Cyber Defense Search Engine

IP
37.113.134.242

Network
37.113.128.0/18

Domain(s)
ertelecom.ru

Device

<enterprise field>: device.class

Reverse DNS
37x113x134x242.static-business.chel.ertelecom.ru

ASN
AS41661

Organization
JSC ER-Telecom Holding

Protocol
unknown

Source
udpscan

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
cb492b7df9b5c170d7c87527940eff3b
```
\x0d
\x0d
```

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T05:37:44.000Z",
   "app" : {
      "length" : "4"
   },
   "asn" : "AS41661",
   "city" : "Chelyabinsk",
   "country" : "RU",
   "data" : "\\x0d\n\\x0d\n",
   "datamd5" : "cb492b7df9b5c170d7c87527940eff3b",
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "ertelecom.ru"
   ],
   "geolocus" : {
      "asn" : "AS41661",
      "continent" : "EU",
      "continentname" : "Europe",
      "country" : "RU",
      "countryname" : "Russia",
      "isineu" : "false",
      "latitude" : "61.52401",
      "location" : "61.52401,105.318756",
      "longitude" : "105.318756",
      "netname" : "ERTH-CHEL-PPPOE-26-NET",
      "organization" : "JSC \"ER-Telecom Holding\" Chelyabinsk Branch",
      "subnet" : "37.113.128.0/18"
   },
   "host" : [
      "37x113x134x242"
   ],
   "hostname" : [
      "37x113x134x242.static-business.chel.ertelecom.ru"
   ],
   "ip" : "37.113.134.242",
   "ipv6" : "false",
   "latitude" : "55.1581",
   "location" : "55.1581,61.4313",
   "longitude" : "61.4313",
   "organization" : "JSC ER-Telecom Holding",
   "port" : "5060",
   "protocol" : "unknown",
   "reverse" : [
      "37x113x134x242.static-business.chel.ertelecom.ru"
   ],
   "seen_date" : "2024-11-07",
   "source" : "udpscan",
   "subdomains" : [
      "chel.ertelecom.ru",
      "static-business.chel.ertelecom.ru"
   ],
   "subnet" : "37.113.128.0/18",
   "tld" : [
      "ru"
   ],
   "tls" : "false",
   "transport" : "udp"
}

IP
151.50.197.166

Network
151.48.0.0/12

Domain(s)
wind.it

Device

<enterprise field>: device.class

Reverse DNS
adsl-ull-166-197.50-151.wind.it

ASN
AS1267

Organization
Wind Tre S.p.A.

Protocol
sip

Source
udpscan

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
52d01ee9da0be73a7eb82221a7dc1204

SIP/2.0 200 OK\x0d
Via: SIP/2.0/UDP nm;rport=58950;received=<srcip>;branch=foo\x0d
Call-ID: 50000\x0d
From: <sip:nm@nm>;tag=root\x0d
To: <sip:nm2@nm2>;tag=foo\x0d
CSeq: 42 OPTIONS\x0d
Allow: PRACK, INVITE, ACK, BYE, CANCEL, UPDATE, SUBSCRIBE, NOTIFY, REFER, OPTIONS\x0d
Accept: application/sdp, application/simple-message-summary, message/sipfrag;version=2.0\x0d
Supported: replaces, 100rel, timer, norefersub\x0d
Allow-Events: message-summary, refer\x0d
User-Agent: TP-Link SIP Stack V1.0.0\x0d
Content-Type: application/sdp\x0d
Content-Length:   306\x0d
\x0d
v=0\x0d
o=- 3939946663 3939946663 IN IP4 <ip>\x0d
s=pjmedia\x0d
c=IN IP4 <ip>\x0d
t=0 0\x0d
m=audio 60000 RTP/AVP 18 8 0 96\x0d
a=rtcp:60001 IN IP4 <ip>\x0d
a=rtpmap:18 G729/8000\x0d
a=rtpmap:8 PCMA/8000\x0d
a=rtpmap:0 PCMU/8000\x0d
a=sendrecv\x0d
a=ptime:0\x0d
a=rtpmap:96 telephone-event/8000\x0d
a=fmtp:96 0-15\x0d

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T05:37:44.000Z",
   "app" : {
      "length" : "795"
   },
   "asn" : "AS1267",
   "city" : "Taranto",
   "country" : "IT",
   "data" : "SIP/2.0 200 OK\\x0d\nVia: SIP/2.0/UDP nm;rport=58950;received=<srcip>;branch=foo\\x0d\nCall-ID: 50000\\x0d\nFrom: <sip:nm@nm>;tag=root\\x0d\nTo: <sip:nm2@nm2>;tag=foo\\x0d\nCSeq: 42 OPTIONS\\x0d\nAllow: PRACK, INVITE, ACK, BYE, CANCEL, UPDATE, SUBSCRIBE, NOTIFY, REFER, OPTIONS\\x0d\nAccept: application/sdp, application/simple-message-summary, message/sipfrag;version=2.0\\x0d\nSupported: replaces, 100rel, timer, norefersub\\x0d\nAllow-Events: message-summary, refer\\x0d\nUser-Agent: TP-Link SIP Stack V1.0.0\\x0d\nContent-Type: application/sdp\\x0d\nContent-Length:   306\\x0d\n\\x0d\nv=0\\x0d\no=- 3939946663 3939946663 IN IP4 <ip>\\x0d\ns=pjmedia\\x0d\nc=IN IP4 <ip>\\x0d\nt=0 0\\x0d\nm=audio 60000 RTP/AVP 18 8 0 96\\x0d\na=rtcp:60001 IN IP4 <ip>\\x0d\na=rtpmap:18 G729/8000\\x0d\na=rtpmap:8 PCMA/8000\\x0d\na=rtpmap:0 PCMU/8000\\x0d\na=sendrecv\\x0d\na=ptime:0\\x0d\na=rtpmap:96 telephone-event/8000\\x0d\na=fmtp:96 0-15\\x0d\n",
   "datamd5" : "52d01ee9da0be73a7eb82221a7dc1204",
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "wind.it"
   ],
   "geolocus" : {
      "asn" : "AS1267",
      "continent" : "EU",
      "continentname" : "Europe",
      "country" : "IT",
      "countryname" : "Italy",
      "isineu" : "true",
      "latitude" : "41.87194",
      "location" : "41.87194,12.56738",
      "longitude" : "12.56738",
      "netname" : "WIND-EX-IUNET",
      "organization" : "WIND TRE S.P.A.",
      "subnet" : "151.50.0.0/15"
   },
   "host" : [
      "adsl-ull-166-197"
   ],
   "hostname" : [
      "adsl-ull-166-197.50-151.wind.it"
   ],
   "ip" : "151.50.197.166",
   "ipv6" : "false",
   "latitude" : "40.4617",
   "location" : "40.4617,17.2436",
   "longitude" : "17.2436",
   "organization" : "Wind Tre S.p.A.",
   "port" : "5060",
   "protocol" : "sip",
   "reverse" : [
      "adsl-ull-166-197.50-151.wind.it"
   ],
   "seen_date" : "2024-11-07",
   "source" : "udpscan",
   "subdomains" : [
      "50-151.wind.it"
   ],
   "subnet" : "151.48.0.0/12",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "it"
   ],
   "tls" : "false",
   "transport" : "udp"
}

IP
31.188.41.13

Network
31.188.0.0/15

Device

<enterprise field>: device.class

ASN
AS24608

Organization
Wind Tre S.p.A.

Protocol
sip

Source
udpscan

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
1f40f37e9f82135a8a51e378a22cfcf0

SIP/2.0 404 Not Found\x0d
From: <sip:nm@nm>;tag=root\x0d
To: <sip:nm2@nm2>;tag=1cea148-d29bc1f-13c4-5506-207d3d-89b66f6-207d3d\x0d
Call-ID: 50000\x0d
CSeq: 42 OPTIONS\x0d
User-Agent: DLink VoIP Stack\x0d
Supported: replaces,timer,100rel\x0d
Via: SIP/2.0/UDP nm;received=<srcip>;rport=58950;branch=foo\x0d
Content-Length: 0\x0d
\x0d

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T05:37:44.000Z",
   "app" : {
      "length" : "302"
   },
   "asn" : "AS24608",
   "city" : "Ospitaletto",
   "country" : "IT",
   "data" : "SIP/2.0 404 Not Found\\x0d\nFrom: <sip:nm@nm>;tag=root\\x0d\nTo: <sip:nm2@nm2>;tag=1cea148-d29bc1f-13c4-5506-207d3d-89b66f6-207d3d\\x0d\nCall-ID: 50000\\x0d\nCSeq: 42 OPTIONS\\x0d\nUser-Agent: DLink VoIP Stack\\x0d\nSupported: replaces,timer,100rel\\x0d\nVia: SIP/2.0/UDP nm;received=<srcip>;rport=58950;branch=foo\\x0d\nContent-Length: 0\\x0d\n\\x0d\n",
   "datamd5" : "1f40f37e9f82135a8a51e378a22cfcf0",
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "ip" : "31.188.41.13",
   "ipv6" : "false",
   "latitude" : "45.5514",
   "location" : "45.5514,10.0771",
   "longitude" : "10.0771",
   "organization" : "Wind Tre S.p.A.",
   "port" : "5060",
   "protocol" : "sip",
   "seen_date" : "2024-11-07",
   "source" : "udpscan",
   "subnet" : "31.188.0.0/15",
   "tag" : "<enterprise field>: tag",
   "tls" : "false",
   "transport" : "udp"
}

IP
129.10.126.50

Network
129.10.0.0/16

Device

<enterprise field>: device.class

ASN
AS156

Organization
NORTHEASTERN-GW-AS

Protocol
unknown

Source
udpscan

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
cb492b7df9b5c170d7c87527940eff3b
```
\x0d
\x0d
```

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T05:37:44.000Z",
   "app" : {
      "length" : "4"
   },
   "asn" : "AS156",
   "city" : "Mansfield",
   "country" : "US",
   "data" : "\\x0d\n\\x0d\n",
   "datamd5" : "cb492b7df9b5c170d7c87527940eff3b",
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS156",
      "continent" : "NA",
      "continentname" : "North America",
      "country" : "US",
      "countryname" : "United States",
      "isineu" : "false",
      "latitude" : "37.09024",
      "location" : "37.09024,-95.712891",
      "longitude" : "-95.712891",
      "netname" : "NORTHEASTERN-NET",
      "organization" : "Northeastern University",
      "subnet" : "129.10.0.0/16"
   },
   "ip" : "129.10.126.50",
   "ipv6" : "false",
   "latitude" : "42.0219",
   "location" : "42.0219,-71.2188",
   "longitude" : "-71.2188",
   "organization" : "NORTHEASTERN-GW-AS",
   "port" : "5060",
   "protocol" : "unknown",
   "seen_date" : "2024-11-07",
   "source" : "udpscan",
   "subnet" : "129.10.0.0/16",
   "tls" : "false",
   "transport" : "udp"
}

IP
24.42.140.154

Network
24.42.128.0/18

Domain(s)
knology.net

Device

<enterprise field>: device.class

Reverse DNS
static-24-42-140-154.knology.net

ASN
AS12083

Organization
WOW-INTERNET

Protocol
unknown

Source
udpscan

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
ad952dc4fd094152cb9f15560a92485d

\xd5\x06\xca\xd0\x8a\x1eD\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x01\x10\x02\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x0d\x00\x008\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00,\x01\x01\x00\x01\x00\x00\x00$\x01\x01\x00\x00\x80\x04\x00\x02\x80\x03\x00\x01\x80\x01\x00\x05\x80\x02\x00\x02\x80\x0b\x00\x01\x00\x0c\x00\x04\x00\x00p\x80\x0d\x00\x00\x14\xaf\xca\xd7\x13h\xa1\xf1\xc9k\x86\x96\xfcwW\x01\x00\x0d\x00\x00\x14\x90\xcb\x80\x91>\xbbin\x08c\x81\xb5\xecB{\x1f\x00\x00\x00@\xbf\xc2.\x98V\xba\x996\x11\xc1\x1eH\xa6\xd2\x08\x07\xa9[\xed\xb3\x93\x02jI\xe6\x0f\xac2{\xb9`\x1bVk49MTIuNS4xMiBCTj03MDEzMjQ=

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T05:37:44.000Z",
   "app" : {
      "length" : "188"
   },
   "asn" : "AS12083",
   "city" : "Madison",
   "country" : "US",
   "data" : "\\xd5\\x06\\xca\\xd0\\x8a\\x1eD\\xfa\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x01\\x10\\x02\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\xbc\\x0d\\x00\\x008\\x00\\x00\\x00\\x01\\x00\\x00\\x00\\x01\\x00\\x00\\x00,\\x01\\x01\\x00\\x01\\x00\\x00\\x00$\\x01\\x01\\x00\\x00\\x80\\x04\\x00\\x02\\x80\\x03\\x00\\x01\\x80\\x01\\x00\\x05\\x80\\x02\\x00\\x02\\x80\\x0b\\x00\\x01\\x00\\x0c\\x00\\x04\\x00\\x00p\\x80\\x0d\\x00\\x00\\x14\\xaf\\xca\\xd7\\x13h\\xa1\\xf1\\xc9k\\x86\\x96\\xfcwW\\x01\\x00\\x0d\\x00\\x00\\x14\\x90\\xcb\\x80\\x91>\\xbbin\\x08c\\x81\\xb5\\xecB{\\x1f\\x00\\x00\\x00@\\xbf\\xc2.\\x98V\\xba\\x996\\x11\\xc1\\x1eH\\xa6\\xd2\\x08\\x07\\xa9[\\xed\\xb3\\x93\\x02jI\\xe6\\x0f\\xac2{\\xb9`\\x1bVk49MTIuNS4xMiBCTj03MDEzMjQ=",
   "datamd5" : "ad952dc4fd094152cb9f15560a92485d",
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "knology.net"
   ],
   "geolocus" : {
      "asn" : "AS12083",
      "continent" : "NA",
      "continentname" : "North America",
      "country" : "US",
      "countryname" : "United States",
      "isineu" : "false",
      "latitude" : "37.09024",
      "location" : "37.09024,-95.712891",
      "longitude" : "-95.712891",
      "netname" : "GA-AGST",
      "organization" : "WideOpenWest Finance LLC",
      "subnet" : "24.42.128.0/18"
   },
   "host" : [
      "static-24-42-140-154"
   ],
   "hostname" : [
      "static-24-42-140-154.knology.net"
   ],
   "ip" : "24.42.140.154",
   "ipv6" : "false",
   "latitude" : "34.7095",
   "location" : "34.7095,-86.7361",
   "longitude" : "-86.7361",
   "organization" : "WOW-INTERNET",
   "port" : "500",
   "protocol" : "unknown",
   "reverse" : [
      "static-24-42-140-154.knology.net"
   ],
   "seen_date" : "2024-11-07",
   "source" : "udpscan",
   "subnet" : "24.42.128.0/18",
   "tld" : [
      "net"
   ],
   "tls" : "false",
   "transport" : "udp"
}

IP
88.232.189.127

Network
88.232.184.0/21

Domain(s)
ttnet.com.tr

Device

<enterprise field>: device.class

Reverse DNS
88.232.189.127.dynamic.ttnet.com.tr

ASN
AS47331

Organization
Turk Telekom

Protocol
sip

Source
udpscan

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
6348a75a8a97683fe4f919ebf9bad9e7

SIP/2.0 200 OK\x0d
Via: SIP/2.0/UDP nm;rport=58950;received=<srcip>;branch=foo\x0d
Call-ID: 50000\x0d
From: <sip:nm@nm>;tag=root\x0d
To: <sip:nm2@nm2>;tag=foo\x0d
CSeq: 42 OPTIONS\x0d
Allow: PRACK, INVITE, ACK, BYE, CANCEL, UPDATE, SUBSCRIBE, NOTIFY, REFER, OPTIONS\x0d
Accept: application/sdp, application/simple-message-summary, message/sipfrag;version=2.0\x0d
Supported: replaces, 100rel, timer, norefersub\x0d
Allow-Events: message-summary, refer\x0d
User-Agent: TP-Link SIP Stack V1.0.0\x0d
Content-Type: application/sdp\x0d
Content-Length:   389\x0d
\x0d
v=0\x0d
o=- 3939946656 3939946656 IN IP4 <ip>\x0d
s=pjmedia\x0d
c=IN IP4 <ip>\x0d
t=0 0\x0d
m=audio 60000 RTP/AVP 0 8 9 2 110 18 96\x0d
a=rtcp:60001 IN IP4 <ip>\x0d
a=rtpmap:0 PCMU/8000\x0d
a=rtpmap:8 PCMA/8000\x0d
a=rtpmap:9 G722/16000\x0d
a=rtpmap:2 G726-32/8000\x0d
a=rtpmap:110 G726-32/8000\x0d
a=rtpmap:18 G729/8000\x0d
a=sendrecv\x0d
a=ptime:0\x0d
a=rtpmap:96 telephone-event/8000\x0d
a=fmtp:96 0-15\x0d

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T05:37:44.000Z",
   "app" : {
      "length" : "878"
   },
   "asn" : "AS47331",
   "city" : "Antalya",
   "country" : "TR",
   "data" : "SIP/2.0 200 OK\\x0d\nVia: SIP/2.0/UDP nm;rport=58950;received=<srcip>;branch=foo\\x0d\nCall-ID: 50000\\x0d\nFrom: <sip:nm@nm>;tag=root\\x0d\nTo: <sip:nm2@nm2>;tag=foo\\x0d\nCSeq: 42 OPTIONS\\x0d\nAllow: PRACK, INVITE, ACK, BYE, CANCEL, UPDATE, SUBSCRIBE, NOTIFY, REFER, OPTIONS\\x0d\nAccept: application/sdp, application/simple-message-summary, message/sipfrag;version=2.0\\x0d\nSupported: replaces, 100rel, timer, norefersub\\x0d\nAllow-Events: message-summary, refer\\x0d\nUser-Agent: TP-Link SIP Stack V1.0.0\\x0d\nContent-Type: application/sdp\\x0d\nContent-Length:   389\\x0d\n\\x0d\nv=0\\x0d\no=- 3939946656 3939946656 IN IP4 <ip>\\x0d\ns=pjmedia\\x0d\nc=IN IP4 <ip>\\x0d\nt=0 0\\x0d\nm=audio 60000 RTP/AVP 0 8 9 2 110 18 96\\x0d\na=rtcp:60001 IN IP4 <ip>\\x0d\na=rtpmap:0 PCMU/8000\\x0d\na=rtpmap:8 PCMA/8000\\x0d\na=rtpmap:9 G722/16000\\x0d\na=rtpmap:2 G726-32/8000\\x0d\na=rtpmap:110 G726-32/8000\\x0d\na=rtpmap:18 G729/8000\\x0d\na=sendrecv\\x0d\na=ptime:0\\x0d\na=rtpmap:96 telephone-event/8000\\x0d\na=fmtp:96 0-15\\x0d\n",
   "datamd5" : "6348a75a8a97683fe4f919ebf9bad9e7",
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "ttnet.com.tr"
   ],
   "geolocus" : {
      "asn" : "AS9121",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "TR",
      "countryname" : "Turkey",
      "isineu" : "false",
      "latitude" : "38.963745",
      "location" : "38.963745,35.243322",
      "longitude" : "35.243322",
      "netname" : "TurkTelekom",
      "organization" : "TurkTelecom",
      "subnet" : "88.232.0.0/16"
   },
   "host" : [
      "88"
   ],
   "hostname" : [
      "88.232.189.127.dynamic.ttnet.com.tr"
   ],
   "ip" : "88.232.189.127",
   "ipv6" : "false",
   "latitude" : "36.8752",
   "location" : "36.8752,30.7072",
   "longitude" : "30.7072",
   "organization" : "Turk Telekom",
   "port" : "5060",
   "protocol" : "sip",
   "reverse" : [
      "88.232.189.127.dynamic.ttnet.com.tr"
   ],
   "seen_date" : "2024-11-07",
   "source" : "udpscan",
   "subdomains" : [
      "dynamic.ttnet.com.tr",
      "189.127.dynamic.ttnet.com.tr",
      "127.dynamic.ttnet.com.tr",
      "232.189.127.dynamic.ttnet.com.tr"
   ],
   "subnet" : "88.232.184.0/21",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "com.tr"
   ],
   "tls" : "false",
   "transport" : "udp"
}

IP
121.147.171.240

Network
121.146.0.0/15

Device

<enterprise field>: device.class

ASN
AS4766

Organization
Korea Telecom

Protocol
unknown

Source
udpscan

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
cb492b7df9b5c170d7c87527940eff3b
```
\x0d
\x0d
```

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T05:37:44.000Z",
   "app" : {
      "length" : "4"
   },
   "asn" : "AS4766",
   "city" : "Seo-gu",
   "country" : "KR",
   "data" : "\\x0d\n\\x0d\n",
   "datamd5" : "cb492b7df9b5c170d7c87527940eff3b",
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS4766",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "KR",
      "countryname" : "South Korea",
      "isineu" : "false",
      "latitude" : "35.907757",
      "location" : "35.907757,127.766922",
      "longitude" : "127.766922",
      "netname" : "KORNET",
      "organization" : "Korea Telecom",
      "subnet" : "121.146.0.0/15"
   },
   "ip" : "121.147.171.240",
   "ipv6" : "false",
   "latitude" : "35.1366",
   "location" : "35.1366,126.8656",
   "longitude" : "126.8656",
   "organization" : "Korea Telecom",
   "port" : "5060",
   "protocol" : "unknown",
   "seen_date" : "2024-11-07",
   "source" : "udpscan",
   "subnet" : "121.146.0.0/15",
   "tls" : "false",
   "transport" : "udp"
}

IP
200.76.112.13

Network
200.76.112.0/23

Domain(s)
topnet.com.mx

Device

<enterprise field>: device.class

Reverse DNS
13.112.76.200.static.redip.topnet.com.mx

ASN
AS16531

Organization
TOPNET SA de CV

Protocol
unknown

Source
udpscan

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
f1d3ff8443297732862df21dc4e57262
```
\x00\x00\x00\x00
```

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T05:37:44.000Z",
   "app" : {
      "length" : "4"
   },
   "asn" : "AS16531",
   "country" : "MX",
   "data" : "\\x00\\x00\\x00\\x00",
   "datamd5" : "f1d3ff8443297732862df21dc4e57262",
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "topnet.com.mx"
   ],
   "geolocus" : {
      "asn" : "AS16531",
      "continent" : "NA",
      "continentname" : "North America",
      "country" : "MX",
      "countryname" : "Mexico",
      "isineu" : "false",
      "latitude" : "23.634501",
      "location" : "23.634501,-102.552784",
      "longitude" : "-102.552784",
      "netname" : "MX-REDV-LACNIC",
      "organization" : "Red-VoIP",
      "subnet" : "200.76.112.0/23"
   },
   "host" : [
      "13"
   ],
   "hostname" : [
      "13.112.76.200.static.redip.topnet.com.mx"
   ],
   "ip" : "200.76.112.13",
   "ipv6" : "false",
   "latitude" : "19.4342",
   "location" : "19.4342,-99.0559",
   "longitude" : "-99.0559",
   "organization" : "TOPNET SA de CV",
   "port" : "5060",
   "protocol" : "unknown",
   "reverse" : [
      "13.112.76.200.static.redip.topnet.com.mx"
   ],
   "seen_date" : "2024-11-07",
   "source" : "udpscan",
   "subdomains" : [
      "redip.topnet.com.mx",
      "76.200.static.redip.topnet.com.mx",
      "112.76.200.static.redip.topnet.com.mx",
      "static.redip.topnet.com.mx",
      "200.static.redip.topnet.com.mx"
   ],
   "subnet" : "200.76.112.0/23",
   "tld" : [
      "com.mx"
   ],
   "tls" : "false",
   "transport" : "udp"
}

IP
185.37.212.127

Network
185.37.212.0/22

Domain(s)
apfutura.net

Device

<enterprise field>: device.class

Reverse DNS
node127.apfutura.net

ASN
AS60609

Organization
Apfutura Telecom Sl

Protocol
sip

Source
udpscan

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
6348a75a8a97683fe4f919ebf9bad9e7

SIP/2.0 200 OK\x0d
Via: SIP/2.0/UDP nm;rport=58950;received=<srcip>;branch=foo\x0d
Call-ID: 50000\x0d
From: <sip:nm@nm>;tag=root\x0d
To: <sip:nm2@nm2>;tag=foo\x0d
CSeq: 42 OPTIONS\x0d
Allow: PRACK, INVITE, ACK, BYE, CANCEL, UPDATE, SUBSCRIBE, NOTIFY, REFER, OPTIONS\x0d
Accept: application/sdp, application/simple-message-summary, message/sipfrag;version=2.0\x0d
Supported: replaces, 100rel, timer, norefersub\x0d
Allow-Events: message-summary, refer\x0d
User-Agent: TP-Link SIP Stack V1.0.0\x0d
Content-Type: application/sdp\x0d
Content-Length:   389\x0d
\x0d
v=0\x0d
o=- 3939946656 3939946656 IN IP4 <ip>\x0d
s=pjmedia\x0d
c=IN IP4 <ip>\x0d
t=0 0\x0d
m=audio 60000 RTP/AVP 0 8 9 2 110 18 96\x0d
a=rtcp:60001 IN IP4 <ip>\x0d
a=rtpmap:0 PCMU/8000\x0d
a=rtpmap:8 PCMA/8000\x0d
a=rtpmap:9 G722/16000\x0d
a=rtpmap:2 G726-32/8000\x0d
a=rtpmap:110 G726-32/8000\x0d
a=rtpmap:18 G729/8000\x0d
a=sendrecv\x0d
a=ptime:0\x0d
a=rtpmap:96 telephone-event/8000\x0d
a=fmtp:96 0-15\x0d

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T05:37:44.000Z",
   "app" : {
      "length" : "878"
   },
   "asn" : "AS60609",
   "city" : "Centelles",
   "country" : "ES",
   "data" : "SIP/2.0 200 OK\\x0d\nVia: SIP/2.0/UDP nm;rport=58950;received=<srcip>;branch=foo\\x0d\nCall-ID: 50000\\x0d\nFrom: <sip:nm@nm>;tag=root\\x0d\nTo: <sip:nm2@nm2>;tag=foo\\x0d\nCSeq: 42 OPTIONS\\x0d\nAllow: PRACK, INVITE, ACK, BYE, CANCEL, UPDATE, SUBSCRIBE, NOTIFY, REFER, OPTIONS\\x0d\nAccept: application/sdp, application/simple-message-summary, message/sipfrag;version=2.0\\x0d\nSupported: replaces, 100rel, timer, norefersub\\x0d\nAllow-Events: message-summary, refer\\x0d\nUser-Agent: TP-Link SIP Stack V1.0.0\\x0d\nContent-Type: application/sdp\\x0d\nContent-Length:   389\\x0d\n\\x0d\nv=0\\x0d\no=- 3939946656 3939946656 IN IP4 <ip>\\x0d\ns=pjmedia\\x0d\nc=IN IP4 <ip>\\x0d\nt=0 0\\x0d\nm=audio 60000 RTP/AVP 0 8 9 2 110 18 96\\x0d\na=rtcp:60001 IN IP4 <ip>\\x0d\na=rtpmap:0 PCMU/8000\\x0d\na=rtpmap:8 PCMA/8000\\x0d\na=rtpmap:9 G722/16000\\x0d\na=rtpmap:2 G726-32/8000\\x0d\na=rtpmap:110 G726-32/8000\\x0d\na=rtpmap:18 G729/8000\\x0d\na=sendrecv\\x0d\na=ptime:0\\x0d\na=rtpmap:96 telephone-event/8000\\x0d\na=fmtp:96 0-15\\x0d\n",
   "datamd5" : "6348a75a8a97683fe4f919ebf9bad9e7",
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "apfutura.net"
   ],
   "geolocus" : {
      "asn" : "AS60609",
      "continent" : "EU",
      "continentname" : "Europe",
      "country" : "ES",
      "countryname" : "Spain",
      "isineu" : "true",
      "latitude" : "40.463667",
      "location" : "40.463667,-3.74922",
      "longitude" : "-3.74922",
      "netname" : "APFUTURA",
      "organization" : "APFUTURA IPv4 Prefix - 1",
      "subnet" : "185.37.212.0/22"
   },
   "host" : [
      "node127"
   ],
   "hostname" : [
      "node127.apfutura.net"
   ],
   "ip" : "185.37.212.127",
   "ipv6" : "false",
   "latitude" : "41.7995",
   "location" : "41.7995,2.2143",
   "longitude" : "2.2143",
   "organization" : "Apfutura Telecom Sl",
   "port" : "5060",
   "protocol" : "sip",
   "reverse" : [
      "node127.apfutura.net"
   ],
   "seen_date" : "2024-11-07",
   "source" : "udpscan",
   "subnet" : "185.37.212.0/22",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "net"
   ],
   "tls" : "false",
   "transport" : "udp"
}

IP
220.244.38.165

Network
220.244.0.0/15

Domain(s)
tpgi.com.au

Device

<enterprise field>: device.class

Reverse DNS
220-244-38-165.tpgi.com.au

ASN
AS7545

Organization
TPG Telecom Limited

Protocol
sip

Source
udpscan

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
aaf7656e4965189677d8452cc564e9e9

SIP/2.0 200 OK\x0d
Via: SIP/2.0/UDP nm;rport=58950;received=<srcip>;branch=foo\x0d
Call-ID: 50000\x0d
From: <sip:nm@nm>;tag=root\x0d
To: <sip:nm2@nm2>;tag=foo\x0d
CSeq: 42 OPTIONS\x0d
Allow: PRACK, INVITE, ACK, BYE, CANCEL, UPDATE, SUBSCRIBE, NOTIFY, REFER, OPTIONS\x0d
Accept: application/sdp, application/simple-message-summary, message/sipfrag;version=2.0\x0d
Supported: replaces, 100rel, timer, norefersub\x0d
Allow-Events: message-summary, refer\x0d
User-Agent: TP-Link SIP Stack V1.0.0\x0d
Content-Type: application/sdp\x0d
Content-Length:   386\x0d
\x0d
v=0\x0d
o=- 3939946661 3939946661 IN IP4 <ip>\x0d
s=pjmedia\x0d
c=IN IP4 <ip>\x0d
t=0 0\x0d
m=audio 60792 RTP/AVP 0 8 9 110 2 18 96\x0d
a=rtcp:60793 IN IP4 <ip>\x0d
a=rtpmap:0 PCMU/8000\x0d
a=rtpmap:8 PCMA/8000\x0d
a=rtpmap:9 G722/16000\x0d
a=rtpmap:110 G726-32/8000\x0d
a=rtpmap:2 G721/8000\x0d
a=rtpmap:18 G729/8000\x0d
a=sendrecv\x0d
a=ptime:0\x0d
a=rtpmap:96 telephone-event/8000\x0d
a=fmtp:96 0-15\x0d

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T05:37:44.000Z",
   "app" : {
      "length" : "875"
   },
   "asn" : "AS7545",
   "city" : "Brisbane",
   "country" : "AU",
   "data" : "SIP/2.0 200 OK\\x0d\nVia: SIP/2.0/UDP nm;rport=58950;received=<srcip>;branch=foo\\x0d\nCall-ID: 50000\\x0d\nFrom: <sip:nm@nm>;tag=root\\x0d\nTo: <sip:nm2@nm2>;tag=foo\\x0d\nCSeq: 42 OPTIONS\\x0d\nAllow: PRACK, INVITE, ACK, BYE, CANCEL, UPDATE, SUBSCRIBE, NOTIFY, REFER, OPTIONS\\x0d\nAccept: application/sdp, application/simple-message-summary, message/sipfrag;version=2.0\\x0d\nSupported: replaces, 100rel, timer, norefersub\\x0d\nAllow-Events: message-summary, refer\\x0d\nUser-Agent: TP-Link SIP Stack V1.0.0\\x0d\nContent-Type: application/sdp\\x0d\nContent-Length:   386\\x0d\n\\x0d\nv=0\\x0d\no=- 3939946661 3939946661 IN IP4 <ip>\\x0d\ns=pjmedia\\x0d\nc=IN IP4 <ip>\\x0d\nt=0 0\\x0d\nm=audio 60792 RTP/AVP 0 8 9 110 2 18 96\\x0d\na=rtcp:60793 IN IP4 <ip>\\x0d\na=rtpmap:0 PCMU/8000\\x0d\na=rtpmap:8 PCMA/8000\\x0d\na=rtpmap:9 G722/16000\\x0d\na=rtpmap:110 G726-32/8000\\x0d\na=rtpmap:2 G721/8000\\x0d\na=rtpmap:18 G729/8000\\x0d\na=sendrecv\\x0d\na=ptime:0\\x0d\na=rtpmap:96 telephone-event/8000\\x0d\na=fmtp:96 0-15\\x0d\n",
   "datamd5" : "aaf7656e4965189677d8452cc564e9e9",
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "tpgi.com.au"
   ],
   "geolocus" : {
      "asn" : "AS7545",
      "continent" : "OC",
      "continentname" : "Oceania",
      "country" : "AU",
      "countryname" : "Australia",
      "isineu" : "false",
      "latitude" : "-25.274398",
      "location" : "-25.274398,133.775136",
      "longitude" : "133.775136",
      "netname" : "TPG-AU",
      "organization" : "TPG Internet Pty Ltd",
      "subnet" : "220.244.0.0/15"
   },
   "host" : [
      "220-244-38-165"
   ],
   "hostname" : [
      "220-244-38-165.tpgi.com.au"
   ],
   "ip" : "220.244.38.165",
   "ipv6" : "false",
   "latitude" : "-27.4669",
   "location" : "-27.4669,153.0397",
   "longitude" : "153.0397",
   "organization" : "TPG Telecom Limited",
   "port" : "5060",
   "protocol" : "sip",
   "reverse" : [
      "220-244-38-165.tpgi.com.au"
   ],
   "seen_date" : "2024-11-07",
   "source" : "udpscan",
   "subnet" : "220.244.0.0/15",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "com.au"
   ],
   "tls" : "false",
   "transport" : "udp"
}

Returning 10 result(s) out of 1,218,529,004 in 1.422 second(s)

37.113.134.242:5060 (udp/unknown) - last seen on 2024-11-07 at 05:37:44 UTC

151.50.197.166:5060 (udp/sip) - last seen on 2024-11-07 at 05:37:44 UTC

31.188.41.13:5060 (udp/sip) - last seen on 2024-11-07 at 05:37:44 UTC

129.10.126.50:5060 (udp/unknown) - last seen on 2024-11-07 at 05:37:44 UTC

24.42.140.154:500 (udp/unknown) - last seen on 2024-11-07 at 05:37:44 UTC

88.232.189.127:5060 (udp/sip) - last seen on 2024-11-07 at 05:37:44 UTC

121.147.171.240:5060 (udp/unknown) - last seen on 2024-11-07 at 05:37:44 UTC

200.76.112.13:5060 (udp/unknown) - last seen on 2024-11-07 at 05:37:44 UTC

185.37.212.127:5060 (udp/sip) - last seen on 2024-11-07 at 05:37:44 UTC

220.244.38.165:5060 (udp/sip) - last seen on 2024-11-07 at 05:37:44 UTC