 UTC

82.178.70.251:5060 (udp/sip) - last seen on 2024-11-07 at 05:55:40 UTC

31.154.165.251:5060 (udp/sip) - last seen on 2024-11-07 at 05:55:40 UTC

151.237.78.205:5060 (udp/sip) - last seen on 2024-11-07 at 05:55:40 UTC

95.114.1.79:5060 (udp/sip) - last seen on 2024-11-07 at 05:55:40 UTC

88.98.213.205:5060 (udp/sip) - last seen on 2024-11-07 at 05:55:40 UTC

167.99.206.205:5060 (udp/sip) - last seen on 2024-11-07 at 05:55:40 UTC

179.49.207.79:5060 (udp/sip) - last seen on 2024-11-07 at 05:55:40 UTC

217.80.201.81:5060 (udp/sip) - last seen on 2024-11-07 at 05:55:40 UTC

129.10.64.20:5060 (udp/unknown) - last seen on 2024-11-07 at 05:55:34 UTC