{"ip":"144.172.64.44","data_as_of":"2026-10-26T11:43:51+00:00","observed":true,"total_events":6,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":null,"why":["6 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"688 bytes sent","bytes_sent":688,"session_seconds":0,"persistent":false},"basis":"first_contact"},"first_seen":"2026-10-23T05:35:46","last_seen":"2026-10-24T03:16:47","events_24h":0,"events_7d":6,"interactive_sessions":0,"interactive_sessions_24h":0,"interactive_sessions_7d":0,"interactive_protocols":[],"geo":{"country_code":"AU","country_name":"Australia","region":"New South Wales","city":"Sydney","lat":-33.8672,"lon":151.1997,"asn":14956,"org":"RouterHosting LLC"},"source_domain":"44.64.172.144.static.cloudzy.com","known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"udp":{"source_verified":false,"window_days":90,"events":70,"protocols":[{"protocol":"udp","events":70}],"ports":[{"port":5060,"events":10},{"port":5050,"events":2},{"port":5078,"events":2},{"port":5053,"events":2},{"port":5054,"events":2},{"port":5055,"events":2},{"port":5056,"events":2},{"port":5057,"events":2},{"port":5058,"events":2},{"port":5052,"events":2}],"dns_questions":[],"quic_clients":[],"first_seen":"2026-10-16T02:53:34","last_seen":"2026-10-20T02:16:05","recent":[{"timestamp":"2026-10-20T02:16:05","port":5082,"src_port":31994,"proto":"udp","app_proto":"","app_protocol":"sip","summary":"INVITE sip:+61420163737@<HONEYPOT>:5082 SIP/2.0\r\nVia: SIP/2.0/UDP 144.172.64.44:31994;branch=z9hG4bK-524287-1---fd590b5267e959e3;rport\r\nMax-Forwards: 70\r\nContact: <sip:16994061897@144.172.64.44:31994;transport=UDP>\r\nTo: <sip:+61420163737@<HONEYPOT>>\r\nFrom: \"16994061897\" <sip:16994061897@<HONEYPOT>>;tag=ffe7ad99\r\nCall-ID: trNg4Oz6HzGsMUgNR0UJi0..\r\nCSeq: 1 INVITE\r\nAllow: INVITE, INFO, PRACK, ACK, BYE, CANCEL, UPDATE, SUBSCRIBE, NOTIFY, REFER, MESSAGE, OPTIONS\r\nSupported: 100rel, timer, replaces, norefersub, resource-priority\r\nSession-Expires: 1800;refresher=uas\r\nMin-SE: 90\r\nUser-Agent: Cisco/SPA509G-7.6.2\r\nAllow-Events: talk, hold, conference, refer, check-sync\r\nAccept: application/sdp, application/dtmf-relay, application/resource-lists+xml, application/dialog-info+xml\r\nContent-Type: application/sdp\r\nContent-Length: 582\r\n\r\nv=0\r\no=- 20230401120000 20230401120000 IN IP4 144.172.64.44\r\ns=SIP Call\r\nc=IN IP4 144.172.64.44\r\nt=0 0\r\nm=audio 11780 RTP/AVP 0 8 9 18 4 2 114 98 97 101 100\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:9 G722/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=no\r\na=rtpmap:4 G723/8000\r\na=rtpmap:2 G726-32/8000\r\na=rtpmap:114 opus/48000/2\r\na=fmtp:114 useinbandfec=1\r\na=rtpmap:98 iLBC/8000\r\na=fmtp:98 mode=20\r\na=rtpmap:97 iLBC/8000\r\na=fmtp:97 mode=30\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=rtpmap:100 telephone-event/48000\r\na=fmtp:100 0-16\r\na=ptime:20\r\na=sendrecv\r\n","payload_hex":"494e56495445207369703a2b363134323031363337333740<HONEYPOT>3a35303832205349502f322e300d0a5669613a205349502f322e302f554450203134342e3137322e36342e34343a33313939343b6272616e63683d7a39684734624b2d3532343238372d312d2d2d666435393062353236376539353965333b72706f72740d0a4d61782d466f7277617264733a2037300d0a436f6e746163743a203c7369703a3136393934303631383937403134342e3137322e36342e34343a33313939343b7472616e73706f72743d5544503e0d0a546f3a203c7369703a2b363134323031363337333740<HONEYPOT>3e0d0a46726f6d3a2022313639393430363138393722203c7369703a313639393430363138393740<HONEYPOT>3e3b7461673d66666537616439390d0a43616c6c2d49443a2074724e67344f7a36487a47734d55674e5230554a69302e2e0d0a435365713a203120494e564954450d0a416c6c6f773a20494e564954452c20494e464f2c20505241434b2c2041434b2c204259452c2043414e43454c2c205550444154452c205355425343524942452c204e4f544946592c2052454645522c204d4553534147452c204f5054494f4e530d0a537570706f727465643a2031303072656c2c2074696d65722c207265706c616365732c206e6f72656665727375622c207265736f757263652d7072696f726974790d0a53657373696f6e2d457870697265733a20313830303b7265667265736865723d7561730d0a4d696e2d53453a2039300d0a557365722d4167656e743a20436973636f2f535041353039472d372e362e320d0a416c6c6f772d4576656e74733a2074616c6b2c20686f6c642c20636f6e666572656e63652c2072656665722c20636865636b2d73796e630d0a4163636570743a206170706c69636174696f6e2f7364702c206170706c69636174696f6e2f64746d662d72656c61792c206170706c69636174696f6e2f7265736f757263652d6c697374732b786d6c2c206170706c69636174696f6e2f6469616c6f672d696e666f2b786d6c0d0a436f6e74656e742d547970653a206170706c69636174696f6e2f7364700d0a436f6e74656e742d4c656e6774683a203538320d0a0d0a763d300d0a6f3d2d20323032333034303131323030303020323032333034303131323030303020494e20495034203134342e3137322e36342e34340d0a733d5349502043616c6c0d0a633d494e20495034203134342e3137322e36342e34340d0a743d3020300d0a6d3d617564696f203131373830205254502f415650203020382039203138203420322031313420393820393720313031203130300d0a613d7274706d61703a302050434d552f383030300d0a613d7274706d61703a382050434d412f383030300d0a613d7274706d61703a3920473732322f383030300d0a613d7274706d61703a313820473732392f383030300d0a613d666d74703a313820616e6e6578623d6e6f0d0a613d7274706d61703a3420473732332f383030300d0a613d7274706d61703a3220473732362d33322f383030300d0a613d7274706d61703a313134206f7075732f34383030302f320d0a613d666d74703a31313420757365696e62616e646665633d310d0a613d7274706d61703a393820694c42432f383030300d0a613d666d74703a3938206d6f64653d32300d0a613d7274706d61703a393720694c42432f383030300d0a613d666d74703a3937206d6f64653d33300d0a613d7274706d61703a3130312074656c6570686f6e652d6576656e742f383030300d0a613d666d74703a31303120302d31360d0a613d7274706d61703a3130302074656c6570686f6e652d6576656e742f34383030300d0a613d666d74703a31303020302d31360d0a613d7074696d653a32300d0a613d73656e64726563760d0a","sni":"","session":"a0687559-8ff2-4650-84cd-39da921d666d","bytes_in":1427,"source_verified":false,"enriched":{"digest":"a528360798158848","label":"SIP","strings":["INVITE sip:+61420163737@<HONEYPOT>:5082 SIP/2.0","Via: SIP/2.0/UDP 144.172.64.44:31994;branch=z9hG4bK-524287-1---fd590b5267e959e3;…","Max-Forwards: 70","Contact: <sip:16994061897@144.172.64.44:31994;transport=UDP>","To: <sip:+61420163737@<HONEYPOT>>","From: \"16994061897\" <sip:16994061897@<HONEYPOT>>;tag=ffe7ad99","Call-ID: trNg4Oz6HzGsMUgNR0UJi0..","CSeq: 1 INVITE","Allow: INVITE, INFO, PRACK, ACK, BYE, CANCEL, UPDATE, SUBSCRIBE, NOTIFY, REFER, …","Supported: 100rel, timer, replaces, norefersub, resource-priority"],"iocs":{"ips":["144.172.64.44"],"paths":["/2.0/UDP"]}}},{"timestamp":"2026-10-20T00:58:34","port":5081,"src_port":28402,"proto":"udp","app_proto":"","app_protocol":"sip","summary":"INVITE sip:+61420163737@<HONEYPOT>:5081 SIP/2.0\r\nVia: SIP/2.0/UDP 144.172.64.44:28402;branch=z9hG4bK-524287-1---d4043f44a0d1c495;rport\r\nMax-Forwards: 70\r\nContact: <sip:17376490500@144.172.64.44:28402;transport=UDP>\r\nTo: <sip:+61420163737@<HONEYPOT>>\r\nFrom: \"17376490500\" <sip:17376490500@<HONEYPOT>>;tag=3e073e85\r\nCall-ID: exhy5t9MlZ0SJVR7Vv5REb..\r\nCSeq: 1 INVITE\r\nAllow: INVITE, INFO, PRACK, ACK, BYE, CANCEL, UPDATE, SUBSCRIBE, NOTIFY, REFER, MESSAGE, OPTIONS\r\nSupported: 100rel, timer, replaces, norefersub, resource-priority\r\nSession-Expires: 1800;refresher=uas\r\nMin-SE: 90\r\nUser-Agent: SIP SIMPLE\r\nAllow-Events: talk, hold, conference, refer, check-sync\r\nAccept: application/sdp, application/dtmf-relay, application/resource-lists+xml, application/dialog-info+xml\r\nContent-Type: application/sdp\r\nContent-Length: 582\r\n\r\nv=0\r\no=- 20230401120000 20230401120000 IN IP4 144.172.64.44\r\ns=SIP Call\r\nc=IN IP4 144.172.64.44\r\nt=0 0\r\nm=audio 11780 RTP/AVP 0 8 9 18 4 2 114 98 97 101 100\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:9 G722/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=no\r\na=rtpmap:4 G723/8000\r\na=rtpmap:2 G726-32/8000\r\na=rtpmap:114 opus/48000/2\r\na=fmtp:114 useinbandfec=1\r\na=rtpmap:98 iLBC/8000\r\na=fmtp:98 mode=20\r\na=rtpmap:97 iLBC/8000\r\na=fmtp:97 mode=30\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=rtpmap:100 telephone-event/48000\r\na=fmtp:100 0-16\r\na=ptime:20\r\na=sendrecv\r\n","payload_hex":"494e56495445207369703a2b363134323031363337333740<HONEYPOT>3a35303831205349502f322e300d0a5669613a205349502f322e302f554450203134342e3137322e36342e34343a32383430323b6272616e63683d7a39684734624b2d3532343238372d312d2d2d643430343366343461306431633439353b72706f72740d0a4d61782d466f7277617264733a2037300d0a436f6e746163743a203c7369703a3137333736343930353030403134342e3137322e36342e34343a32383430323b7472616e73706f72743d5544503e0d0a546f3a203c7369703a2b363134323031363337333740<HONEYPOT>3e0d0a46726f6d3a2022313733373634393035303022203c7369703a313733373634393035303040<HONEYPOT>3e3b7461673d33653037336538350d0a43616c6c2d49443a20657868793574394d6c5a30534a5652375676355245622e2e0d0a435365713a203120494e564954450d0a416c6c6f773a20494e564954452c20494e464f2c20505241434b2c2041434b2c204259452c2043414e43454c2c205550444154452c205355425343524942452c204e4f544946592c2052454645522c204d4553534147452c204f5054494f4e530d0a537570706f727465643a2031303072656c2c2074696d65722c207265706c616365732c206e6f72656665727375622c207265736f757263652d7072696f726974790d0a53657373696f6e2d457870697265733a20313830303b7265667265736865723d7561730d0a4d696e2d53453a2039300d0a557365722d4167656e743a205349502053494d504c450d0a416c6c6f772d4576656e74733a2074616c6b2c20686f6c642c20636f6e666572656e63652c2072656665722c20636865636b2d73796e630d0a4163636570743a206170706c69636174696f6e2f7364702c206170706c69636174696f6e2f64746d662d72656c61792c206170706c69636174696f6e2f7265736f757263652d6c697374732b786d6c2c206170706c69636174696f6e2f6469616c6f672d696e666f2b786d6c0d0a436f6e74656e742d547970653a206170706c69636174696f6e2f7364700d0a436f6e74656e742d4c656e6774683a203538320d0a0d0a763d300d0a6f3d2d20323032333034303131323030303020323032333034303131323030303020494e20495034203134342e3137322e36342e34340d0a733d5349502043616c6c0d0a633d494e20495034203134342e3137322e36342e34340d0a743d3020300d0a6d3d617564696f203131373830205254502f415650203020382039203138203420322031313420393820393720313031203130300d0a613d7274706d61703a302050434d552f383030300d0a613d7274706d61703a382050434d412f383030300d0a613d7274706d61703a3920473732322f383030300d0a613d7274706d61703a313820473732392f383030300d0a613d666d74703a313820616e6e6578623d6e6f0d0a613d7274706d61703a3420473732332f383030300d0a613d7274706d61703a3220473732362d33322f383030300d0a613d7274706d61703a313134206f7075732f34383030302f320d0a613d666d74703a31313420757365696e62616e646665633d310d0a613d7274706d61703a393820694c42432f383030300d0a613d666d74703a3938206d6f64653d32300d0a613d7274706d61703a393720694c42432f383030300d0a613d666d74703a3937206d6f64653d33300d0a613d7274706d61703a3130312074656c6570686f6e652d6576656e742f383030300d0a613d666d74703a31303120302d31360d0a613d7274706d61703a3130302074656c6570686f6e652d6576656e742f34383030300d0a613d666d74703a31303020302d31360d0a613d7074696d653a32300d0a613d73656e64726563760d0a","sni":"","session":"40a0b37a-bcbd-4f41-8d5f-6d653b0a26d8","bytes_in":1415,"source_verified":false,"enriched":{"digest":"886151d1459a7f30","label":"SIP","strings":["INVITE sip:+61420163737@<HONEYPOT>:5081 SIP/2.0","Via: SIP/2.0/UDP 144.172.64.44:28402;branch=z9hG4bK-524287-1---d4043f44a0d1c495;…","Max-Forwards: 70","Contact: <sip:17376490500@144.172.64.44:28402;transport=UDP>","To: <sip:+61420163737@<HONEYPOT>>","From: \"17376490500\" <sip:17376490500@<HONEYPOT>>;tag=3e073e85","Call-ID: exhy5t9MlZ0SJVR7Vv5REb..","CSeq: 1 INVITE","Allow: INVITE, INFO, PRACK, ACK, BYE, CANCEL, UPDATE, SUBSCRIBE, NOTIFY, REFER, …","Supported: 100rel, timer, replaces, norefersub, resource-priority"],"iocs":{"ips":["144.172.64.44"],"paths":["/2.0/UDP"]}}},{"timestamp":"2026-10-19T23:48:19","port":5081,"src_port":28402,"proto":"udp","app_proto":"","app_protocol":"sip","summary":"INVITE sip:+61420163737@<HONEYPOT>:5081 SIP/2.0\r\nVia: SIP/2.0/UDP 144.172.64.44:28402;branch=z9hG4bK-524287-1---f56b4d1f19850012;rport\r\nMax-Forwards: 70\r\nContact: <sip:16994061897@144.172.64.44:28402;transport=UDP>\r\nTo: <sip:+61420163737@<HONEYPOT>>\r\nFrom: \"16994061897\" <sip:16994061897@<HONEYPOT>>;tag=03ce1d90\r\nCall-ID: 0QrKGDWgCIK5Lx7heHdcdV..\r\nCSeq: 1 INVITE\r\nAllow: INVITE, INFO, PRACK, ACK, BYE, CANCEL, UPDATE, SUBSCRIBE, NOTIFY, REFER, MESSAGE, OPTIONS\r\nSupported: 100rel, timer, replaces, norefersub, resource-priority\r\nSession-Expires: 1800;refresher=uas\r\nMin-SE: 90\r\nUser-Agent: Mitel 5340\r\nAllow-Events: talk, hold, conference, refer, check-sync\r\nAccept: application/sdp, application/dtmf-relay, application/resource-lists+xml, application/dialog-info+xml\r\nContent-Type: application/sdp\r\nContent-Length: 582\r\n\r\nv=0\r\no=- 20230401120000 20230401120000 IN IP4 144.172.64.44\r\ns=SIP Call\r\nc=IN IP4 144.172.64.44\r\nt=0 0\r\nm=audio 11780 RTP/AVP 0 8 9 18 4 2 114 98 97 101 100\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:9 G722/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=no\r\na=rtpmap:4 G723/8000\r\na=rtpmap:2 G726-32/8000\r\na=rtpmap:114 opus/48000/2\r\na=fmtp:114 useinbandfec=1\r\na=rtpmap:98 iLBC/8000\r\na=fmtp:98 mode=20\r\na=rtpmap:97 iLBC/8000\r\na=fmtp:97 mode=30\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=rtpmap:100 telephone-event/48000\r\na=fmtp:100 0-16\r\na=ptime:20\r\na=sendrecv\r\n","payload_hex":"494e56495445207369703a2b363134323031363337333740<HONEYPOT>3a35303831205349502f322e300d0a5669613a205349502f322e302f554450203134342e3137322e36342e34343a32383430323b6272616e63683d7a39684734624b2d3532343238372d312d2d2d663536623464316631393835303031323b72706f72740d0a4d61782d466f7277617264733a2037300d0a436f6e746163743a203c7369703a3136393934303631383937403134342e3137322e36342e34343a32383430323b7472616e73706f72743d5544503e0d0a546f3a203c7369703a2b363134323031363337333740<HONEYPOT>3e0d0a46726f6d3a2022313639393430363138393722203c7369703a313639393430363138393740<HONEYPOT>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","sni":"","session":"107ed104-522a-460a-ac71-68c98f5ab3b4","bytes_in":1418,"source_verified":false,"enriched":{"digest":"c759ee8b4487ed56","label":"SIP","strings":["INVITE sip:+61420163737@<HONEYPOT>:5081 SIP/2.0","Via: SIP/2.0/UDP 144.172.64.44:28402;branch=z9hG4bK-524287-1---f56b4d1f19850012;…","Max-Forwards: 70","Contact: <sip:16994061897@144.172.64.44:28402;transport=UDP>","To: <sip:+61420163737@<HONEYPOT>>","From: \"16994061897\" <sip:16994061897@<HONEYPOT>>;tag=03ce1d90","Call-ID: 0QrKGDWgCIK5Lx7heHdcdV..","CSeq: 1 INVITE","Allow: INVITE, INFO, PRACK, ACK, BYE, CANCEL, UPDATE, SUBSCRIBE, NOTIFY, REFER, …","Supported: 100rel, timer, replaces, norefersub, resource-priority"],"iocs":{"ips":["144.172.64.44"],"paths":["/2.0/UDP"]}}},{"timestamp":"2026-10-19T22:30:13","port":5080,"src_port":32583,"proto":"udp","app_proto":"","app_protocol":"sip","summary":"INVITE sip:+61420163737@<HONEYPOT>:5080 SIP/2.0\r\nVia: SIP/2.0/UDP 144.172.64.44:32583;branch=z9hG4bK-524287-1---bb5bda8c6543d532;rport\r\nMax-Forwards: 70\r\nContact: <sip:17376490500@144.172.64.44:32583;transport=UDP>\r\nTo: <sip:+61420163737@<HONEYPOT>>\r\nFrom: \"17376490500\" <sip:17376490500@<HONEYPOT>>;tag=9fca4288\r\nCall-ID: Szyahb0eLbko2TDWRQyPZh..\r\nCSeq: 1 INVITE\r\nAllow: INVITE, INFO, PRACK, ACK, BYE, CANCEL, UPDATE, SUBSCRIBE, NOTIFY, REFER, MESSAGE, OPTIONS\r\nSupported: 100rel, timer, replaces, norefersub, resource-priority\r\nSession-Expires: 1800;refresher=uas\r\nMin-SE: 90\r\nUser-Agent: Mitel 6865\r\nAllow-Events: talk, hold, conference, refer, check-sync\r\nAccept: application/sdp, application/dtmf-relay, application/resource-lists+xml, application/dialog-info+xml\r\nContent-Type: application/sdp\r\nContent-Length: 582\r\n\r\nv=0\r\no=- 20230401120000 20230401120000 IN IP4 144.172.64.44\r\ns=SIP Call\r\nc=IN IP4 144.172.64.44\r\nt=0 0\r\nm=audio 11780 RTP/AVP 0 8 9 18 4 2 114 98 97 101 100\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:9 G722/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=no\r\na=rtpmap:4 G723/8000\r\na=rtpmap:2 G726-32/8000\r\na=rtpmap:114 opus/48000/2\r\na=fmtp:114 useinbandfec=1\r\na=rtpmap:98 iLBC/8000\r\na=fmtp:98 mode=20\r\na=rtpmap:97 iLBC/8000\r\na=fmtp:97 mode=30\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=rtpmap:100 telephone-event/48000\r\na=fmtp:100 0-16\r\na=ptime:20\r\na=sendrecv\r\n","payload_hex":"494e56495445207369703a2b363134323031363337333740<HONEYPOT>3a35303830205349502f322e300d0a5669613a205349502f322e302f554450203134342e3137322e36342e34343a33323538333b6272616e63683d7a39684734624b2d3532343238372d312d2d2d626235626461386336353433643533323b72706f72740d0a4d61782d466f7277617264733a2037300d0a436f6e746163743a203c7369703a3137333736343930353030403134342e3137322e36342e34343a33323538333b7472616e73706f72743d5544503e0d0a546f3a203c7369703a2b363134323031363337333740<HONEYPOT>3e0d0a46726f6d3a2022313733373634393035303022203c7369703a313733373634393035303040<HONEYPOT>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","sni":"","session":"240df211-da4f-4766-ab65-57d09975a8e7","bytes_in":1415,"source_verified":false,"enriched":{"digest":"5d43d2c46e0ce8ea","label":"SIP","strings":["INVITE sip:+61420163737@<HONEYPOT>:5080 SIP/2.0","Via: SIP/2.0/UDP 144.172.64.44:32583;branch=z9hG4bK-524287-1---bb5bda8c6543d532;…","Max-Forwards: 70","Contact: <sip:17376490500@144.172.64.44:32583;transport=UDP>","To: <sip:+61420163737@<HONEYPOT>>","From: \"17376490500\" <sip:17376490500@<HONEYPOT>>;tag=9fca4288","Call-ID: Szyahb0eLbko2TDWRQyPZh..","CSeq: 1 INVITE","Allow: INVITE, INFO, PRACK, ACK, BYE, CANCEL, UPDATE, SUBSCRIBE, NOTIFY, REFER, …","Supported: 100rel, timer, replaces, norefersub, resource-priority"],"iocs":{"ips":["144.172.64.44"],"paths":["/2.0/UDP"]}}},{"timestamp":"2026-10-19T21:19:53","port":5080,"src_port":32583,"proto":"udp","app_proto":"","app_protocol":"sip","summary":"INVITE sip:+61420163737@<HONEYPOT>:5080 SIP/2.0\r\nVia: SIP/2.0/UDP 144.172.64.44:32583;branch=z9hG4bK-524287-1---0c3d84719335e31c;rport\r\nMax-Forwards: 70\r\nContact: <sip:16994061897@144.172.64.44:32583;transport=UDP>\r\nTo: <sip:+61420163737@<HONEYPOT>>\r\nFrom: \"16994061897\" <sip:16994061897@<HONEYPOT>>;tag=cf17408c\r\nCall-ID: JktqmEUIsuPTjo8li3sz9B..\r\nCSeq: 1 INVITE\r\nAllow: INVITE, INFO, PRACK, ACK, BYE, CANCEL, UPDATE, SUBSCRIBE, NOTIFY, REFER, MESSAGE, OPTIONS\r\nSupported: 100rel, timer, replaces, norefersub, resource-priority\r\nSession-Expires: 1800;refresher=uas\r\nMin-SE: 90\r\nUser-Agent: Zoiper 5\r\nAllow-Events: talk, hold, conference, refer, check-sync\r\nAccept: application/sdp, application/dtmf-relay, application/resource-lists+xml, application/dialog-info+xml\r\nContent-Type: application/sdp\r\nContent-Length: 582\r\n\r\nv=0\r\no=- 20230401120000 20230401120000 IN IP4 144.172.64.44\r\ns=SIP Call\r\nc=IN IP4 144.172.64.44\r\nt=0 0\r\nm=audio 11780 RTP/AVP 0 8 9 18 4 2 114 98 97 101 100\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:9 G722/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=no\r\na=rtpmap:4 G723/8000\r\na=rtpmap:2 G726-32/8000\r\na=rtpmap:114 opus/48000/2\r\na=fmtp:114 useinbandfec=1\r\na=rtpmap:98 iLBC/8000\r\na=fmtp:98 mode=20\r\na=rtpmap:97 iLBC/8000\r\na=fmtp:97 mode=30\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=rtpmap:100 telephone-event/48000\r\na=fmtp:100 0-16\r\na=ptime:20\r\na=sendrecv\r\n","payload_hex":"494e56495445207369703a2b363134323031363337333740<HONEYPOT>3a35303830205349502f322e300d0a5669613a205349502f322e302f554450203134342e3137322e36342e34343a33323538333b6272616e63683d7a39684734624b2d3532343238372d312d2d2d306333643834373139333335653331633b72706f72740d0a4d61782d466f7277617264733a2037300d0a436f6e746163743a203c7369703a3136393934303631383937403134342e3137322e36342e34343a33323538333b7472616e73706f72743d5544503e0d0a546f3a203c7369703a2b363134323031363337333740<HONEYPOT>3e0d0a46726f6d3a2022313639393430363138393722203c7369703a313639393430363138393740<HONEYPOT>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","sni":"","session":"562a76dc-2d82-4612-83e5-e68761e87ed1","bytes_in":1416,"source_verified":false,"enriched":{"digest":"abd105e07ea6291b","label":"SIP","strings":["INVITE sip:+61420163737@<HONEYPOT>:5080 SIP/2.0","Via: SIP/2.0/UDP 144.172.64.44:32583;branch=z9hG4bK-524287-1---0c3d84719335e31c;…","Max-Forwards: 70","Contact: <sip:16994061897@144.172.64.44:32583;transport=UDP>","To: <sip:+61420163737@<HONEYPOT>>","From: \"16994061897\" <sip:16994061897@<HONEYPOT>>;tag=cf17408c","Call-ID: JktqmEUIsuPTjo8li3sz9B..","CSeq: 1 INVITE","Allow: INVITE, INFO, PRACK, ACK, BYE, CANCEL, UPDATE, SUBSCRIBE, NOTIFY, REFER, …","Supported: 100rel, timer, replaces, norefersub, resource-priority"],"iocs":{"ips":["144.172.64.44"],"paths":["/2.0/UDP"]}}},{"timestamp":"2026-10-19T20:02:42","port":5079,"src_port":33682,"proto":"udp","app_proto":"","app_protocol":"sip","summary":"INVITE sip:+61420163737@<HONEYPOT>:5079 SIP/2.0\r\nVia: SIP/2.0/UDP 144.172.64.44:33682;branch=z9hG4bK-524287-1---e82a0e9e57360e83;rport\r\nMax-Forwards: 70\r\nContact: <sip:17376490500@144.172.64.44:33682;transport=UDP>\r\nTo: <sip:+61420163737@<HONEYPOT>>\r\nFrom: \"17376490500\" <sip:17376490500@<HONEYPOT>>;tag=1e448c2e\r\nCall-ID: bjAqJwDbipu9EdCMIZLRpc..\r\nCSeq: 1 INVITE\r\nAllow: INVITE, INFO, PRACK, ACK, BYE, CANCEL, UPDATE, SUBSCRIBE, NOTIFY, REFER, MESSAGE, OPTIONS\r\nSupported: 100rel, timer, replaces, norefersub, resource-priority\r\nSession-Expires: 1800;refresher=uas\r\nMin-SE: 90\r\nUser-Agent: PolycomSoundPointIP-SPIP_550-UA/4.0.11.0583\r\nAllow-Events: talk, hold, conference, refer, check-sync\r\nAccept: application/sdp, application/dtmf-relay, application/resource-lists+xml, application/dialog-info+xml\r\nContent-Type: application/sdp\r\nContent-Length: 582\r\n\r\nv=0\r\no=- 20230401120000 20230401120000 IN IP4 144.172.64.44\r\ns=SIP Call\r\nc=IN IP4 144.172.64.44\r\nt=0 0\r\nm=audio 11780 RTP/AVP 0 8 9 18 4 2 114 98 97 101 100\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:9 G722/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=no\r\na=rtpmap:4 G723/8000\r\na=rtpmap:2 G726-32/8000\r\na=rtpmap:114 opus/48000/2\r\na=fmtp:114 useinbandfec=1\r\na=rtpmap:98 iLBC/8000\r\na=fmtp:98 mode=20\r\na=rtpmap:97 iLBC/8000\r\na=fmtp:97 mode=30\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=rtpmap:100 telephone-event/48000\r\na=fmtp:100 0-16\r\na=ptime:20\r\na=sendrecv\r\n","payload_hex":"494e56495445207369703a2b363134323031363337333740<HONEYPOT>3a35303739205349502f322e300d0a5669613a205349502f322e302f554450203134342e3137322e36342e34343a33333638323b6272616e63683d7a39684734624b2d3532343238372d312d2d2d653832613065396535373336306538333b72706f72740d0a4d61782d466f7277617264733a2037300d0a436f6e746163743a203c7369703a3137333736343930353030403134342e3137322e36342e34343a33333638323b7472616e73706f72743d5544503e0d0a546f3a203c7369703a2b363134323031363337333740<HONEYPOT>3e0d0a46726f6d3a2022313733373634393035303022203c7369703a313733373634393035303040<HONEYPOT>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","sni":"","session":"2680c2e3-224f-4f4c-a006-5ccc975dcb4b","bytes_in":1448,"source_verified":false,"enriched":{"digest":"057f76abe69ce2a5","label":"SIP","strings":["INVITE sip:+61420163737@<HONEYPOT>:5079 SIP/2.0","Via: SIP/2.0/UDP 144.172.64.44:33682;branch=z9hG4bK-524287-1---e82a0e9e57360e83;…","Max-Forwards: 70","Contact: <sip:17376490500@144.172.64.44:33682;transport=UDP>","To: <sip:+61420163737@<HONEYPOT>>","From: \"17376490500\" <sip:17376490500@<HONEYPOT>>;tag=1e448c2e","Call-ID: bjAqJwDbipu9EdCMIZLRpc..","CSeq: 1 INVITE","Allow: INVITE, INFO, PRACK, ACK, BYE, CANCEL, UPDATE, SUBSCRIBE, NOTIFY, REFER, …","Supported: 100rel, timer, replaces, norefersub, resource-priority"],"iocs":{"ips":["144.172.64.44"],"paths":["/2.0/UDP"]}}},{"timestamp":"2026-10-19T17:36:04","port":5078,"src_port":33993,"proto":"udp","app_proto":"","app_protocol":"sip","summary":"INVITE sip:+61420163737@<HONEYPOT>:5078 SIP/2.0\r\nVia: SIP/2.0/UDP 144.172.64.44:33993;branch=z9hG4bK-524287-1---a8abc17aadc46484;rport\r\nMax-Forwards: 70\r\nContact: <sip:17376490500@144.172.64.44:33993;transport=UDP>\r\nTo: <sip:+61420163737@<HONEYPOT>>\r\nFrom: \"17376490500\" <sip:17376490500@<HONEYPOT>>;tag=d7d927fe\r\nCall-ID: szjmX0nhQu3shHOMK717FN..\r\nCSeq: 1 INVITE\r\nAllow: INVITE, INFO, PRACK, ACK, BYE, CANCEL, UPDATE, SUBSCRIBE, NOTIFY, REFER, MESSAGE, OPTIONS\r\nSupported: 100rel, timer, replaces, norefersub, resource-priority\r\nSession-Expires: 1800;refresher=uas\r\nMin-SE: 90\r\nUser-Agent: Yate/6.0.0\r\nAllow-Events: talk, hold, conference, refer, check-sync\r\nAccept: application/sdp, application/dtmf-relay, application/resource-lists+xml, application/dialog-info+xml\r\nContent-Type: application/sdp\r\nContent-Length: 582\r\n\r\nv=0\r\no=- 20230401120000 20230401120000 IN IP4 144.172.64.44\r\ns=SIP Call\r\nc=IN IP4 144.172.64.44\r\nt=0 0\r\nm=audio 11780 RTP/AVP 0 8 9 18 4 2 114 98 97 101 100\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:9 G722/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=no\r\na=rtpmap:4 G723/8000\r\na=rtpmap:2 G726-32/8000\r\na=rtpmap:114 opus/48000/2\r\na=fmtp:114 useinbandfec=1\r\na=rtpmap:98 iLBC/8000\r\na=fmtp:98 mode=20\r\na=rtpmap:97 iLBC/8000\r\na=fmtp:97 mode=30\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=rtpmap:100 telephone-event/48000\r\na=fmtp:100 0-16\r\na=ptime:20\r\na=sendrecv\r\n","payload_hex":"494e56495445207369703a2b363134323031363337333740<HONEYPOT>3a35303738205349502f322e300d0a5669613a205349502f322e302f554450203134342e3137322e36342e34343a33333939333b6272616e63683d7a39684734624b2d3532343238372d312d2d2d613861626331376161646334363438343b72706f72740d0a4d61782d466f7277617264733a2037300d0a436f6e746163743a203c7369703a3137333736343930353030403134342e3137322e36342e34343a33333939333b7472616e73706f72743d5544503e0d0a546f3a203c7369703a2b363134323031363337333740<HONEYPOT>3e0d0a46726f6d3a2022313733373634393035303022203c7369703a313733373634393035303040<HONEYPOT>3e3b7461673d64376439323766650d0a43616c6c2d49443a20737a6a6d58306e685175337368484f4d4b373137464e2e2e0d0a435365713a203120494e564954450d0a416c6c6f773a20494e564954452c20494e464f2c20505241434b2c2041434b2c204259452c2043414e43454c2c205550444154452c205355425343524942452c204e4f544946592c2052454645522c204d4553534147452c204f5054494f4e530d0a537570706f727465643a2031303072656c2c2074696d65722c207265706c616365732c206e6f72656665727375622c207265736f757263652d7072696f726974790d0a53657373696f6e2d457870697265733a20313830303b7265667265736865723d7561730d0a4d696e2d53453a2039300d0a557365722d4167656e743a20596174652f362e302e300d0a416c6c6f772d4576656e74733a2074616c6b2c20686f6c642c20636f6e666572656e63652c2072656665722c20636865636b2d73796e630d0a4163636570743a206170706c69636174696f6e2f7364702c206170706c69636174696f6e2f64746d662d72656c61792c206170706c69636174696f6e2f7265736f757263652d6c697374732b786d6c2c206170706c69636174696f6e2f6469616c6f672d696e666f2b786d6c0d0a436f6e74656e742d547970653a206170706c69636174696f6e2f7364700d0a436f6e74656e742d4c656e6774683a203538320d0a0d0a763d300d0a6f3d2d20323032333034303131323030303020323032333034303131323030303020494e20495034203134342e3137322e36342e34340d0a733d5349502043616c6c0d0a633d494e20495034203134342e3137322e36342e34340d0a743d3020300d0a6d3d617564696f203131373830205254502f415650203020382039203138203420322031313420393820393720313031203130300d0a613d7274706d61703a302050434d552f383030300d0a613d7274706d61703a382050434d412f383030300d0a613d7274706d61703a3920473732322f383030300d0a613d7274706d61703a313820473732392f383030300d0a613d666d74703a313820616e6e6578623d6e6f0d0a613d7274706d61703a3420473732332f383030300d0a613d7274706d61703a3220473732362d33322f383030300d0a613d7274706d61703a313134206f7075732f34383030302f320d0a613d666d74703a31313420757365696e62616e646665633d310d0a613d7274706d61703a393820694c42432f383030300d0a613d666d74703a3938206d6f64653d32300d0a613d7274706d61703a393720694c42432f383030300d0a613d666d74703a3937206d6f64653d33300d0a613d7274706d61703a3130312074656c6570686f6e652d6576656e742f383030300d0a613d666d74703a31303120302d31360d0a613d7274706d61703a3130302074656c6570686f6e652d6576656e742f34383030300d0a613d666d74703a31303020302d31360d0a613d7074696d653a32300d0a613d73656e64726563760d0a","sni":"","session":"30b7a53e-2f18-4794-b698-3aa4423226d5","bytes_in":1415,"source_verified":false,"enriched":{"digest":"4a9598f7f061ebdd","label":"SIP","strings":["INVITE sip:+61420163737@<HONEYPOT>:5078 SIP/2.0","Via: SIP/2.0/UDP 144.172.64.44:33993;branch=z9hG4bK-524287-1---a8abc17aadc46484;…","Max-Forwards: 70","Contact: <sip:17376490500@144.172.64.44:33993;transport=UDP>","To: <sip:+61420163737@<HONEYPOT>>","From: \"17376490500\" <sip:17376490500@<HONEYPOT>>;tag=d7d927fe","Call-ID: szjmX0nhQu3shHOMK717FN..","CSeq: 1 INVITE","Allow: INVITE, INFO, PRACK, ACK, BYE, CANCEL, UPDATE, SUBSCRIBE, NOTIFY, REFER, …","Supported: 100rel, timer, replaces, norefersub, resource-priority"],"iocs":{"ips":["144.172.64.44"],"paths":["/2.0/UDP"]}}},{"timestamp":"2026-10-19T16:26:17","port":5078,"src_port":33993,"proto":"udp","app_proto":"","app_protocol":"sip","summary":"INVITE sip:+61420163737@<HONEYPOT>:5078 SIP/2.0\r\nVia: SIP/2.0/UDP 144.172.64.44:33993;branch=z9hG4bK-524287-1---c15048a597fe06ab;rport\r\nMax-Forwards: 70\r\nContact: <sip:16994061897@144.172.64.44:33993;transport=UDP>\r\nTo: <sip:+61420163737@<HONEYPOT>>\r\nFrom: \"16994061897\" <sip:16994061897@<HONEYPOT>>;tag=757d7904\r\nCall-ID: msOskWBAwZCQk9SOGME4tk..\r\nCSeq: 1 INVITE\r\nAllow: INVITE, INFO, PRACK, ACK, BYE, CANCEL, UPDATE, SUBSCRIBE, NOTIFY, REFER, MESSAGE, OPTIONS\r\nSupported: 100rel, timer, replaces, norefersub, resource-priority\r\nSession-Expires: 1800;refresher=uas\r\nMin-SE: 90\r\nUser-Agent: AudioCodes 450HD/3.2.4.2031\r\nAllow-Events: talk, hold, conference, refer, check-sync\r\nAccept: application/sdp, application/dtmf-relay, application/resource-lists+xml, application/dialog-info+xml\r\nContent-Type: application/sdp\r\nContent-Length: 582\r\n\r\nv=0\r\no=- 20230401120000 20230401120000 IN IP4 144.172.64.44\r\ns=SIP Call\r\nc=IN IP4 144.172.64.44\r\nt=0 0\r\nm=audio 11780 RTP/AVP 0 8 9 18 4 2 114 98 97 101 100\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:9 G722/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=no\r\na=rtpmap:4 G723/8000\r\na=rtpmap:2 G726-32/8000\r\na=rtpmap:114 opus/48000/2\r\na=fmtp:114 useinbandfec=1\r\na=rtpmap:98 iLBC/8000\r\na=fmtp:98 mode=20\r\na=rtpmap:97 iLBC/8000\r\na=fmtp:97 mode=30\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=rtpmap:100 telephone-event/48000\r\na=fmtp:100 0-16\r\na=ptime:20\r\na=sendrecv\r\n","payload_hex":"494e56495445207369703a2b363134323031363337333740<HONEYPOT>3a35303738205349502f322e300d0a5669613a205349502f322e302f554450203134342e3137322e36342e34343a33333939333b6272616e63683d7a39684734624b2d3532343238372d312d2d2d633135303438613539376665303661623b72706f72740d0a4d61782d466f7277617264733a2037300d0a436f6e746163743a203c7369703a3136393934303631383937403134342e3137322e36342e34343a33333939333b7472616e73706f72743d5544503e0d0a546f3a203c7369703a2b363134323031363337333740<HONEYPOT>3e0d0a46726f6d3a2022313639393430363138393722203c7369703a313639393430363138393740<HONEYPOT>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","sni":"","session":"3a1656f5-03dd-4240-a08e-9ce3a6b828d2","bytes_in":1435,"source_verified":false,"enriched":{"digest":"23d98d2cf175fa16","label":"SIP","strings":["INVITE sip:+61420163737@<HONEYPOT>:5078 SIP/2.0","Via: SIP/2.0/UDP 144.172.64.44:33993;branch=z9hG4bK-524287-1---c15048a597fe06ab;…","Max-Forwards: 70","Contact: <sip:16994061897@144.172.64.44:33993;transport=UDP>","To: <sip:+61420163737@<HONEYPOT>>","From: \"16994061897\" <sip:16994061897@<HONEYPOT>>;tag=757d7904","Call-ID: msOskWBAwZCQk9SOGME4tk..","CSeq: 1 INVITE","Allow: INVITE, INFO, PRACK, ACK, BYE, CANCEL, UPDATE, SUBSCRIBE, NOTIFY, REFER, …","Supported: 100rel, timer, replaces, norefersub, resource-priority"],"iocs":{"ips":["144.172.64.44"],"paths":["/2.0/UDP"]}}},{"timestamp":"2026-10-19T15:08:57","port":5077,"src_port":25437,"proto":"udp","app_proto":"","app_protocol":"sip","summary":"INVITE sip:+61420163737@<HONEYPOT>:5077 SIP/2.0\r\nVia: SIP/2.0/UDP 144.172.64.44:25437;branch=z9hG4bK-524287-1---976f3a803c897146;rport\r\nMax-Forwards: 70\r\nContact: <sip:17376490500@144.172.64.44:25437;transport=UDP>\r\nTo: <sip:+61420163737@<HONEYPOT>>\r\nFrom: \"17376490500\" <sip:17376490500@<HONEYPOT>>;tag=b8f148ea\r\nCall-ID: 9oJXb5msk5h2xpgNgkOdwb..\r\nCSeq: 1 INVITE\r\nAllow: INVITE, INFO, PRACK, ACK, BYE, CANCEL, UPDATE, SUBSCRIBE, NOTIFY, REFER, MESSAGE, OPTIONS\r\nSupported: 100rel, timer, replaces, norefersub, resource-priority\r\nSession-Expires: 1800;refresher=uas\r\nMin-SE: 90\r\nUser-Agent: OBi200/3.2.2\r\nAllow-Events: talk, hold, conference, refer, check-sync\r\nAccept: application/sdp, application/dtmf-relay, application/resource-lists+xml, application/dialog-info+xml\r\nContent-Type: application/sdp\r\nContent-Length: 582\r\n\r\nv=0\r\no=- 20230401120000 20230401120000 IN IP4 144.172.64.44\r\ns=SIP Call\r\nc=IN IP4 144.172.64.44\r\nt=0 0\r\nm=audio 11780 RTP/AVP 0 8 9 18 4 2 114 98 97 101 100\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:9 G722/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=no\r\na=rtpmap:4 G723/8000\r\na=rtpmap:2 G726-32/8000\r\na=rtpmap:114 opus/48000/2\r\na=fmtp:114 useinbandfec=1\r\na=rtpmap:98 iLBC/8000\r\na=fmtp:98 mode=20\r\na=rtpmap:97 iLBC/8000\r\na=fmtp:97 mode=30\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=rtpmap:100 telephone-event/48000\r\na=fmtp:100 0-16\r\na=ptime:20\r\na=sendrecv\r\n","payload_hex":"494e56495445207369703a2b363134323031363337333740<HONEYPOT>3a35303737205349502f322e300d0a5669613a205349502f322e302f554450203134342e3137322e36342e34343a32353433373b6272616e63683d7a39684734624b2d3532343238372d312d2d2d393736663361383033633839373134363b72706f72740d0a4d61782d466f7277617264733a2037300d0a436f6e746163743a203c7369703a3137333736343930353030403134342e3137322e36342e34343a32353433373b7472616e73706f72743d5544503e0d0a546f3a203c7369703a2b363134323031363337333740<HONEYPOT>3e0d0a46726f6d3a2022313733373634393035303022203c7369703a313733373634393035303040<HONEYPOT>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","sni":"","session":"1a1625d1-a552-424f-9f3c-cdb7de0452b7","bytes_in":1417,"source_verified":false,"enriched":{"digest":"a5c03c9d183d91d3","label":"SIP","strings":["INVITE sip:+61420163737@<HONEYPOT>:5077 SIP/2.0","Via: SIP/2.0/UDP 144.172.64.44:25437;branch=z9hG4bK-524287-1---976f3a803c897146;…","Max-Forwards: 70","Contact: <sip:17376490500@144.172.64.44:25437;transport=UDP>","To: <sip:+61420163737@<HONEYPOT>>","From: \"17376490500\" <sip:17376490500@<HONEYPOT>>;tag=b8f148ea","Call-ID: 9oJXb5msk5h2xpgNgkOdwb..","CSeq: 1 INVITE","Allow: INVITE, INFO, PRACK, ACK, BYE, CANCEL, UPDATE, SUBSCRIBE, NOTIFY, REFER, …","Supported: 100rel, timer, replaces, norefersub, resource-priority"],"iocs":{"ips":["144.172.64.44"],"paths":["/2.0/UDP"]}}},{"timestamp":"2026-10-19T13:58:33","port":5077,"src_port":25437,"proto":"udp","app_proto":"","app_protocol":"sip","summary":"INVITE sip:+61420163737@<HONEYPOT>:5077 SIP/2.0\r\nVia: SIP/2.0/UDP 144.172.64.44:25437;branch=z9hG4bK-524287-1---e6dbde2f287ccf65;rport\r\nMax-Forwards: 70\r\nContact: <sip:16994061897@144.172.64.44:25437;transport=UDP>\r\nTo: <sip:+61420163737@<HONEYPOT>>\r\nFrom: \"16994061897\" <sip:16994061897@<HONEYPOT>>;tag=a87fdb3a\r\nCall-ID: sPZTIIlcXKm9K6M7puZKOP..\r\nCSeq: 1 INVITE\r\nAllow: INVITE, INFO, PRACK, ACK, BYE, CANCEL, UPDATE, SUBSCRIBE, NOTIFY, REFER, MESSAGE, OPTIONS\r\nSupported: 100rel, timer, replaces, norefersub, resource-priority\r\nSession-Expires: 1800;refresher=uas\r\nMin-SE: 90\r\nUser-Agent: Voximplant\r\nAllow-Events: talk, hold, conference, refer, check-sync\r\nAccept: application/sdp, application/dtmf-relay, application/resource-lists+xml, application/dialog-info+xml\r\nContent-Type: application/sdp\r\nContent-Length: 582\r\n\r\nv=0\r\no=- 20230401120000 20230401120000 IN IP4 144.172.64.44\r\ns=SIP Call\r\nc=IN IP4 144.172.64.44\r\nt=0 0\r\nm=audio 11780 RTP/AVP 0 8 9 18 4 2 114 98 97 101 100\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:9 G722/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=no\r\na=rtpmap:4 G723/8000\r\na=rtpmap:2 G726-32/8000\r\na=rtpmap:114 opus/48000/2\r\na=fmtp:114 useinbandfec=1\r\na=rtpmap:98 iLBC/8000\r\na=fmtp:98 mode=20\r\na=rtpmap:97 iLBC/8000\r\na=fmtp:97 mode=30\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=rtpmap:100 telephone-event/48000\r\na=fmtp:100 0-16\r\na=ptime:20\r\na=sendrecv\r\n","payload_hex":"494e56495445207369703a2b363134323031363337333740<HONEYPOT>3a35303737205349502f322e300d0a5669613a205349502f322e302f554450203134342e3137322e36342e34343a32353433373b6272616e63683d7a39684734624b2d3532343238372d312d2d2d653664626465326632383763636636353b72706f72740d0a4d61782d466f7277617264733a2037300d0a436f6e746163743a203c7369703a3136393934303631383937403134342e3137322e36342e34343a32353433373b7472616e73706f72743d5544503e0d0a546f3a203c7369703a2b363134323031363337333740<HONEYPOT>3e0d0a46726f6d3a2022313639393430363138393722203c7369703a313639393430363138393740<HONEYPOT>3e3b7461673d61383766646233610d0a43616c6c2d49443a2073505a5449496c63584b6d394b364d3770755a4b4f502e2e0d0a435365713a203120494e564954450d0a416c6c6f773a20494e564954452c20494e464f2c20505241434b2c2041434b2c204259452c2043414e43454c2c205550444154452c205355425343524942452c204e4f544946592c2052454645522c204d4553534147452c204f5054494f4e530d0a537570706f727465643a2031303072656c2c2074696d65722c207265706c616365732c206e6f72656665727375622c207265736f757263652d7072696f726974790d0a53657373696f6e2d457870697265733a20313830303b7265667265736865723d7561730d0a4d696e2d53453a2039300d0a557365722d4167656e743a20566f78696d706c616e740d0a416c6c6f772d4576656e74733a2074616c6b2c20686f6c642c20636f6e666572656e63652c2072656665722c20636865636b2d73796e630d0a4163636570743a206170706c69636174696f6e2f7364702c206170706c69636174696f6e2f64746d662d72656c61792c206170706c69636174696f6e2f7265736f757263652d6c697374732b786d6c2c206170706c69636174696f6e2f6469616c6f672d696e666f2b786d6c0d0a436f6e74656e742d547970653a206170706c69636174696f6e2f7364700d0a436f6e74656e742d4c656e6774683a203538320d0a0d0a763d300d0a6f3d2d20323032333034303131323030303020323032333034303131323030303020494e20495034203134342e3137322e36342e34340d0a733d5349502043616c6c0d0a633d494e20495034203134342e3137322e36342e34340d0a743d3020300d0a6d3d617564696f203131373830205254502f415650203020382039203138203420322031313420393820393720313031203130300d0a613d7274706d61703a302050434d552f383030300d0a613d7274706d61703a382050434d412f383030300d0a613d7274706d61703a3920473732322f383030300d0a613d7274706d61703a313820473732392f383030300d0a613d666d74703a313820616e6e6578623d6e6f0d0a613d7274706d61703a3420473732332f383030300d0a613d7274706d61703a3220473732362d33322f383030300d0a613d7274706d61703a313134206f7075732f34383030302f320d0a613d666d74703a31313420757365696e62616e646665633d310d0a613d7274706d61703a393820694c42432f383030300d0a613d666d74703a3938206d6f64653d32300d0a613d7274706d61703a393720694c42432f383030300d0a613d666d74703a3937206d6f64653d33300d0a613d7274706d61703a3130312074656c6570686f6e652d6576656e742f383030300d0a613d666d74703a31303120302d31360d0a613d7274706d61703a3130302074656c6570686f6e652d6576656e742f34383030300d0a613d666d74703a31303020302d31360d0a613d7074696d653a32300d0a613d73656e64726563760d0a","sni":"","session":"4d8e8691-d447-4c7f-a633-8aa0b3a4dbf9","bytes_in":1418,"source_verified":false,"enriched":{"digest":"3d9708e6dfe572f7","label":"SIP","strings":["INVITE sip:+61420163737@<HONEYPOT>:5077 SIP/2.0","Via: SIP/2.0/UDP 144.172.64.44:25437;branch=z9hG4bK-524287-1---e6dbde2f287ccf65;…","Max-Forwards: 70","Contact: <sip:16994061897@144.172.64.44:25437;transport=UDP>","To: <sip:+61420163737@<HONEYPOT>>","From: \"16994061897\" <sip:16994061897@<HONEYPOT>>;tag=a87fdb3a","Call-ID: sPZTIIlcXKm9K6M7puZKOP..","CSeq: 1 INVITE","Allow: INVITE, INFO, PRACK, ACK, BYE, CANCEL, UPDATE, SUBSCRIBE, NOTIFY, REFER, …","Supported: 100rel, timer, replaces, norefersub, resource-priority"],"iocs":{"ips":["144.172.64.44"],"paths":["/2.0/UDP"]}}},{"timestamp":"2026-10-19T12:40:37","port":5076,"src_port":34838,"proto":"udp","app_proto":"","app_protocol":"sip","summary":"INVITE sip:+61420163737@<HONEYPOT>:5076 SIP/2.0\r\nVia: SIP/2.0/UDP 144.172.64.44:34838;branch=z9hG4bK-524287-1---4db81540bf454ef8;rport\r\nMax-Forwards: 70\r\nContact: <sip:17376490500@144.172.64.44:34838;transport=UDP>\r\nTo: <sip:+61420163737@<HONEYPOT>>\r\nFrom: \"17376490500\" <sip:17376490500@<HONEYPOT>>;tag=291836f5\r\nCall-ID: EXtnyfZJ0wd6t36HEOiebq..\r\nCSeq: 1 INVITE\r\nAllow: INVITE, INFO, PRACK, ACK, BYE, CANCEL, UPDATE, SUBSCRIBE, NOTIFY, REFER, MESSAGE, OPTIONS\r\nSupported: 100rel, timer, replaces, norefersub, resource-priority\r\nSession-Expires: 1800;refresher=uas\r\nMin-SE: 90\r\nUser-Agent: Blink\r\nAllow-Events: talk, hold, conference, refer, check-sync\r\nAccept: application/sdp, application/dtmf-relay, application/resource-lists+xml, application/dialog-info+xml\r\nContent-Type: application/sdp\r\nContent-Length: 582\r\n\r\nv=0\r\no=- 20230401120000 20230401120000 IN IP4 144.172.64.44\r\ns=SIP Call\r\nc=IN IP4 144.172.64.44\r\nt=0 0\r\nm=audio 11780 RTP/AVP 0 8 9 18 4 2 114 98 97 101 100\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:9 G722/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=no\r\na=rtpmap:4 G723/8000\r\na=rtpmap:2 G726-32/8000\r\na=rtpmap:114 opus/48000/2\r\na=fmtp:114 useinbandfec=1\r\na=rtpmap:98 iLBC/8000\r\na=fmtp:98 mode=20\r\na=rtpmap:97 iLBC/8000\r\na=fmtp:97 mode=30\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=rtpmap:100 telephone-event/48000\r\na=fmtp:100 0-16\r\na=ptime:20\r\na=sendrecv\r\n","payload_hex":"494e56495445207369703a2b363134323031363337333740<HONEYPOT>3a35303736205349502f322e300d0a5669613a205349502f322e302f554450203134342e3137322e36342e34343a33343833383b6272616e63683d7a39684734624b2d3532343238372d312d2d2d346462383135343062663435346566383b72706f72740d0a4d61782d466f7277617264733a2037300d0a436f6e746163743a203c7369703a3137333736343930353030403134342e3137322e36342e34343a33343833383b7472616e73706f72743d5544503e0d0a546f3a203c7369703a2b363134323031363337333740<HONEYPOT>3e0d0a46726f6d3a2022313733373634393035303022203c7369703a313733373634393035303040<HONEYPOT>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","sni":"","session":"02cecc60-5f25-47c1-abfe-b63392bdb689","bytes_in":1410,"source_verified":false,"enriched":{"digest":"3bdadfba64017ce9","label":"SIP","strings":["INVITE sip:+61420163737@<HONEYPOT>:5076 SIP/2.0","Via: SIP/2.0/UDP 144.172.64.44:34838;branch=z9hG4bK-524287-1---4db81540bf454ef8;…","Max-Forwards: 70","Contact: <sip:17376490500@144.172.64.44:34838;transport=UDP>","To: <sip:+61420163737@<HONEYPOT>>","From: \"17376490500\" <sip:17376490500@<HONEYPOT>>;tag=291836f5","Call-ID: EXtnyfZJ0wd6t36HEOiebq..","CSeq: 1 INVITE","Allow: INVITE, INFO, PRACK, ACK, BYE, CANCEL, UPDATE, SUBSCRIBE, NOTIFY, REFER, …","Supported: 100rel, timer, replaces, norefersub, resource-priority"],"iocs":{"ips":["144.172.64.44"],"paths":["/2.0/UDP"]}}},{"timestamp":"2026-10-19T11:30:41","port":5076,"src_port":34838,"proto":"udp","app_proto":"","app_protocol":"sip","summary":"INVITE sip:+61420163737@<HONEYPOT>:5076 SIP/2.0\r\nVia: SIP/2.0/UDP 144.172.64.44:34838;branch=z9hG4bK-524287-1---46666e61b76cb0b5;rport\r\nMax-Forwards: 70\r\nContact: <sip:16994061897@144.172.64.44:34838;transport=UDP>\r\nTo: <sip:+61420163737@<HONEYPOT>>\r\nFrom: \"16994061897\" <sip:16994061897@<HONEYPOT>>;tag=8f6ab1d8\r\nCall-ID: U3EYVvtCu7f94a1BL96wRB..\r\nCSeq: 1 INVITE\r\nAllow: INVITE, INFO, PRACK, ACK, BYE, CANCEL, UPDATE, SUBSCRIBE, NOTIFY, REFER, MESSAGE, OPTIONS\r\nSupported: 100rel, timer, replaces, norefersub, resource-priority\r\nSession-Expires: 1800;refresher=uas\r\nMin-SE: 90\r\nUser-Agent: Grandstream WP820 1.0.3.42\r\nAllow-Events: talk, hold, conference, refer, check-sync\r\nAccept: application/sdp, application/dtmf-relay, application/resource-lists+xml, application/dialog-info+xml\r\nContent-Type: application/sdp\r\nContent-Length: 582\r\n\r\nv=0\r\no=- 20230401120000 20230401120000 IN IP4 144.172.64.44\r\ns=SIP Call\r\nc=IN IP4 144.172.64.44\r\nt=0 0\r\nm=audio 11780 RTP/AVP 0 8 9 18 4 2 114 98 97 101 100\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:9 G722/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=no\r\na=rtpmap:4 G723/8000\r\na=rtpmap:2 G726-32/8000\r\na=rtpmap:114 opus/48000/2\r\na=fmtp:114 useinbandfec=1\r\na=rtpmap:98 iLBC/8000\r\na=fmtp:98 mode=20\r\na=rtpmap:97 iLBC/8000\r\na=fmtp:97 mode=30\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=rtpmap:100 telephone-event/48000\r\na=fmtp:100 0-16\r\na=ptime:20\r\na=sendrecv\r\n","payload_hex":"494e56495445207369703a2b363134323031363337333740<HONEYPOT>3a35303736205349502f322e300d0a5669613a205349502f322e302f554450203134342e3137322e36342e34343a33343833383b6272616e63683d7a39684734624b2d3532343238372d312d2d2d343636363665363162373663623062353b72706f72740d0a4d61782d466f7277617264733a2037300d0a436f6e746163743a203c7369703a3136393934303631383937403134342e3137322e36342e34343a33343833383b7472616e73706f72743d5544503e0d0a546f3a203c7369703a2b363134323031363337333740<HONEYPOT>3e0d0a46726f6d3a2022313639393430363138393722203c7369703a313639393430363138393740<HONEYPOT>3e3b7461673d38663661623164380d0a43616c6c2d49443a20553345595676744375376639346131424c39367752422e2e0d0a435365713a203120494e564954450d0a416c6c6f773a20494e564954452c20494e464f2c20505241434b2c2041434b2c204259452c2043414e43454c2c205550444154452c205355425343524942452c204e4f544946592c2052454645522c204d4553534147452c204f5054494f4e530d0a537570706f727465643a2031303072656c2c2074696d65722c207265706c616365732c206e6f72656665727375622c207265736f757263652d7072696f726974790d0a53657373696f6e2d457870697265733a20313830303b7265667265736865723d7561730d0a4d696e2d53453a2039300d0a557365722d4167656e743a204772616e6473747265616d20575038323020312e302e332e34320d0a416c6c6f772d4576656e74733a2074616c6b2c20686f6c642c20636f6e666572656e63652c2072656665722c20636865636b2d73796e630d0a4163636570743a206170706c69636174696f6e2f7364702c206170706c69636174696f6e2f64746d662d72656c61792c206170706c69636174696f6e2f7265736f757263652d6c697374732b786d6c2c206170706c69636174696f6e2f6469616c6f672d696e666f2b786d6c0d0a436f6e74656e742d547970653a206170706c69636174696f6e2f7364700d0a436f6e74656e742d4c656e6774683a203538320d0a0d0a763d300d0a6f3d2d20323032333034303131323030303020323032333034303131323030303020494e20495034203134342e3137322e36342e34340d0a733d5349502043616c6c0d0a633d494e20495034203134342e3137322e36342e34340d0a743d3020300d0a6d3d617564696f203131373830205254502f415650203020382039203138203420322031313420393820393720313031203130300d0a613d7274706d61703a302050434d552f383030300d0a613d7274706d61703a382050434d412f383030300d0a613d7274706d61703a3920473732322f383030300d0a613d7274706d61703a313820473732392f383030300d0a613d666d74703a313820616e6e6578623d6e6f0d0a613d7274706d61703a3420473732332f383030300d0a613d7274706d61703a3220473732362d33322f383030300d0a613d7274706d61703a313134206f7075732f34383030302f320d0a613d666d74703a31313420757365696e62616e646665633d310d0a613d7274706d61703a393820694c42432f383030300d0a613d666d74703a3938206d6f64653d32300d0a613d7274706d61703a393720694c42432f383030300d0a613d666d74703a3937206d6f64653d33300d0a613d7274706d61703a3130312074656c6570686f6e652d6576656e742f383030300d0a613d666d74703a31303120302d31360d0a613d7274706d61703a3130302074656c6570686f6e652d6576656e742f34383030300d0a613d666d74703a31303020302d31360d0a613d7074696d653a32300d0a613d73656e64726563760d0a","sni":"","session":"eced2a6a-1891-4824-943e-d9bb15d5f2e4","bytes_in":1434,"source_verified":false,"enriched":{"digest":"36b4e5eee1f10cde","label":"SIP","strings":["INVITE sip:+61420163737@<HONEYPOT>:5076 SIP/2.0","Via: SIP/2.0/UDP 144.172.64.44:34838;branch=z9hG4bK-524287-1---46666e61b76cb0b5;…","Max-Forwards: 70","Contact: <sip:16994061897@144.172.64.44:34838;transport=UDP>","To: <sip:+61420163737@<HONEYPOT>>","From: \"16994061897\" <sip:16994061897@<HONEYPOT>>;tag=8f6ab1d8","Call-ID: U3EYVvtCu7f94a1BL96wRB..","CSeq: 1 INVITE","Allow: INVITE, INFO, PRACK, ACK, BYE, CANCEL, UPDATE, SUBSCRIBE, NOTIFY, REFER, …","Supported: 100rel, timer, replaces, norefersub, resource-priority"],"iocs":{"ips":["144.172.64.44"],"paths":["/2.0/UDP"]}}},{"timestamp":"2026-10-19T10:13:07","port":5075,"src_port":22537,"proto":"udp","app_proto":"","app_protocol":"sip","summary":"INVITE sip:+61420163737@<HONEYPOT>:5075 SIP/2.0\r\nVia: SIP/2.0/UDP 144.172.64.44:22537;branch=z9hG4bK-524287-1---c1a43cb4f740ade2;rport\r\nMax-Forwards: 70\r\nContact: <sip:17376490500@144.172.64.44:22537;transport=UDP>\r\nTo: <sip:+61420163737@<HONEYPOT>>\r\nFrom: \"17376490500\" <sip:17376490500@<HONEYPOT>>;tag=c8db4ae3\r\nCall-ID: ddYFHViFCz6dGCu6MMSzhP..\r\nCSeq: 1 INVITE\r\nAllow: INVITE, INFO, PRACK, ACK, BYE, CANCEL, UPDATE, SUBSCRIBE, NOTIFY, REFER, MESSAGE, OPTIONS\r\nSupported: 100rel, timer, replaces, norefersub, resource-priority\r\nSession-Expires: 1800;refresher=uas\r\nMin-SE: 90\r\nUser-Agent: Cisco CP-7941\r\nAllow-Events: talk, hold, conference, refer, check-sync\r\nAccept: application/sdp, application/dtmf-relay, application/resource-lists+xml, application/dialog-info+xml\r\nContent-Type: application/sdp\r\nContent-Length: 582\r\n\r\nv=0\r\no=- 20230401120000 20230401120000 IN IP4 144.172.64.44\r\ns=SIP Call\r\nc=IN IP4 144.172.64.44\r\nt=0 0\r\nm=audio 11780 RTP/AVP 0 8 9 18 4 2 114 98 97 101 100\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:9 G722/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=no\r\na=rtpmap:4 G723/8000\r\na=rtpmap:2 G726-32/8000\r\na=rtpmap:114 opus/48000/2\r\na=fmtp:114 useinbandfec=1\r\na=rtpmap:98 iLBC/8000\r\na=fmtp:98 mode=20\r\na=rtpmap:97 iLBC/8000\r\na=fmtp:97 mode=30\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=rtpmap:100 telephone-event/48000\r\na=fmtp:100 0-16\r\na=ptime:20\r\na=sendrecv\r\n","payload_hex":"494e56495445207369703a2b363134323031363337333740<HONEYPOT>3a35303735205349502f322e300d0a5669613a205349502f322e302f554450203134342e3137322e36342e34343a32323533373b6272616e63683d7a39684734624b2d3532343238372d312d2d2d633161343363623466373430616465323b72706f72740d0a4d61782d466f7277617264733a2037300d0a436f6e746163743a203c7369703a3137333736343930353030403134342e3137322e36342e34343a32323533373b7472616e73706f72743d5544503e0d0a546f3a203c7369703a2b363134323031363337333740<HONEYPOT>3e0d0a46726f6d3a2022313733373634393035303022203c7369703a313733373634393035303040<HONEYPOT>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","sni":"","session":"9ef5a133-7c13-4c4a-946f-e9a286fa40d6","bytes_in":1418,"source_verified":false,"enriched":{"digest":"a059e7a52f209572","label":"SIP","strings":["INVITE sip:+61420163737@<HONEYPOT>:5075 SIP/2.0","Via: SIP/2.0/UDP 144.172.64.44:22537;branch=z9hG4bK-524287-1---c1a43cb4f740ade2;…","Max-Forwards: 70","Contact: <sip:17376490500@144.172.64.44:22537;transport=UDP>","To: <sip:+61420163737@<HONEYPOT>>","From: \"17376490500\" <sip:17376490500@<HONEYPOT>>;tag=c8db4ae3","Call-ID: ddYFHViFCz6dGCu6MMSzhP..","CSeq: 1 INVITE","Allow: INVITE, INFO, PRACK, ACK, BYE, CANCEL, UPDATE, SUBSCRIBE, NOTIFY, REFER, …","Supported: 100rel, timer, replaces, norefersub, resource-priority"],"iocs":{"ips":["144.172.64.44"],"paths":["/2.0/UDP"]}}},{"timestamp":"2026-10-19T09:03:37","port":5075,"src_port":22537,"proto":"udp","app_proto":"","app_protocol":"sip","summary":"INVITE sip:+61420163737@<HONEYPOT>:5075 SIP/2.0\r\nVia: SIP/2.0/UDP 144.172.64.44:22537;branch=z9hG4bK-524287-1---29f7ad8448d96c99;rport\r\nMax-Forwards: 70\r\nContact: <sip:16994061897@144.172.64.44:22537;transport=UDP>\r\nTo: <sip:+61420163737@<HONEYPOT>>\r\nFrom: \"16994061897\" <sip:16994061897@<HONEYPOT>>;tag=1dfbb105\r\nCall-ID: pgfpPLBkYR3byzWC6ujtFt..\r\nCSeq: 1 INVITE\r\nAllow: INVITE, INFO, PRACK, ACK, BYE, CANCEL, UPDATE, SUBSCRIBE, NOTIFY, REFER, MESSAGE, OPTIONS\r\nSupported: 100rel, timer, replaces, norefersub, resource-priority\r\nSession-Expires: 1800;refresher=uas\r\nMin-SE: 90\r\nUser-Agent: Polycom VVX 301\r\nAllow-Events: talk, hold, conference, refer, check-sync\r\nAccept: application/sdp, application/dtmf-relay, application/resource-lists+xml, application/dialog-info+xml\r\nContent-Type: application/sdp\r\nContent-Length: 582\r\n\r\nv=0\r\no=- 20230401120000 20230401120000 IN IP4 144.172.64.44\r\ns=SIP Call\r\nc=IN IP4 144.172.64.44\r\nt=0 0\r\nm=audio 11780 RTP/AVP 0 8 9 18 4 2 114 98 97 101 100\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:9 G722/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=no\r\na=rtpmap:4 G723/8000\r\na=rtpmap:2 G726-32/8000\r\na=rtpmap:114 opus/48000/2\r\na=fmtp:114 useinbandfec=1\r\na=rtpmap:98 iLBC/8000\r\na=fmtp:98 mode=20\r\na=rtpmap:97 iLBC/8000\r\na=fmtp:97 mode=30\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=rtpmap:100 telephone-event/48000\r\na=fmtp:100 0-16\r\na=ptime:20\r\na=sendrecv\r\n","payload_hex":"494e56495445207369703a2b363134323031363337333740<HONEYPOT>3a35303735205349502f322e300d0a5669613a205349502f322e302f554450203134342e3137322e36342e34343a32323533373b6272616e63683d7a39684734624b2d3532343238372d312d2d2d323966376164383434386439366339393b72706f72740d0a4d61782d466f7277617264733a2037300d0a436f6e746163743a203c7369703a3136393934303631383937403134342e3137322e36342e34343a32323533373b7472616e73706f72743d5544503e0d0a546f3a203c7369703a2b363134323031363337333740<HONEYPOT>3e0d0a46726f6d3a2022313639393430363138393722203c7369703a313639393430363138393740<HONEYPOT>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","sni":"","session":"d40b65b9-f9fe-4628-90e6-0db78a656907","bytes_in":1423,"source_verified":false,"enriched":{"digest":"8ce2cf63a2249511","label":"SIP","strings":["INVITE sip:+61420163737@<HONEYPOT>:5075 SIP/2.0","Via: SIP/2.0/UDP 144.172.64.44:22537;branch=z9hG4bK-524287-1---29f7ad8448d96c99;…","Max-Forwards: 70","Contact: <sip:16994061897@144.172.64.44:22537;transport=UDP>","To: <sip:+61420163737@<HONEYPOT>>","From: \"16994061897\" <sip:16994061897@<HONEYPOT>>;tag=1dfbb105","Call-ID: pgfpPLBkYR3byzWC6ujtFt..","CSeq: 1 INVITE","Allow: INVITE, INFO, PRACK, ACK, BYE, CANCEL, UPDATE, SUBSCRIBE, NOTIFY, REFER, …","Supported: 100rel, timer, replaces, norefersub, resource-priority"],"iocs":{"ips":["144.172.64.44"],"paths":["/2.0/UDP"]}}},{"timestamp":"2026-10-19T07:45:49","port":5074,"src_port":24594,"proto":"udp","app_proto":"","app_protocol":"sip","summary":"INVITE sip:+61420163737@<HONEYPOT>:5074 SIP/2.0\r\nVia: SIP/2.0/UDP 144.172.64.44:24594;branch=z9hG4bK-524287-1---4c308d25d0f14d32;rport\r\nMax-Forwards: 70\r\nContact: <sip:17376490500@144.172.64.44:24594;transport=UDP>\r\nTo: <sip:+61420163737@<HONEYPOT>>\r\nFrom: \"17376490500\" <sip:17376490500@<HONEYPOT>>;tag=a83f0082\r\nCall-ID: wqWR03l2N8bA6lJruOCV65..\r\nCSeq: 1 INVITE\r\nAllow: INVITE, INFO, PRACK, ACK, BYE, CANCEL, UPDATE, SUBSCRIBE, NOTIFY, REFER, MESSAGE, OPTIONS\r\nSupported: 100rel, timer, replaces, norefersub, resource-priority\r\nSession-Expires: 1800;refresher=uas\r\nMin-SE: 90\r\nUser-Agent: Polycom VVX 411\r\nAllow-Events: talk, hold, conference, refer, check-sync\r\nAccept: application/sdp, application/dtmf-relay, application/resource-lists+xml, application/dialog-info+xml\r\nContent-Type: application/sdp\r\nContent-Length: 582\r\n\r\nv=0\r\no=- 20230401120000 20230401120000 IN IP4 144.172.64.44\r\ns=SIP Call\r\nc=IN IP4 144.172.64.44\r\nt=0 0\r\nm=audio 11780 RTP/AVP 0 8 9 18 4 2 114 98 97 101 100\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:9 G722/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=no\r\na=rtpmap:4 G723/8000\r\na=rtpmap:2 G726-32/8000\r\na=rtpmap:114 opus/48000/2\r\na=fmtp:114 useinbandfec=1\r\na=rtpmap:98 iLBC/8000\r\na=fmtp:98 mode=20\r\na=rtpmap:97 iLBC/8000\r\na=fmtp:97 mode=30\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=rtpmap:100 telephone-event/48000\r\na=fmtp:100 0-16\r\na=ptime:20\r\na=sendrecv\r\n","payload_hex":"494e56495445207369703a2b363134323031363337333740<HONEYPOT>3a35303734205349502f322e300d0a5669613a205349502f322e302f554450203134342e3137322e36342e34343a32343539343b6272616e63683d7a39684734624b2d3532343238372d312d2d2d346333303864323564306631346433323b72706f72740d0a4d61782d466f7277617264733a2037300d0a436f6e746163743a203c7369703a3137333736343930353030403134342e3137322e36342e34343a32343539343b7472616e73706f72743d5544503e0d0a546f3a203c7369703a2b363134323031363337333740<HONEYPOT>3e0d0a46726f6d3a2022313733373634393035303022203c7369703a313733373634393035303040<HONEYPOT>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","sni":"","session":"097dc1cb-0850-44fc-a353-5876e64ad721","bytes_in":1420,"source_verified":false,"enriched":{"digest":"5ae2e9138ee87b24","label":"SIP","strings":["INVITE sip:+61420163737@<HONEYPOT>:5074 SIP/2.0","Via: SIP/2.0/UDP 144.172.64.44:24594;branch=z9hG4bK-524287-1---4c308d25d0f14d32;…","Max-Forwards: 70","Contact: <sip:17376490500@144.172.64.44:24594;transport=UDP>","To: <sip:+61420163737@<HONEYPOT>>","From: \"17376490500\" <sip:17376490500@<HONEYPOT>>;tag=a83f0082","Call-ID: wqWR03l2N8bA6lJruOCV65..","CSeq: 1 INVITE","Allow: INVITE, INFO, PRACK, ACK, BYE, CANCEL, UPDATE, SUBSCRIBE, NOTIFY, REFER, …","Supported: 100rel, timer, replaces, norefersub, resource-priority"],"iocs":{"ips":["144.172.64.44"],"paths":["/2.0/UDP"]}}},{"timestamp":"2026-10-19T06:36:02","port":5074,"src_port":24594,"proto":"udp","app_proto":"","app_protocol":"sip","summary":"INVITE sip:+61420163737@<HONEYPOT>:5074 SIP/2.0\r\nVia: SIP/2.0/UDP 144.172.64.44:24594;branch=z9hG4bK-524287-1---81f6d610fe7e3210;rport\r\nMax-Forwards: 70\r\nContact: <sip:16994061897@144.172.64.44:24594;transport=UDP>\r\nTo: <sip:+61420163737@<HONEYPOT>>\r\nFrom: \"16994061897\" <sip:16994061897@<HONEYPOT>>;tag=9d13a9ba\r\nCall-ID: CQypZbsK7zm8hXVCniZRhN..\r\nCSeq: 1 INVITE\r\nAllow: INVITE, INFO, PRACK, ACK, BYE, CANCEL, UPDATE, SUBSCRIBE, NOTIFY, REFER, MESSAGE, OPTIONS\r\nSupported: 100rel, timer, replaces, norefersub, resource-priority\r\nSession-Expires: 1800;refresher=uas\r\nMin-SE: 90\r\nUser-Agent: snom200-2.04l\r\nAllow-Events: talk, hold, conference, refer, check-sync\r\nAccept: application/sdp, application/dtmf-relay, application/resource-lists+xml, application/dialog-info+xml\r\nContent-Type: application/sdp\r\nContent-Length: 582\r\n\r\nv=0\r\no=- 20230401120000 20230401120000 IN IP4 144.172.64.44\r\ns=SIP Call\r\nc=IN IP4 144.172.64.44\r\nt=0 0\r\nm=audio 11780 RTP/AVP 0 8 9 18 4 2 114 98 97 101 100\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:9 G722/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=no\r\na=rtpmap:4 G723/8000\r\na=rtpmap:2 G726-32/8000\r\na=rtpmap:114 opus/48000/2\r\na=fmtp:114 useinbandfec=1\r\na=rtpmap:98 iLBC/8000\r\na=fmtp:98 mode=20\r\na=rtpmap:97 iLBC/8000\r\na=fmtp:97 mode=30\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=rtpmap:100 telephone-event/48000\r\na=fmtp:100 0-16\r\na=ptime:20\r\na=sendrecv\r\n","payload_hex":"494e56495445207369703a2b363134323031363337333740<HONEYPOT>3a35303734205349502f322e300d0a5669613a205349502f322e302f554450203134342e3137322e36342e34343a32343539343b6272616e63683d7a39684734624b2d3532343238372d312d2d2d383166366436313066653765333231303b72706f72740d0a4d61782d466f7277617264733a2037300d0a436f6e746163743a203c7369703a3136393934303631383937403134342e3137322e36342e34343a32343539343b7472616e73706f72743d5544503e0d0a546f3a203c7369703a2b363134323031363337333740<HONEYPOT>3e0d0a46726f6d3a2022313639393430363138393722203c7369703a313639393430363138393740<HONEYPOT>3e3b7461673d39643133613962610d0a43616c6c2d49443a20435179705a62734b377a6d38685856436e695a52684e2e2e0d0a435365713a203120494e564954450d0a416c6c6f773a20494e564954452c20494e464f2c20505241434b2c2041434b2c204259452c2043414e43454c2c205550444154452c205355425343524942452c204e4f544946592c2052454645522c204d4553534147452c204f5054494f4e530d0a537570706f727465643a2031303072656c2c2074696d65722c207265706c616365732c206e6f72656665727375622c207265736f757263652d7072696f726974790d0a53657373696f6e2d457870697265733a20313830303b7265667265736865723d7561730d0a4d696e2d53453a2039300d0a557365722d4167656e743a20736e6f6d3230302d322e30346c0d0a416c6c6f772d4576656e74733a2074616c6b2c20686f6c642c20636f6e666572656e63652c2072656665722c20636865636b2d73796e630d0a4163636570743a206170706c69636174696f6e2f7364702c206170706c69636174696f6e2f64746d662d72656c61792c206170706c69636174696f6e2f7265736f757263652d6c697374732b786d6c2c206170706c69636174696f6e2f6469616c6f672d696e666f2b786d6c0d0a436f6e74656e742d547970653a206170706c69636174696f6e2f7364700d0a436f6e74656e742d4c656e6774683a203538320d0a0d0a763d300d0a6f3d2d20323032333034303131323030303020323032333034303131323030303020494e20495034203134342e3137322e36342e34340d0a733d5349502043616c6c0d0a633d494e20495034203134342e3137322e36342e34340d0a743d3020300d0a6d3d617564696f203131373830205254502f415650203020382039203138203420322031313420393820393720313031203130300d0a613d7274706d61703a302050434d552f383030300d0a613d7274706d61703a382050434d412f383030300d0a613d7274706d61703a3920473732322f383030300d0a613d7274706d61703a313820473732392f383030300d0a613d666d74703a313820616e6e6578623d6e6f0d0a613d7274706d61703a3420473732332f383030300d0a613d7274706d61703a3220473732362d33322f383030300d0a613d7274706d61703a313134206f7075732f34383030302f320d0a613d666d74703a31313420757365696e62616e646665633d310d0a613d7274706d61703a393820694c42432f383030300d0a613d666d74703a3938206d6f64653d32300d0a613d7274706d61703a393720694c42432f383030300d0a613d666d74703a3937206d6f64653d33300d0a613d7274706d61703a3130312074656c6570686f6e652d6576656e742f383030300d0a613d666d74703a31303120302d31360d0a613d7274706d61703a3130302074656c6570686f6e652d6576656e742f34383030300d0a613d666d74703a31303020302d31360d0a613d7074696d653a32300d0a613d73656e64726563760d0a","sni":"","session":"49156d91-5aad-4040-81cf-f6fb3c504cc0","bytes_in":1421,"source_verified":false,"enriched":{"digest":"680e327f2aece065","label":"SIP","strings":["INVITE sip:+61420163737@<HONEYPOT>:5074 SIP/2.0","Via: SIP/2.0/UDP 144.172.64.44:24594;branch=z9hG4bK-524287-1---81f6d610fe7e3210;…","Max-Forwards: 70","Contact: <sip:16994061897@144.172.64.44:24594;transport=UDP>","To: <sip:+61420163737@<HONEYPOT>>","From: \"16994061897\" <sip:16994061897@<HONEYPOT>>;tag=9d13a9ba","Call-ID: CQypZbsK7zm8hXVCniZRhN..","CSeq: 1 INVITE","Allow: INVITE, INFO, PRACK, ACK, BYE, CANCEL, UPDATE, SUBSCRIBE, NOTIFY, REFER, …","Supported: 100rel, timer, replaces, norefersub, resource-priority"],"iocs":{"ips":["144.172.64.44"],"paths":["/2.0/UDP"]}}},{"timestamp":"2026-10-19T05:18:34","port":5073,"src_port":20497,"proto":"udp","app_proto":"","app_protocol":"sip","summary":"INVITE sip:+61420163737@<HONEYPOT>:5073 SIP/2.0\r\nVia: SIP/2.0/UDP 144.172.64.44:20497;branch=z9hG4bK-524287-1---ce92c9f95ebdad1a;rport\r\nMax-Forwards: 70\r\nContact: <sip:17376490500@144.172.64.44:20497;transport=UDP>\r\nTo: <sip:+61420163737@<HONEYPOT>>\r\nFrom: \"17376490500\" <sip:17376490500@<HONEYPOT>>;tag=58c756fd\r\nCall-ID: OKso79lX9ghjzZcxz143f0..\r\nCSeq: 1 INVITE\r\nAllow: INVITE, INFO, PRACK, ACK, BYE, CANCEL, UPDATE, SUBSCRIBE, NOTIFY, REFER, MESSAGE, OPTIONS\r\nSupported: 100rel, timer, replaces, norefersub, resource-priority\r\nSession-Expires: 1800;refresher=uas\r\nMin-SE: 90\r\nUser-Agent: Cisco CP-7861\r\nAllow-Events: talk, hold, conference, refer, check-sync\r\nAccept: application/sdp, application/dtmf-relay, application/resource-lists+xml, application/dialog-info+xml\r\nContent-Type: application/sdp\r\nContent-Length: 582\r\n\r\nv=0\r\no=- 20230401120000 20230401120000 IN IP4 144.172.64.44\r\ns=SIP Call\r\nc=IN IP4 144.172.64.44\r\nt=0 0\r\nm=audio 11780 RTP/AVP 0 8 9 18 4 2 114 98 97 101 100\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:9 G722/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=no\r\na=rtpmap:4 G723/8000\r\na=rtpmap:2 G726-32/8000\r\na=rtpmap:114 opus/48000/2\r\na=fmtp:114 useinbandfec=1\r\na=rtpmap:98 iLBC/8000\r\na=fmtp:98 mode=20\r\na=rtpmap:97 iLBC/8000\r\na=fmtp:97 mode=30\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=rtpmap:100 telephone-event/48000\r\na=fmtp:100 0-16\r\na=ptime:20\r\na=sendrecv\r\n","payload_hex":"494e56495445207369703a2b363134323031363337333740<HONEYPOT>3a35303733205349502f322e300d0a5669613a205349502f322e302f554450203134342e3137322e36342e34343a32303439373b6272616e63683d7a39684734624b2d3532343238372d312d2d2d636539326339663935656264616431613b72706f72740d0a4d61782d466f7277617264733a2037300d0a436f6e746163743a203c7369703a3137333736343930353030403134342e3137322e36342e34343a32303439373b7472616e73706f72743d5544503e0d0a546f3a203c7369703a2b363134323031363337333740<HONEYPOT>3e0d0a46726f6d3a2022313733373634393035303022203c7369703a313733373634393035303040<HONEYPOT>3e3b7461673d35386337353666640d0a43616c6c2d49443a204f4b736f37396c583967686a7a5a63787a31343366302e2e0d0a435365713a203120494e564954450d0a416c6c6f773a20494e564954452c20494e464f2c20505241434b2c2041434b2c204259452c2043414e43454c2c205550444154452c205355425343524942452c204e4f544946592c2052454645522c204d4553534147452c204f5054494f4e530d0a537570706f727465643a2031303072656c2c2074696d65722c207265706c616365732c206e6f72656665727375622c207265736f757263652d7072696f726974790d0a53657373696f6e2d457870697265733a20313830303b7265667265736865723d7561730d0a4d696e2d53453a2039300d0a557365722d4167656e743a20436973636f2043502d373836310d0a416c6c6f772d4576656e74733a2074616c6b2c20686f6c642c20636f6e666572656e63652c2072656665722c20636865636b2d73796e630d0a4163636570743a206170706c69636174696f6e2f7364702c206170706c69636174696f6e2f64746d662d72656c61792c206170706c69636174696f6e2f7265736f757263652d6c697374732b786d6c2c206170706c69636174696f6e2f6469616c6f672d696e666f2b786d6c0d0a436f6e74656e742d547970653a206170706c69636174696f6e2f7364700d0a436f6e74656e742d4c656e6774683a203538320d0a0d0a763d300d0a6f3d2d20323032333034303131323030303020323032333034303131323030303020494e20495034203134342e3137322e36342e34340d0a733d5349502043616c6c0d0a633d494e20495034203134342e3137322e36342e34340d0a743d3020300d0a6d3d617564696f203131373830205254502f415650203020382039203138203420322031313420393820393720313031203130300d0a613d7274706d61703a302050434d552f383030300d0a613d7274706d61703a382050434d412f383030300d0a613d7274706d61703a3920473732322f383030300d0a613d7274706d61703a313820473732392f383030300d0a613d666d74703a313820616e6e6578623d6e6f0d0a613d7274706d61703a3420473732332f383030300d0a613d7274706d61703a3220473732362d33322f383030300d0a613d7274706d61703a313134206f7075732f34383030302f320d0a613d666d74703a31313420757365696e62616e646665633d310d0a613d7274706d61703a393820694c42432f383030300d0a613d666d74703a3938206d6f64653d32300d0a613d7274706d61703a393720694c42432f383030300d0a613d666d74703a3937206d6f64653d33300d0a613d7274706d61703a3130312074656c6570686f6e652d6576656e742f383030300d0a613d666d74703a31303120302d31360d0a613d7274706d61703a3130302074656c6570686f6e652d6576656e742f34383030300d0a613d666d74703a31303020302d31360d0a613d7074696d653a32300d0a613d73656e64726563760d0a","sni":"","session":"5ccf32de-803d-47dd-97f5-6e2d55a96d02","bytes_in":1418,"source_verified":false,"enriched":{"digest":"b10133f4d98c3853","label":"SIP","strings":["INVITE sip:+61420163737@<HONEYPOT>:5073 SIP/2.0","Via: SIP/2.0/UDP 144.172.64.44:20497;branch=z9hG4bK-524287-1---ce92c9f95ebdad1a;…","Max-Forwards: 70","Contact: <sip:17376490500@144.172.64.44:20497;transport=UDP>","To: <sip:+61420163737@<HONEYPOT>>","From: \"17376490500\" <sip:17376490500@<HONEYPOT>>;tag=58c756fd","Call-ID: OKso79lX9ghjzZcxz143f0..","CSeq: 1 INVITE","Allow: INVITE, INFO, PRACK, ACK, BYE, CANCEL, UPDATE, SUBSCRIBE, NOTIFY, REFER, …","Supported: 100rel, timer, replaces, norefersub, resource-priority"],"iocs":{"ips":["144.172.64.44"],"paths":["/2.0/UDP"]}}},{"timestamp":"2026-10-19T04:07:12","port":5073,"src_port":20497,"proto":"udp","app_proto":"","app_protocol":"sip","summary":"INVITE sip:+61420163737@<HONEYPOT>:5073 SIP/2.0\r\nVia: SIP/2.0/UDP 144.172.64.44:20497;branch=z9hG4bK-524287-1---26a3348a1c4d80e0;rport\r\nMax-Forwards: 70\r\nContact: <sip:16994061897@144.172.64.44:20497;transport=UDP>\r\nTo: <sip:+61420163737@<HONEYPOT>>\r\nFrom: \"16994061897\" <sip:16994061897@<HONEYPOT>>;tag=06201598\r\nCall-ID: hJJ48XE85VvHxhIa3mepm5..\r\nCSeq: 1 INVITE\r\nAllow: INVITE, INFO, PRACK, ACK, BYE, CANCEL, UPDATE, SUBSCRIBE, NOTIFY, REFER, MESSAGE, OPTIONS\r\nSupported: 100rel, timer, replaces, norefersub, resource-priority\r\nSession-Expires: 1800;refresher=uas\r\nMin-SE: 90\r\nUser-Agent: Gigaset C530IP\r\nAllow-Events: talk, hold, conference, refer, check-sync\r\nAccept: application/sdp, application/dtmf-relay, application/resource-lists+xml, application/dialog-info+xml\r\nContent-Type: application/sdp\r\nContent-Length: 582\r\n\r\nv=0\r\no=- 20230401120000 20230401120000 IN IP4 144.172.64.44\r\ns=SIP Call\r\nc=IN IP4 144.172.64.44\r\nt=0 0\r\nm=audio 11780 RTP/AVP 0 8 9 18 4 2 114 98 97 101 100\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:9 G722/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=no\r\na=rtpmap:4 G723/8000\r\na=rtpmap:2 G726-32/8000\r\na=rtpmap:114 opus/48000/2\r\na=fmtp:114 useinbandfec=1\r\na=rtpmap:98 iLBC/8000\r\na=fmtp:98 mode=20\r\na=rtpmap:97 iLBC/8000\r\na=fmtp:97 mode=30\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=rtpmap:100 telephone-event/48000\r\na=fmtp:100 0-16\r\na=ptime:20\r\na=sendrecv\r\n","payload_hex":"494e56495445207369703a2b363134323031363337333740<HONEYPOT>3a35303733205349502f322e300d0a5669613a205349502f322e302f554450203134342e3137322e36342e34343a32303439373b6272616e63683d7a39684734624b2d3532343238372d312d2d2d323661333334386131633464383065303b72706f72740d0a4d61782d466f7277617264733a2037300d0a436f6e746163743a203c7369703a3136393934303631383937403134342e3137322e36342e34343a32303439373b7472616e73706f72743d5544503e0d0a546f3a203c7369703a2b363134323031363337333740<HONEYPOT>3e0d0a46726f6d3a2022313639393430363138393722203c7369703a313639393430363138393740<HONEYPOT>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","sni":"","session":"1e1949b3-6afc-47ee-bb36-e81ebb76f09e","bytes_in":1422,"source_verified":false,"enriched":{"digest":"82118ea0ac350fb4","label":"SIP","strings":["INVITE sip:+61420163737@<HONEYPOT>:5073 SIP/2.0","Via: SIP/2.0/UDP 144.172.64.44:20497;branch=z9hG4bK-524287-1---26a3348a1c4d80e0;…","Max-Forwards: 70","Contact: <sip:16994061897@144.172.64.44:20497;transport=UDP>","To: <sip:+61420163737@<HONEYPOT>>","From: \"16994061897\" <sip:16994061897@<HONEYPOT>>;tag=06201598","Call-ID: hJJ48XE85VvHxhIa3mepm5..","CSeq: 1 INVITE","Allow: INVITE, INFO, PRACK, ACK, BYE, CANCEL, UPDATE, SUBSCRIBE, NOTIFY, REFER, …","Supported: 100rel, timer, replaces, norefersub, resource-priority"],"iocs":{"ips":["144.172.64.44"],"paths":["/2.0/UDP"]}}},{"timestamp":"2026-10-18T22:38:12","port":5072,"src_port":29462,"proto":"udp","app_proto":"","app_protocol":"sip","summary":"INVITE sip:+61420163737@<HONEYPOT>:5072 SIP/2.0\r\nVia: SIP/2.0/UDP 144.172.64.44:29462;branch=z9hG4bK-524287-1---0c23b2a57b7b0a4d;rport\r\nMax-Forwards: 70\r\nContact: <sip:17376490500@144.172.64.44:29462;transport=UDP>\r\nTo: <sip:+61420163737@<HONEYPOT>>\r\nFrom: \"17376490500\" <sip:17376490500@<HONEYPOT>>;tag=ffa75857\r\nCall-ID: qh2rznlIcHa28sK7PswimO..\r\nCSeq: 1 INVITE\r\nAllow: INVITE, INFO, PRACK, ACK, BYE, CANCEL, UPDATE, SUBSCRIBE, NOTIFY, REFER, MESSAGE, OPTIONS\r\nSupported: 100rel, timer, replaces, norefersub, resource-priority\r\nSession-Expires: 1800;refresher=uas\r\nMin-SE: 90\r\nUser-Agent: Yealink W70B\r\nAllow-Events: talk, hold, conference, refer, check-sync\r\nAccept: application/sdp, application/dtmf-relay, application/resource-lists+xml, application/dialog-info+xml\r\nContent-Type: application/sdp\r\nContent-Length: 582\r\n\r\nv=0\r\no=- 20230401120000 20230401120000 IN IP4 144.172.64.44\r\ns=SIP Call\r\nc=IN IP4 144.172.64.44\r\nt=0 0\r\nm=audio 11780 RTP/AVP 0 8 9 18 4 2 114 98 97 101 100\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:9 G722/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=no\r\na=rtpmap:4 G723/8000\r\na=rtpmap:2 G726-32/8000\r\na=rtpmap:114 opus/48000/2\r\na=fmtp:114 useinbandfec=1\r\na=rtpmap:98 iLBC/8000\r\na=fmtp:98 mode=20\r\na=rtpmap:97 iLBC/8000\r\na=fmtp:97 mode=30\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=rtpmap:100 telephone-event/48000\r\na=fmtp:100 0-16\r\na=ptime:20\r\na=sendrecv\r\n","payload_hex":"494e56495445207369703a2b363134323031363337333740<HONEYPOT>3a35303732205349502f322e300d0a5669613a205349502f322e302f554450203134342e3137322e36342e34343a32393436323b6272616e63683d7a39684734624b2d3532343238372d312d2d2d306332336232613537623762306134643b72706f72740d0a4d61782d466f7277617264733a2037300d0a436f6e746163743a203c7369703a3137333736343930353030403134342e3137322e36342e34343a32393436323b7472616e73706f72743d5544503e0d0a546f3a203c7369703a2b363134323031363337333740<HONEYPOT>3e0d0a46726f6d3a2022313733373634393035303022203c7369703a313733373634393035303040<HONEYPOT>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","sni":"","session":"4bc1329e-6ff0-47fb-82f5-20392ca399ff","bytes_in":1417,"source_verified":false,"enriched":{"digest":"d076a9f939ea928a","label":"SIP","strings":["INVITE sip:+61420163737@<HONEYPOT>:5072 SIP/2.0","Via: SIP/2.0/UDP 144.172.64.44:29462;branch=z9hG4bK-524287-1---0c23b2a57b7b0a4d;…","Max-Forwards: 70","Contact: <sip:17376490500@144.172.64.44:29462;transport=UDP>","To: <sip:+61420163737@<HONEYPOT>>","From: \"17376490500\" <sip:17376490500@<HONEYPOT>>;tag=ffa75857","Call-ID: qh2rznlIcHa28sK7PswimO..","CSeq: 1 INVITE","Allow: INVITE, INFO, PRACK, ACK, BYE, CANCEL, UPDATE, SUBSCRIBE, NOTIFY, REFER, …","Supported: 100rel, timer, replaces, norefersub, resource-priority"],"iocs":{"ips":["144.172.64.44"],"paths":["/2.0/UDP"]}}},{"timestamp":"2026-10-18T20:11:31","port":5071,"src_port":32378,"proto":"udp","app_proto":"","app_protocol":"sip","summary":"INVITE sip:+61420163737@<HONEYPOT>:5071 SIP/2.0\r\nVia: SIP/2.0/UDP 144.172.64.44:32378;branch=z9hG4bK-524287-1---f1b663dbd69e97b0;rport\r\nMax-Forwards: 70\r\nContact: <sip:17376490500@144.172.64.44:32378;transport=UDP>\r\nTo: <sip:+61420163737@<HONEYPOT>>\r\nFrom: \"17376490500\" <sip:17376490500@<HONEYPOT>>;tag=ef534a75\r\nCall-ID: C16esfb0lWDmG2jTKwRDvd..\r\nCSeq: 1 INVITE\r\nAllow: INVITE, INFO, PRACK, ACK, BYE, CANCEL, UPDATE, SUBSCRIBE, NOTIFY, REFER, MESSAGE, OPTIONS\r\nSupported: 100rel, timer, replaces, norefersub, resource-priority\r\nSession-Expires: 1800;refresher=uas\r\nMin-SE: 90\r\nUser-Agent: Zoiper for Android 2.14.7\r\nAllow-Events: talk, hold, conference, refer, check-sync\r\nAccept: application/sdp, application/dtmf-relay, application/resource-lists+xml, application/dialog-info+xml\r\nContent-Type: application/sdp\r\nContent-Length: 582\r\n\r\nv=0\r\no=- 20230401120000 20230401120000 IN IP4 144.172.64.44\r\ns=SIP Call\r\nc=IN IP4 144.172.64.44\r\nt=0 0\r\nm=audio 11780 RTP/AVP 0 8 9 18 4 2 114 98 97 101 100\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:9 G722/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=no\r\na=rtpmap:4 G723/8000\r\na=rtpmap:2 G726-32/8000\r\na=rtpmap:114 opus/48000/2\r\na=fmtp:114 useinbandfec=1\r\na=rtpmap:98 iLBC/8000\r\na=fmtp:98 mode=20\r\na=rtpmap:97 iLBC/8000\r\na=fmtp:97 mode=30\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=rtpmap:100 telephone-event/48000\r\na=fmtp:100 0-16\r\na=ptime:20\r\na=sendrecv\r\n","payload_hex":"494e56495445207369703a2b363134323031363337333740<HONEYPOT>3a35303731205349502f322e300d0a5669613a205349502f322e302f554450203134342e3137322e36342e34343a33323337383b6272616e63683d7a39684734624b2d3532343238372d312d2d2d663162363633646264363965393762303b72706f72740d0a4d61782d466f7277617264733a2037300d0a436f6e746163743a203c7369703a3137333736343930353030403134342e3137322e36342e34343a33323337383b7472616e73706f72743d5544503e0d0a546f3a203c7369703a2b363134323031363337333740<HONEYPOT>3e0d0a46726f6d3a2022313733373634393035303022203c7369703a313733373634393035303040<HONEYPOT>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","sni":"","session":"b4510578-2e88-45fd-a4aa-e6b4b9b510f3","bytes_in":1430,"source_verified":false,"enriched":{"digest":"c19c41b8d63b979b","label":"SIP","strings":["INVITE sip:+61420163737@<HONEYPOT>:5071 SIP/2.0","Via: SIP/2.0/UDP 144.172.64.44:32378;branch=z9hG4bK-524287-1---f1b663dbd69e97b0;…","Max-Forwards: 70","Contact: <sip:17376490500@144.172.64.44:32378;transport=UDP>","To: <sip:+61420163737@<HONEYPOT>>","From: \"17376490500\" <sip:17376490500@<HONEYPOT>>;tag=ef534a75","Call-ID: C16esfb0lWDmG2jTKwRDvd..","CSeq: 1 INVITE","Allow: INVITE, INFO, PRACK, ACK, BYE, CANCEL, UPDATE, SUBSCRIBE, NOTIFY, REFER, …","Supported: 100rel, timer, replaces, norefersub, resource-priority"],"iocs":{"ips":["144.172.64.44"],"paths":["/2.0/UDP"]}}},{"timestamp":"2026-10-18T19:01:39","port":5071,"src_port":32378,"proto":"udp","app_proto":"","app_protocol":"sip","summary":"INVITE sip:+61420163737@<HONEYPOT>:5071 SIP/2.0\r\nVia: SIP/2.0/UDP 144.172.64.44:32378;branch=z9hG4bK-524287-1---bec975ed9b48aa69;rport\r\nMax-Forwards: 70\r\nContact: <sip:16994061897@144.172.64.44:32378;transport=UDP>\r\nTo: <sip:+61420163737@<HONEYPOT>>\r\nFrom: \"16994061897\" <sip:16994061897@<HONEYPOT>>;tag=2cfb2631\r\nCall-ID: 5hv1Z1FE60uqObMv5aMygX..\r\nCSeq: 1 INVITE\r\nAllow: INVITE, INFO, PRACK, ACK, BYE, CANCEL, UPDATE, SUBSCRIBE, NOTIFY, REFER, MESSAGE, OPTIONS\r\nSupported: 100rel, timer, replaces, norefersub, resource-priority\r\nSession-Expires: 1800;refresher=uas\r\nMin-SE: 90\r\nUser-Agent: Grandstream GXP1625 1.0.7.50\r\nAllow-Events: talk, hold, conference, refer, check-sync\r\nAccept: application/sdp, application/dtmf-relay, application/resource-lists+xml, application/dialog-info+xml\r\nContent-Type: application/sdp\r\nContent-Length: 582\r\n\r\nv=0\r\no=- 20230401120000 20230401120000 IN IP4 144.172.64.44\r\ns=SIP Call\r\nc=IN IP4 144.172.64.44\r\nt=0 0\r\nm=audio 11780 RTP/AVP 0 8 9 18 4 2 114 98 97 101 100\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:9 G722/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=no\r\na=rtpmap:4 G723/8000\r\na=rtpmap:2 G726-32/8000\r\na=rtpmap:114 opus/48000/2\r\na=fmtp:114 useinbandfec=1\r\na=rtpmap:98 iLBC/8000\r\na=fmtp:98 mode=20\r\na=rtpmap:97 iLBC/8000\r\na=fmtp:97 mode=30\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=rtpmap:100 telephone-event/48000\r\na=fmtp:100 0-16\r\na=ptime:20\r\na=sendrecv\r\n","payload_hex":"494e56495445207369703a2b363134323031363337333740<HONEYPOT>3a35303731205349502f322e300d0a5669613a205349502f322e302f554450203134342e3137322e36342e34343a33323337383b6272616e63683d7a39684734624b2d3532343238372d312d2d2d626563393735656439623438616136393b72706f72740d0a4d61782d466f7277617264733a2037300d0a436f6e746163743a203c7369703a3136393934303631383937403134342e3137322e36342e34343a33323337383b7472616e73706f72743d5544503e0d0a546f3a203c7369703a2b363134323031363337333740<HONEYPOT>3e0d0a46726f6d3a2022313639393430363138393722203c7369703a313639393430363138393740<HONEYPOT>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","sni":"","session":"21af21d0-c27e-47e2-8b02-a4a5708f030f","bytes_in":1436,"source_verified":false,"enriched":{"digest":"eed0742d46cf3100","label":"SIP","strings":["INVITE sip:+61420163737@<HONEYPOT>:5071 SIP/2.0","Via: SIP/2.0/UDP 144.172.64.44:32378;branch=z9hG4bK-524287-1---bec975ed9b48aa69;…","Max-Forwards: 70","Contact: <sip:16994061897@144.172.64.44:32378;transport=UDP>","To: <sip:+61420163737@<HONEYPOT>>","From: \"16994061897\" <sip:16994061897@<HONEYPOT>>;tag=2cfb2631","Call-ID: 5hv1Z1FE60uqObMv5aMygX..","CSeq: 1 INVITE","Allow: INVITE, INFO, PRACK, ACK, BYE, CANCEL, UPDATE, SUBSCRIBE, NOTIFY, REFER, …","Supported: 100rel, timer, replaces, norefersub, resource-priority"],"iocs":{"ips":["144.172.64.44"],"paths":["/2.0/UDP"]}}},{"timestamp":"2026-10-18T17:44:09","port":5070,"src_port":33467,"proto":"udp","app_proto":"","app_protocol":"sip","summary":"INVITE sip:+61420163737@<HONEYPOT>:5070 SIP/2.0\r\nVia: SIP/2.0/UDP 144.172.64.44:33467;branch=z9hG4bK-524287-1---a8b79180831a0bc2;rport\r\nMax-Forwards: 70\r\nContact: <sip:17376490500@144.172.64.44:33467;transport=UDP>\r\nTo: <sip:+61420163737@<HONEYPOT>>\r\nFrom: \"17376490500\" <sip:17376490500@<HONEYPOT>>;tag=c5cbd9c7\r\nCall-ID: xQSSI0gnUHFVvJxL6m9zlo..\r\nCSeq: 1 INVITE\r\nAllow: INVITE, INFO, PRACK, ACK, BYE, CANCEL, UPDATE, SUBSCRIBE, NOTIFY, REFER, MESSAGE, OPTIONS\r\nSupported: 100rel, timer, replaces, norefersub, resource-priority\r\nSession-Expires: 1800;refresher=uas\r\nMin-SE: 90\r\nUser-Agent: 3CX SBC\r\nAllow-Events: talk, hold, conference, refer, check-sync\r\nAccept: application/sdp, application/dtmf-relay, application/resource-lists+xml, application/dialog-info+xml\r\nContent-Type: application/sdp\r\nContent-Length: 582\r\n\r\nv=0\r\no=- 20230401120000 20230401120000 IN IP4 144.172.64.44\r\ns=SIP Call\r\nc=IN IP4 144.172.64.44\r\nt=0 0\r\nm=audio 11780 RTP/AVP 0 8 9 18 4 2 114 98 97 101 100\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:9 G722/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=no\r\na=rtpmap:4 G723/8000\r\na=rtpmap:2 G726-32/8000\r\na=rtpmap:114 opus/48000/2\r\na=fmtp:114 useinbandfec=1\r\na=rtpmap:98 iLBC/8000\r\na=fmtp:98 mode=20\r\na=rtpmap:97 iLBC/8000\r\na=fmtp:97 mode=30\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=rtpmap:100 telephone-event/48000\r\na=fmtp:100 0-16\r\na=ptime:20\r\na=sendrecv\r\n","payload_hex":"494e56495445207369703a2b363134323031363337333740<HONEYPOT>3a35303730205349502f322e300d0a5669613a205349502f322e302f554450203134342e3137322e36342e34343a33333436373b6272616e63683d7a39684734624b2d3532343238372d312d2d2d613862373931383038333161306263323b72706f72740d0a4d61782d466f7277617264733a2037300d0a436f6e746163743a203c7369703a3137333736343930353030403134342e3137322e36342e34343a33333436373b7472616e73706f72743d5544503e0d0a546f3a203c7369703a2b363134323031363337333740<HONEYPOT>3e0d0a46726f6d3a2022313733373634393035303022203c7369703a313733373634393035303040<HONEYPOT>3e3b7461673d63356362643963370d0a43616c6c2d49443a20785153534930676e55484656764a784c366d397a6c6f2e2e0d0a435365713a203120494e564954450d0a416c6c6f773a20494e564954452c20494e464f2c20505241434b2c2041434b2c204259452c2043414e43454c2c205550444154452c205355425343524942452c204e4f544946592c2052454645522c204d4553534147452c204f5054494f4e530d0a537570706f727465643a2031303072656c2c2074696d65722c207265706c616365732c206e6f72656665727375622c207265736f757263652d7072696f726974790d0a53657373696f6e2d457870697265733a20313830303b7265667265736865723d7561730d0a4d696e2d53453a2039300d0a557365722d4167656e743a20334358205342430d0a416c6c6f772d4576656e74733a2074616c6b2c20686f6c642c20636f6e666572656e63652c2072656665722c20636865636b2d73796e630d0a4163636570743a206170706c69636174696f6e2f7364702c206170706c69636174696f6e2f64746d662d72656c61792c206170706c69636174696f6e2f7265736f757263652d6c697374732b786d6c2c206170706c69636174696f6e2f6469616c6f672d696e666f2b786d6c0d0a436f6e74656e742d547970653a206170706c69636174696f6e2f7364700d0a436f6e74656e742d4c656e6774683a203538320d0a0d0a763d300d0a6f3d2d20323032333034303131323030303020323032333034303131323030303020494e20495034203134342e3137322e36342e34340d0a733d5349502043616c6c0d0a633d494e20495034203134342e3137322e36342e34340d0a743d3020300d0a6d3d617564696f203131373830205254502f415650203020382039203138203420322031313420393820393720313031203130300d0a613d7274706d61703a302050434d552f383030300d0a613d7274706d61703a382050434d412f383030300d0a613d7274706d61703a3920473732322f383030300d0a613d7274706d61703a313820473732392f383030300d0a613d666d74703a313820616e6e6578623d6e6f0d0a613d7274706d61703a3420473732332f383030300d0a613d7274706d61703a3220473732362d33322f383030300d0a613d7274706d61703a313134206f7075732f34383030302f320d0a613d666d74703a31313420757365696e62616e646665633d310d0a613d7274706d61703a393820694c42432f383030300d0a613d666d74703a3938206d6f64653d32300d0a613d7274706d61703a393720694c42432f383030300d0a613d666d74703a3937206d6f64653d33300d0a613d7274706d61703a3130312074656c6570686f6e652d6576656e742f383030300d0a613d666d74703a31303120302d31360d0a613d7274706d61703a3130302074656c6570686f6e652d6576656e742f34383030300d0a613d666d74703a31303020302d31360d0a613d7074696d653a32300d0a613d73656e64726563760d0a","sni":"","session":"a0e218c9-6154-4ad2-8e18-3965f829ef5a","bytes_in":1412,"source_verified":false,"enriched":{"digest":"6ae3b148c0731101","label":"SIP","strings":["INVITE sip:+61420163737@<HONEYPOT>:5070 SIP/2.0","Via: SIP/2.0/UDP 144.172.64.44:33467;branch=z9hG4bK-524287-1---a8b79180831a0bc2;…","Max-Forwards: 70","Contact: <sip:17376490500@144.172.64.44:33467;transport=UDP>","To: <sip:+61420163737@<HONEYPOT>>","From: \"17376490500\" <sip:17376490500@<HONEYPOT>>;tag=c5cbd9c7","Call-ID: xQSSI0gnUHFVvJxL6m9zlo..","CSeq: 1 INVITE","Allow: INVITE, INFO, PRACK, ACK, BYE, CANCEL, UPDATE, SUBSCRIBE, NOTIFY, REFER, …","Supported: 100rel, timer, replaces, norefersub, resource-priority"],"iocs":{"ips":["144.172.64.44"],"paths":["/2.0/UDP"]}}},{"timestamp":"2026-10-18T16:34:29","port":5070,"src_port":33467,"proto":"udp","app_proto":"","app_protocol":"sip","summary":"INVITE sip:+61420163737@<HONEYPOT>:5070 SIP/2.0\r\nVia: SIP/2.0/UDP 144.172.64.44:33467;branch=z9hG4bK-524287-1---beae5dde5098b5a4;rport\r\nMax-Forwards: 70\r\nContact: <sip:16994061897@144.172.64.44:33467;transport=UDP>\r\nTo: <sip:+61420163737@<HONEYPOT>>\r\nFrom: \"16994061897\" <sip:16994061897@<HONEYPOT>>;tag=18fd9361\r\nCall-ID: UBRQzEmlBxInOLNT37muxr..\r\nCSeq: 1 INVITE\r\nAllow: INVITE, INFO, PRACK, ACK, BYE, CANCEL, UPDATE, SUBSCRIBE, NOTIFY, REFER, MESSAGE, OPTIONS\r\nSupported: 100rel, timer, replaces, norefersub, resource-priority\r\nSession-Expires: 1800;refresher=uas\r\nMin-SE: 90\r\nUser-Agent: Gigaset C530IP\r\nAllow-Events: talk, hold, conference, refer, check-sync\r\nAccept: application/sdp, application/dtmf-relay, application/resource-lists+xml, application/dialog-info+xml\r\nContent-Type: application/sdp\r\nContent-Length: 582\r\n\r\nv=0\r\no=- 20230401120000 20230401120000 IN IP4 144.172.64.44\r\ns=SIP Call\r\nc=IN IP4 144.172.64.44\r\nt=0 0\r\nm=audio 11780 RTP/AVP 0 8 9 18 4 2 114 98 97 101 100\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:9 G722/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=no\r\na=rtpmap:4 G723/8000\r\na=rtpmap:2 G726-32/8000\r\na=rtpmap:114 opus/48000/2\r\na=fmtp:114 useinbandfec=1\r\na=rtpmap:98 iLBC/8000\r\na=fmtp:98 mode=20\r\na=rtpmap:97 iLBC/8000\r\na=fmtp:97 mode=30\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=rtpmap:100 telephone-event/48000\r\na=fmtp:100 0-16\r\na=ptime:20\r\na=sendrecv\r\n","payload_hex":"494e56495445207369703a2b363134323031363337333740<HONEYPOT>3a35303730205349502f322e300d0a5669613a205349502f322e302f554450203134342e3137322e36342e34343a33333436373b6272616e63683d7a39684734624b2d3532343238372d312d2d2d626561653564646535303938623561343b72706f72740d0a4d61782d466f7277617264733a2037300d0a436f6e746163743a203c7369703a3136393934303631383937403134342e3137322e36342e34343a33333436373b7472616e73706f72743d5544503e0d0a546f3a203c7369703a2b363134323031363337333740<HONEYPOT>3e0d0a46726f6d3a2022313639393430363138393722203c7369703a313639393430363138393740<HONEYPOT>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","sni":"","session":"941bf6d5-019f-49d4-bc8e-6550ed45dcb9","bytes_in":1422,"source_verified":false,"enriched":{"digest":"d37ddbd385be03e5","label":"SIP","strings":["INVITE sip:+61420163737@<HONEYPOT>:5070 SIP/2.0","Via: SIP/2.0/UDP 144.172.64.44:33467;branch=z9hG4bK-524287-1---beae5dde5098b5a4;…","Max-Forwards: 70","Contact: <sip:16994061897@144.172.64.44:33467;transport=UDP>","To: <sip:+61420163737@<HONEYPOT>>","From: \"16994061897\" <sip:16994061897@<HONEYPOT>>;tag=18fd9361","Call-ID: UBRQzEmlBxInOLNT37muxr..","CSeq: 1 INVITE","Allow: INVITE, INFO, PRACK, ACK, BYE, CANCEL, UPDATE, SUBSCRIBE, NOTIFY, REFER, …","Supported: 100rel, timer, replaces, norefersub, resource-priority"],"iocs":{"ips":["144.172.64.44"],"paths":["/2.0/UDP"]}}},{"timestamp":"2026-10-18T15:17:14","port":5069,"src_port":25601,"proto":"udp","app_proto":"","app_protocol":"sip","summary":"INVITE sip:+61420163737@<HONEYPOT>:5069 SIP/2.0\r\nVia: SIP/2.0/UDP 144.172.64.44:25601;branch=z9hG4bK-524287-1---bb00a4db7d63fc34;rport\r\nMax-Forwards: 70\r\nContact: <sip:17376490500@144.172.64.44:25601;transport=UDP>\r\nTo: <sip:+61420163737@<HONEYPOT>>\r\nFrom: \"17376490500\" <sip:17376490500@<HONEYPOT>>;tag=f1e48c35\r\nCall-ID: Hk27F0kVscd1XAs95lVWMP..\r\nCSeq: 1 INVITE\r\nAllow: INVITE, INFO, PRACK, ACK, BYE, CANCEL, UPDATE, SUBSCRIBE, NOTIFY, REFER, MESSAGE, OPTIONS\r\nSupported: 100rel, timer, replaces, norefersub, resource-priority\r\nSession-Expires: 1800;refresher=uas\r\nMin-SE: 90\r\nUser-Agent: Cisco-CP7841-3PCC/11.3.7\r\nAllow-Events: talk, hold, conference, refer, check-sync\r\nAccept: application/sdp, application/dtmf-relay, application/resource-lists+xml, application/dialog-info+xml\r\nContent-Type: application/sdp\r\nContent-Length: 582\r\n\r\nv=0\r\no=- 20230401120000 20230401120000 IN IP4 144.172.64.44\r\ns=SIP Call\r\nc=IN IP4 144.172.64.44\r\nt=0 0\r\nm=audio 11780 RTP/AVP 0 8 9 18 4 2 114 98 97 101 100\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:9 G722/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=no\r\na=rtpmap:4 G723/8000\r\na=rtpmap:2 G726-32/8000\r\na=rtpmap:114 opus/48000/2\r\na=fmtp:114 useinbandfec=1\r\na=rtpmap:98 iLBC/8000\r\na=fmtp:98 mode=20\r\na=rtpmap:97 iLBC/8000\r\na=fmtp:97 mode=30\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=rtpmap:100 telephone-event/48000\r\na=fmtp:100 0-16\r\na=ptime:20\r\na=sendrecv\r\n","payload_hex":"494e56495445207369703a2b363134323031363337333740<HONEYPOT>3a35303639205349502f322e300d0a5669613a205349502f322e302f554450203134342e3137322e36342e34343a32353630313b6272616e63683d7a39684734624b2d3532343238372d312d2d2d626230306134646237643633666333343b72706f72740d0a4d61782d466f7277617264733a2037300d0a436f6e746163743a203c7369703a3137333736343930353030403134342e3137322e36342e34343a32353630313b7472616e73706f72743d5544503e0d0a546f3a203c7369703a2b363134323031363337333740<HONEYPOT>3e0d0a46726f6d3a2022313733373634393035303022203c7369703a313733373634393035303040<HONEYPOT>3e3b7461673d66316534386333350d0a43616c6c2d49443a20486b323746306b567363643158417339356c56574d502e2e0d0a435365713a203120494e564954450d0a416c6c6f773a20494e564954452c20494e464f2c20505241434b2c2041434b2c204259452c2043414e43454c2c205550444154452c205355425343524942452c204e4f544946592c2052454645522c204d4553534147452c204f5054494f4e530d0a537570706f727465643a2031303072656c2c2074696d65722c207265706c616365732c206e6f72656665727375622c207265736f757263652d7072696f726974790d0a53657373696f6e2d457870697265733a20313830303b7265667265736865723d7561730d0a4d696e2d53453a2039300d0a557365722d4167656e743a20436973636f2d4350373834312d335043432f31312e332e370d0a416c6c6f772d4576656e74733a2074616c6b2c20686f6c642c20636f6e666572656e63652c2072656665722c20636865636b2d73796e630d0a4163636570743a206170706c69636174696f6e2f7364702c206170706c69636174696f6e2f64746d662d72656c61792c206170706c69636174696f6e2f7265736f757263652d6c697374732b786d6c2c206170706c69636174696f6e2f6469616c6f672d696e666f2b786d6c0d0a436f6e74656e742d547970653a206170706c69636174696f6e2f7364700d0a436f6e74656e742d4c656e6774683a203538320d0a0d0a763d300d0a6f3d2d20323032333034303131323030303020323032333034303131323030303020494e20495034203134342e3137322e36342e34340d0a733d5349502043616c6c0d0a633d494e20495034203134342e3137322e36342e34340d0a743d3020300d0a6d3d617564696f203131373830205254502f415650203020382039203138203420322031313420393820393720313031203130300d0a613d7274706d61703a302050434d552f383030300d0a613d7274706d61703a382050434d412f383030300d0a613d7274706d61703a3920473732322f383030300d0a613d7274706d61703a313820473732392f383030300d0a613d666d74703a313820616e6e6578623d6e6f0d0a613d7274706d61703a3420473732332f383030300d0a613d7274706d61703a3220473732362d33322f383030300d0a613d7274706d61703a313134206f7075732f34383030302f320d0a613d666d74703a31313420757365696e62616e646665633d310d0a613d7274706d61703a393820694c42432f383030300d0a613d666d74703a3938206d6f64653d32300d0a613d7274706d61703a393720694c42432f383030300d0a613d666d74703a3937206d6f64653d33300d0a613d7274706d61703a3130312074656c6570686f6e652d6576656e742f383030300d0a613d666d74703a31303120302d31360d0a613d7274706d61703a3130302074656c6570686f6e652d6576656e742f34383030300d0a613d666d74703a31303020302d31360d0a613d7074696d653a32300d0a613d73656e64726563760d0a","sni":"","session":"dede7b80-e603-4aed-95c5-032350136741","bytes_in":1429,"source_verified":false,"enriched":{"digest":"00447a339e20e30a","label":"SIP","strings":["INVITE sip:+61420163737@<HONEYPOT>:5069 SIP/2.0","Via: SIP/2.0/UDP 144.172.64.44:25601;branch=z9hG4bK-524287-1---bb00a4db7d63fc34;…","Max-Forwards: 70","Contact: <sip:17376490500@144.172.64.44:25601;transport=UDP>","To: <sip:+61420163737@<HONEYPOT>>","From: \"17376490500\" <sip:17376490500@<HONEYPOT>>;tag=f1e48c35","Call-ID: Hk27F0kVscd1XAs95lVWMP..","CSeq: 1 INVITE","Allow: INVITE, INFO, PRACK, ACK, BYE, CANCEL, UPDATE, SUBSCRIBE, NOTIFY, REFER, …","Supported: 100rel, timer, replaces, norefersub, resource-priority"],"iocs":{"ips":["144.172.64.44"],"paths":["/2.0/UDP"]}}},{"timestamp":"2026-10-18T12:48:56","port":5068,"src_port":31643,"proto":"udp","app_proto":"","app_protocol":"sip","summary":"INVITE sip:+61420163737@<HONEYPOT>:5068 SIP/2.0\r\nVia: SIP/2.0/UDP 144.172.64.44:31643;branch=z9hG4bK-524287-1---41565d1f89d266ea;rport\r\nMax-Forwards: 70\r\nContact: <sip:17376490500@144.172.64.44:31643;transport=UDP>\r\nTo: <sip:+61420163737@<HONEYPOT>>\r\nFrom: \"17376490500\" <sip:17376490500@<HONEYPOT>>;tag=3dd689d0\r\nCall-ID: 6MdH0NuQZMd4sopkPu5CMJ..\r\nCSeq: 1 INVITE\r\nAllow: INVITE, INFO, PRACK, ACK, BYE, CANCEL, UPDATE, SUBSCRIBE, NOTIFY, REFER, MESSAGE, OPTIONS\r\nSupported: 100rel, timer, replaces, norefersub, resource-priority\r\nSession-Expires: 1800;refresher=uas\r\nMin-SE: 90\r\nUser-Agent: Linphone\r\nAllow-Events: talk, hold, conference, refer, check-sync\r\nAccept: application/sdp, application/dtmf-relay, application/resource-lists+xml, application/dialog-info+xml\r\nContent-Type: application/sdp\r\nContent-Length: 582\r\n\r\nv=0\r\no=- 20230401120000 20230401120000 IN IP4 144.172.64.44\r\ns=SIP Call\r\nc=IN IP4 144.172.64.44\r\nt=0 0\r\nm=audio 11780 RTP/AVP 0 8 9 18 4 2 114 98 97 101 100\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:9 G722/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=no\r\na=rtpmap:4 G723/8000\r\na=rtpmap:2 G726-32/8000\r\na=rtpmap:114 opus/48000/2\r\na=fmtp:114 useinbandfec=1\r\na=rtpmap:98 iLBC/8000\r\na=fmtp:98 mode=20\r\na=rtpmap:97 iLBC/8000\r\na=fmtp:97 mode=30\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=rtpmap:100 telephone-event/48000\r\na=fmtp:100 0-16\r\na=ptime:20\r\na=sendrecv\r\n","payload_hex":"494e56495445207369703a2b363134323031363337333740<HONEYPOT>3a35303638205349502f322e300d0a5669613a205349502f322e302f554450203134342e3137322e36342e34343a33313634333b6272616e63683d7a39684734624b2d3532343238372d312d2d2d343135363564316638396432363665613b72706f72740d0a4d61782d466f7277617264733a2037300d0a436f6e746163743a203c7369703a3137333736343930353030403134342e3137322e36342e34343a33313634333b7472616e73706f72743d5544503e0d0a546f3a203c7369703a2b363134323031363337333740<HONEYPOT>3e0d0a46726f6d3a2022313733373634393035303022203c7369703a313733373634393035303040<HONEYPOT>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","sni":"","session":"5d968640-62bb-45aa-9873-41c5aa0c2f3c","bytes_in":1413,"source_verified":false,"enriched":{"digest":"1ce8e08b0074a5b4","label":"SIP","strings":["INVITE sip:+61420163737@<HONEYPOT>:5068 SIP/2.0","Via: SIP/2.0/UDP 144.172.64.44:31643;branch=z9hG4bK-524287-1---41565d1f89d266ea;…","Max-Forwards: 70","Contact: <sip:17376490500@144.172.64.44:31643;transport=UDP>","To: <sip:+61420163737@<HONEYPOT>>","From: \"17376490500\" <sip:17376490500@<HONEYPOT>>;tag=3dd689d0","Call-ID: 6MdH0NuQZMd4sopkPu5CMJ..","CSeq: 1 INVITE","Allow: INVITE, INFO, PRACK, ACK, BYE, CANCEL, UPDATE, SUBSCRIBE, NOTIFY, REFER, …","Supported: 100rel, timer, replaces, norefersub, resource-priority"],"iocs":{"ips":["144.172.64.44"],"paths":["/2.0/UDP"]}}}]},"interaction":{"window_days":90,"sessions":34,"first_seen":"2026-10-16T02:53:34","last_seen":"2026-10-20T02:16:05","verdicts":[{"verdict":"scan","sessions":34}],"personas":[{"persona":"sip@Asterisk PBX 18.10.0","sessions":34}],"services":[{"protocol":"sip","port":8082,"sessions":29},{"protocol":"sip","port":5060,"sessions":5}],"logins":[],"commands":[],"downloads":[],"files":[{"sha256":"b7ea6ed286483bbb6e7227393d740a181b688a887633f87a2c3844fa7d5b2186","name":"as3vpZ3rEwnKfyPKyXOAYa..","size":582,"mime_type":"text/plain","kind":"sip-sdp","times":2,"first_seen":"2026-10-16T05:33:40","last_seen":"2026-10-16T10:54:03","virustotal":null},{"sha256":"382b113f8780c4f356deba2ff988d8943dfe5eae233492bf4672c83ea6bf01b9","name":"6B1EYt0gjjxAGdKxT9xte1..","size":582,"mime_type":"text/plain","kind":"sip-sdp","times":1,"first_seen":"2026-10-17T15:44:57","last_seen":"2026-10-17T15:44:57","virustotal":null},{"sha256":"751fd5ffc63230d3b5c677f4dd1ee476f619a6cc210a295f736d7ba4110248e2","name":"kk74i9ESbP7GZMZmeG49GW..","size":582,"mime_type":"text/plain","kind":"sip-sdp","times":1,"first_seen":"2026-10-16T08:13:49","last_seen":"2026-10-16T08:13:49","virustotal":null},{"sha256":"f21eebf58c2cc2438159538e6f807debd0c081324a0074b54782724e2d0a7e46","name":"ZVneIlGbDtu19h05GUzHSn..","size":582,"mime_type":"text/plain","kind":"sip-sdp","times":1,"first_seen":"2026-10-16T02:53:34","last_seen":"2026-10-16T02:53:34","virustotal":null}],"attack":[{"technique_id":"T1595","technique_name":"Active Scanning","tactic_id":"TA0043","tactic_name":"Reconnaissance","sessions":34}]},"top_ports":[{"port":443,"proto":"tcp","label":"HTTPS","count":1},{"port":44300,"proto":"tcp","label":"","count":1},{"port":50000,"proto":"tcp","label":"SAP","count":1},{"port":10443,"proto":"tcp","label":"","count":1},{"port":8080,"proto":"tcp","label":"HTTP-alt","count":1},{"port":9090,"proto":"tcp","label":"Prometheus","count":1}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i1909h2_9dc949149365_97f8aa674fd9"],"tls_client_hello":"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","tls_ja3":["7c1e207beb00684bbbe144f1b0abe1d5"],"http_akin":["b11cun040_00040016_aa48e2c8"],"interactive":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[]}},"fingerprint_peers":{"t13i1909h2_9dc949149365_97f8aa674fd9":793,"b11cun040_00040016_aa48e2c8":5564},"akin_families":{},"user_agents":["Mozilla/5.0 zgrab/0.x"],"timeline":[{"date":"2026-10-23","count":4},{"date":"2026-10-24","count":2}],"recent_events":[{"timestamp":"2026-10-24T03:16:47","port":50000,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:50000\",\"user-agent\":\"Mozilla/5.0 zgrab/0.x\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a35303030300d0a557365722d4167656e743a204d6f7a696c6c612f352e30207a677261622f302e780d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 zgrab/0.x","ja3":"","session":"3c1b8b87-b7ad-4d34-8cbc-c8bde4f49d56","seq":1,"duration_ms":100,"bytes_in":116,"bytes_out":78},{"timestamp":"2026-10-24T00:38:48","port":8080,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:8080\",\"user-agent\":\"Mozilla/5.0 zgrab/0.x\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a383038300d0a557365722d4167656e743a204d6f7a696c6c612f352e30207a677261622f302e780d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 zgrab/0.x","ja3":"","session":"59b41fc2-3f70-4796-b844-fae39f32ffe0","seq":1,"duration_ms":101,"bytes_in":115,"bytes_out":78},{"timestamp":"2026-10-23T18:43:46","port":9090,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:9090\",\"user-agent\":\"Mozilla/5.0 zgrab/0.x\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a393039300d0a557365722d4167656e743a204d6f7a696c6c612f352e30207a677261622f302e780d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 zgrab/0.x","ja3":"7c1e207beb00684bbbe144f1b0abe1d5","session":"7290f9f2-ff3e-4952-8ea6-21dda5a34c08","seq":1,"duration_ms":100,"bytes_in":115,"bytes_out":78},{"timestamp":"2026-10-23T08:00:32","port":44300,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:44300\",\"user-agent\":\"Mozilla/5.0 zgrab/0.x\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a34343330300d0a557365722d4167656e743a204d6f7a696c6c612f352e30207a677261622f302e780d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 zgrab/0.x","ja3":"7c1e207beb00684bbbe144f1b0abe1d5","session":"e9e3251b-7984-4ff6-baec-f12c3f4e6b37","seq":1,"duration_ms":100,"bytes_in":116,"bytes_out":78},{"timestamp":"2026-10-23T07:52:34","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 zgrab/0.x\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e30207a677261622f302e780d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 zgrab/0.x","ja3":"7c1e207beb00684bbbe144f1b0abe1d5","session":"9cbb2819-0db6-4e30-9a21-d18bcef1bd53","seq":1,"duration_ms":101,"bytes_in":110,"bytes_out":78},{"timestamp":"2026-10-23T05:35:46","port":10443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:10443\",\"user-agent\":\"Mozilla/5.0 zgrab/0.x\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a31303434330d0a557365722d4167656e743a204d6f7a696c6c612f352e30207a677261622f302e780d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 zgrab/0.x","ja3":"7c1e207beb00684bbbe144f1b0abe1d5","session":"7f357504-399e-4263-8f4e-d58f558bfd9d","seq":1,"duration_ms":100,"bytes_in":116,"bytes_out":78}],"http_methods":[{"method":"GET","count":6}],"distinct_ports_total":6,"top_paths":[{"path":"/","count":6,"ports":6}],"distinct_paths_total":1,"top_snis":[],"top_hosts":[],"top_alpns":[{"value":"h2, http/1.1","count":4}],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Host","User-Agent"],"representative":[{"name":"Accept","value":"*/*","notable":false},{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Host","value":"<HONEYPOT>:50000","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 zgrab/0.x","notable":false}],"distinct_sets":1,"events_with_headers":6},"tags":[]}