{"ip":"160.119.71.111","total_events":1322,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"residential ISP","why":["1322 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."]},"first_seen":"2026-07-08T00:04:50","last_seen":"2026-07-11T13:45:25","events_24h":0,"events_7d":0,"geo":{"country_code":"SC","country_name":"Seychelles","region":"","city":"","lat":-4.5833,"lon":55.6667,"asn":49870,"org":"Alsycon B.V."},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as49870","label":"Alsycon AS49870","category":"isp","url":"https://www.peeringdb.com/asn/49870"},"cve_matches":[],"malware":[],"top_ports":[{"port":5060,"proto":"tcp","label":"SIP","count":1322}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-07-08","count":457},{"date":"2026-07-09","count":68},{"date":"2026-07-10","count":508},{"date":"2026-07-11","count":289}],"recent_events":[{"timestamp":"2026-07-11T13:45:25","port":5060,"proto":"tcp","app_proto":"","app_protocol":"sip","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"INVITE sip:@<HONEYPOT>:5060;transport=TCP SIP/2.0\r\nVia: SIP/2.0/TCP 160.119.71.111:36322;branch=z9hG4bK-524287-1---e9161026c645a7d3;rport\r\nMax-Forwards: 70\r\nFrom: <sip:16613455031@<HONEYPOT>>;tag=aa661d6a\r\nTo: <sip:@<HONEYPOT>:5060>\r\nCall-ID: DKlYgn5vkxpgMnohWmpp0J..\r\nCSeq: 1 INVITE\r\nContact: <sip:16613455031@160.119.71.111:36322;transport=TCP>\r\nUser-Agent: Cisco/SPA112-1.4.1\r\nAllow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO, UPDATE\r\nSupported: replaces, timer, 100rel, norefersub\r\nSession-Expires: 1800;refresher=uac\r\nAllow-Events: presence, kpml, talk\r\nContent-Type: application/sdp\r\nContent-Length: 433\r\n\r\nv=0\r\no=- 3747 3747 IN IP4 160.119.71.111\r\ns=TUFAN Call\r\nc=IN IP4 160.119.71.111\r\nt=0 0\r\nm=audio 10990 RTP/AVP 0 8 18 9 101 13 126 97\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=no\r\na=rtpmap:9 G722/8000\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=rtpmap:13 CN/8000\r\na=rtpmap:126 telephone-event/16000\r\na=fmtp:126 0-16\r\na=rtpmap:97 iLBC/8000\r\na=ptime:20\r\na=maxptime:150\r\na=sendrecv\r\n","payload_hex":"494e56495445207369703a40<HONEYPOT>3a353036303b7472616e73706f72743d544350205349502f322e300d0a5669613a205349502f322e302f544350203136302e3131392e37312e3131313a33363332323b6272616e63683d7a39684734624b2d3532343238372d312d2d2d653931363130323663363435613764333b72706f72740d0a4d61782d466f7277617264733a2037300d0a46726f6d3a203c7369703a313636313334353530333140<HONEYPOT>3e3b7461673d61613636316436610d0a546f3a203c7369703a40<HONEYPOT>3a353036303e0d0a43616c6c2d49443a20444b6c59676e35766b7870674d6e6f68576d7070304a2e2e0d0a435365713a203120494e564954450d0a436f6e746163743a203c7369703a3136363133343535303331403136302e3131392e37312e3131313a33363332323b7472616e73706f72743d5443503e0d0a557365722d4167656e743a20436973636f2f5350413131322d312e342e310d0a416c6c6f773a20494e564954452c2041434b2c2043414e43454c2c204f5054494f4e532c204259452c2052454645522c205355425343524942452c204e4f544946592c20494e464f2c205550444154450d0a537570706f727465643a207265706c616365732c2074696d65722c2031303072656c2c206e6f72656665727375620d0a53657373696f6e2d457870697265733a20313830303b7265667265736865723d7561630d0a416c6c6f772d4576656e74733a2070726573656e63652c206b706d6c2c2074616c6b0d0a436f6e74656e742d547970653a206170706c69636174696f6e2f7364700d0a436f6e74656e742d4c656e6774683a203433330d0a0d0a763d300d0a6f3d2d2033373437203337343720494e20495034203136302e3131392e37312e3131310d0a733d545546414e2043616c6c0d0a633d494e20495034203136302e3131392e37312e3131310d0a743d3020300d0a6d3d617564696f203130393930205254502f41565020302038203138203920313031203133203132362039370d0a613d7274706d61703a302050434d552f383030300d0a613d7274706d61703a382050434d412f383030300d0a613d7274706d61703a313820473732392f383030300d0a613d666d74703a313820616e6e6578623d6e6f0d0a613d7274706d61703a3920473732322f383030300d0a613d7274706d61703a3130312074656c6570686f6e652d6576656e742f383030300d0a613d666d74703a31303120302d31360d0a613d7274706d61703a313320434e2f383030300d0a613d7274706d61703a3132362074656c6570686f6e652d6576656e742f31363030300d0a613d666d74703a31323620302d31360d0a613d7274706d61703a393720694c42432f383030300d0a613d7074696d653a32300d0a613d6d61787074696d653a3135300d0a613d73656e64726563760d0a","method":"","user_agent":"","community_id":"1:50regl8UWC60eVP9xXkFjHLLvwE=","ja3":"","session":"8093b569-ca17-4c03-be33-ff1756d47459","seq":1,"duration_ms":101,"bytes_in":1082,"bytes_out":14,"enriched":{"digest":"15272bb41199b0bb","label":"SIP","strings":["INVITE sip:@<HONEYPOT>:5060;transport=TCP SIP/2.0","Via: SIP/2.0/TCP 160.119.71.111:36322;branch=z9hG4bK-524287-1---e9161026c645a7d3…","Max-Forwards: 70","From: <sip:16613455031@<HONEYPOT>>;tag=aa661d6a","To: <sip:@<HONEYPOT>:5060>","Call-ID: DKlYgn5vkxpgMnohWmpp0J..","CSeq: 1 INVITE","Contact: <sip:16613455031@160.119.71.111:36322;transport=TCP>","User-Agent: Cisco/SPA112-1.4.1","Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO, UPDATE"],"iocs":{"ips":["160.119.71.111"],"paths":["/2.0/TCP"]}}},{"timestamp":"2026-07-11T13:40:55","port":5060,"proto":"tcp","app_proto":"","app_protocol":"sip","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"INVITE sip:@<HONEYPOT>:5060;transport=TCP SIP/2.0\r\nVia: SIP/2.0/TCP 160.119.71.111:64988;branch=z9hG4bK-524287-1---1bb1fa3e9b786863;rport\r\nMax-Forwards: 70\r\nFrom: <sip:16614501931@<HONEYPOT>>;tag=ae39babc\r\nTo: <sip:@<HONEYPOT>:5060>\r\nCall-ID: MAjHk31m62kTyx3cewXhOt..\r\nCSeq: 1 INVITE\r\nContact: <sip:16614501931@160.119.71.111:64988;transport=TCP>\r\nUser-Agent: Yealink\r\nAllow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO, UPDATE\r\nSupported: replaces, timer, 100rel, norefersub\r\nSession-Expires: 1800;refresher=uac\r\nAllow-Events: presence, kpml, talk\r\nContent-Type: application/sdp\r\nContent-Length: 433\r\n\r\nv=0\r\no=- 3747 3747 IN IP4 160.119.71.111\r\ns=TUFAN Call\r\nc=IN IP4 160.119.71.111\r\nt=0 0\r\nm=audio 10990 RTP/AVP 0 8 18 9 101 13 126 97\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=no\r\na=rtpmap:9 G722/8000\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=rtpmap:13 CN/8000\r\na=rtpmap:126 telephone-event/16000\r\na=fmtp:126 0-16\r\na=rtpmap:97 iLBC/8000\r\na=ptime:20\r\na=maxptime:150\r\na=sendrecv\r\n","payload_hex":"494e56495445207369703a40<HONEYPOT>3a353036303b7472616e73706f72743d544350205349502f322e300d0a5669613a205349502f322e302f544350203136302e3131392e37312e3131313a36343938383b6272616e63683d7a39684734624b2d3532343238372d312d2d2d316262316661336539623738363836333b72706f72740d0a4d61782d466f7277617264733a2037300d0a46726f6d3a203c7369703a313636313435303139333140<HONEYPOT>3e3b7461673d61653339626162630d0a546f3a203c7369703a40<HONEYPOT>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","method":"","user_agent":"","community_id":"1:Smo43Sgiq9RszYAEW+OoAXRdlJU=","ja3":"","session":"a88c9e0e-a7c2-4cb9-84d9-2de161ebdd42","seq":1,"duration_ms":100,"bytes_in":1068,"bytes_out":14,"enriched":{"digest":"7684d8af06be654a","label":"SIP","strings":["INVITE sip:@<HONEYPOT>:5060;transport=TCP SIP/2.0","Via: SIP/2.0/TCP 160.119.71.111:64988;branch=z9hG4bK-524287-1---1bb1fa3e9b786863…","Max-Forwards: 70","From: <sip:16614501931@<HONEYPOT>>;tag=ae39babc","To: <sip:@<HONEYPOT>:5060>","Call-ID: MAjHk31m62kTyx3cewXhOt..","CSeq: 1 INVITE","Contact: <sip:16614501931@160.119.71.111:64988;transport=TCP>","User-Agent: Yealink","Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO, UPDATE"],"iocs":{"ips":["160.119.71.111"],"paths":["/2.0/TCP"]}}},{"timestamp":"2026-07-11T13:39:47","port":5060,"proto":"tcp","app_proto":"","app_protocol":"sip","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"INVITE sip:@<HONEYPOT>:5060;transport=TCP SIP/2.0\r\nVia: SIP/2.0/TCP 160.119.71.111:47950;branch=z9hG4bK-524287-1---31e3caf66a7a3472;rport\r\nMax-Forwards: 70\r\nFrom: <sip:16613455031@<HONEYPOT>>;tag=0d087051\r\nTo: <sip:@<HONEYPOT>:5060>\r\nCall-ID: KSly4lTwkUBoqOw8ftgVXX..\r\nCSeq: 1 INVITE\r\nContact: <sip:16613455031@160.119.71.111:47950;transport=TCP>\r\nUser-Agent: Yealink SIP-T46S 66.84.0.15\r\nAllow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO, UPDATE\r\nSupported: replaces, timer, 100rel, norefersub\r\nSession-Expires: 1800;refresher=uac\r\nAllow-Events: presence, kpml, talk\r\nContent-Type: application/sdp\r\nContent-Length: 433\r\n\r\nv=0\r\no=- 3747 3747 IN IP4 160.119.71.111\r\ns=TUFAN Call\r\nc=IN IP4 160.119.71.111\r\nt=0 0\r\nm=audio 10990 RTP/AVP 0 8 18 9 101 13 126 97\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=no\r\na=rtpmap:9 G722/8000\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=rtpmap:13 CN/8000\r\na=rtpmap:126 telephone-event/16000\r\na=fmtp:126 0-16\r\na=rtpmap:97 iLBC/8000\r\na=ptime:20\r\na=maxptime:150\r\na=sendrecv\r\n","payload_hex":"494e56495445207369703a40<HONEYPOT>3a353036303b7472616e73706f72743d544350205349502f322e300d0a5669613a205349502f322e302f544350203136302e3131392e37312e3131313a34373935303b6272616e63683d7a39684734624b2d3532343238372d312d2d2d333165336361663636613761333437323b72706f72740d0a4d61782d466f7277617264733a2037300d0a46726f6d3a203c7369703a313636313334353530333140<HONEYPOT>3e3b7461673d30643038373035310d0a546f3a203c7369703a40<HONEYPOT>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","method":"","user_agent":"","community_id":"1:p209lwhpl/VcBpXqQZ3qyP78HFY=","ja3":"","session":"65c51be6-5e7c-4597-b311-ad0beaa0d07a","seq":1,"duration_ms":100,"bytes_in":1091,"bytes_out":14,"enriched":{"digest":"f2fc63d9028c56d6","label":"SIP","strings":["INVITE sip:@<HONEYPOT>:5060;transport=TCP SIP/2.0","Via: SIP/2.0/TCP 160.119.71.111:47950;branch=z9hG4bK-524287-1---31e3caf66a7a3472…","Max-Forwards: 70","From: <sip:16613455031@<HONEYPOT>>;tag=0d087051","To: <sip:@<HONEYPOT>:5060>","Call-ID: KSly4lTwkUBoqOw8ftgVXX..","CSeq: 1 INVITE","Contact: <sip:16613455031@160.119.71.111:47950;transport=TCP>","User-Agent: Yealink SIP-T46S 66.84.0.15","Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO, UPDATE"],"iocs":{"ips":["160.119.71.111","66.84.0.15"],"paths":["/2.0/TCP"]}}},{"timestamp":"2026-07-11T13:35:16","port":5060,"proto":"tcp","app_proto":"","app_protocol":"sip","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"INVITE sip:@<HONEYPOT>:5060;transport=TCP SIP/2.0\r\nVia: SIP/2.0/TCP 160.119.71.111:54104;branch=z9hG4bK-524287-1---1f1fc525c225bc22;rport\r\nMax-Forwards: 70\r\nFrom: <sip:16614501931@<HONEYPOT>>;tag=84e41807\r\nTo: <sip:@<HONEYPOT>:5060>\r\nCall-ID: kSVgehZN24Z54ZRAvVkt7B..\r\nCSeq: 1 INVITE\r\nContact: <sip:16614501931@160.119.71.111:54104;transport=TCP>\r\nUser-Agent: snom320/8.7.5.32\r\nAllow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO, UPDATE\r\nSupported: replaces, timer, 100rel, norefersub\r\nSession-Expires: 1800;refresher=uac\r\nAllow-Events: presence, kpml, talk\r\nContent-Type: application/sdp\r\nContent-Length: 433\r\n\r\nv=0\r\no=- 3747 3747 IN IP4 160.119.71.111\r\ns=TUFAN Call\r\nc=IN IP4 160.119.71.111\r\nt=0 0\r\nm=audio 10990 RTP/AVP 0 8 18 9 101 13 126 97\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=no\r\na=rtpmap:9 G722/8000\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=rtpmap:13 CN/8000\r\na=rtpmap:126 telephone-event/16000\r\na=fmtp:126 0-16\r\na=rtpmap:97 iLBC/8000\r\na=ptime:20\r\na=maxptime:150\r\na=sendrecv\r\n","payload_hex":"494e56495445207369703a40<HONEYPOT>3a353036303b7472616e73706f72743d544350205349502f322e300d0a5669613a205349502f322e302f544350203136302e3131392e37312e3131313a35343130343b6272616e63683d7a39684734624b2d3532343238372d312d2d2d316631666335323563323235626332323b72706f72740d0a4d61782d466f7277617264733a2037300d0a46726f6d3a203c7369703a313636313435303139333140<HONEYPOT>3e3b7461673d38346534313830370d0a546f3a203c7369703a40<HONEYPOT>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","method":"","user_agent":"","community_id":"1:kYPYDRfdYIK+P6867MY7RT8OSYs=","ja3":"","session":"b3284ece-8191-48a5-b945-df0903b47970","seq":1,"duration_ms":100,"bytes_in":1077,"bytes_out":14,"enriched":{"digest":"3f78b17e6f4a3441","label":"SIP","strings":["INVITE sip:@<HONEYPOT>:5060;transport=TCP SIP/2.0","Via: SIP/2.0/TCP 160.119.71.111:54104;branch=z9hG4bK-524287-1---1f1fc525c225bc22…","Max-Forwards: 70","From: <sip:16614501931@<HONEYPOT>>;tag=84e41807","To: <sip:@<HONEYPOT>:5060>","Call-ID: kSVgehZN24Z54ZRAvVkt7B..","CSeq: 1 INVITE","Contact: <sip:16614501931@160.119.71.111:54104;transport=TCP>","User-Agent: snom320/8.7.5.32","Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO, UPDATE"],"iocs":{"ips":["160.119.71.111","8.7.5.32"],"paths":["/2.0/TCP"]}}},{"timestamp":"2026-07-11T13:34:08","port":5060,"proto":"tcp","app_proto":"","app_protocol":"sip","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"INVITE sip:@<HONEYPOT>:5060;transport=TCP SIP/2.0\r\nVia: SIP/2.0/TCP 160.119.71.111:30908;branch=z9hG4bK-524287-1---f755e6787a115010;rport\r\nMax-Forwards: 70\r\nFrom: <sip:16613455031@<HONEYPOT>>;tag=434119e3\r\nTo: <sip:@<HONEYPOT>:5060>\r\nCall-ID: fmGvs3lA7yHZgsOnUjTUGy..\r\nCSeq: 1 INVITE\r\nContact: <sip:16613455031@160.119.71.111:30908;transport=TCP>\r\nUser-Agent: Asterisk PBX\r\nAllow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO, UPDATE\r\nSupported: replaces, timer, 100rel, norefersub\r\nSession-Expires: 1800;refresher=uac\r\nAllow-Events: presence, kpml, talk\r\nContent-Type: application/sdp\r\nContent-Length: 433\r\n\r\nv=0\r\no=- 3747 3747 IN IP4 160.119.71.111\r\ns=TUFAN Call\r\nc=IN IP4 160.119.71.111\r\nt=0 0\r\nm=audio 10990 RTP/AVP 0 8 18 9 101 13 126 97\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=no\r\na=rtpmap:9 G722/8000\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=rtpmap:13 CN/8000\r\na=rtpmap:126 telephone-event/16000\r\na=fmtp:126 0-16\r\na=rtpmap:97 iLBC/8000\r\na=ptime:20\r\na=maxptime:150\r\na=sendrecv\r\n","payload_hex":"494e56495445207369703a40<HONEYPOT>3a353036303b7472616e73706f72743d544350205349502f322e300d0a5669613a205349502f322e302f544350203136302e3131392e37312e3131313a33303930383b6272616e63683d7a39684734624b2d3532343238372d312d2d2d663735356536373837613131353031303b72706f72740d0a4d61782d466f7277617264733a2037300d0a46726f6d3a203c7369703a313636313334353530333140<HONEYPOT>3e3b7461673d34333431313965330d0a546f3a203c7369703a40<HONEYPOT>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","method":"","user_agent":"","community_id":"1:CKaG6i+xi8uCVMb+pE3PAK84FNc=","ja3":"","session":"18204c55-9db4-4553-aef9-332708314e28","seq":1,"duration_ms":100,"bytes_in":1076,"bytes_out":14,"enriched":{"digest":"a94ec0601a6e3a59","label":"SIP","strings":["INVITE sip:@<HONEYPOT>:5060;transport=TCP SIP/2.0","Via: SIP/2.0/TCP 160.119.71.111:30908;branch=z9hG4bK-524287-1---f755e6787a115010…","Max-Forwards: 70","From: <sip:16613455031@<HONEYPOT>>;tag=434119e3","To: <sip:@<HONEYPOT>:5060>","Call-ID: fmGvs3lA7yHZgsOnUjTUGy..","CSeq: 1 INVITE","Contact: <sip:16613455031@160.119.71.111:30908;transport=TCP>","User-Agent: Asterisk PBX","Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO, UPDATE"],"iocs":{"ips":["160.119.71.111"],"paths":["/2.0/TCP"]}}},{"timestamp":"2026-07-11T13:29:36","port":5060,"proto":"tcp","app_proto":"","app_protocol":"sip","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"INVITE sip:@<HONEYPOT>:5060;transport=TCP SIP/2.0\r\nVia: SIP/2.0/TCP 160.119.71.111:55842;branch=z9hG4bK-524287-1---1977ec0de43d4af2;rport\r\nMax-Forwards: 70\r\nFrom: <sip:16614501931@<HONEYPOT>>;tag=040989e3\r\nTo: <sip:@<HONEYPOT>:5060>\r\nCall-ID: JGf28PqdWoSvRaxTykfR7R..\r\nCSeq: 1 INVITE\r\nContact: <sip:16614501931@160.119.71.111:55842;transport=TCP>\r\nUser-Agent: Yealink SIP-T48G\r\nAllow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO, UPDATE\r\nSupported: replaces, timer, 100rel, norefersub\r\nSession-Expires: 1800;refresher=uac\r\nAllow-Events: presence, kpml, talk\r\nContent-Type: application/sdp\r\nContent-Length: 433\r\n\r\nv=0\r\no=- 3747 3747 IN IP4 160.119.71.111\r\ns=TUFAN Call\r\nc=IN IP4 160.119.71.111\r\nt=0 0\r\nm=audio 10990 RTP/AVP 0 8 18 9 101 13 126 97\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=no\r\na=rtpmap:9 G722/8000\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=rtpmap:13 CN/8000\r\na=rtpmap:126 telephone-event/16000\r\na=fmtp:126 0-16\r\na=rtpmap:97 iLBC/8000\r\na=ptime:20\r\na=maxptime:150\r\na=sendrecv\r\n","payload_hex":"494e56495445207369703a40<HONEYPOT>3a353036303b7472616e73706f72743d544350205349502f322e300d0a5669613a205349502f322e302f544350203136302e3131392e37312e3131313a35353834323b6272616e63683d7a39684734624b2d3532343238372d312d2d2d313937376563306465343364346166323b72706f72740d0a4d61782d466f7277617264733a2037300d0a46726f6d3a203c7369703a313636313435303139333140<HONEYPOT>3e3b7461673d30343039383965330d0a546f3a203c7369703a40<HONEYPOT>3a353036303e0d0a43616c6c2d49443a204a47663238507164576f537652617854796b665237522e2e0d0a435365713a203120494e564954450d0a436f6e746163743a203c7369703a3136363134353031393331403136302e3131392e37312e3131313a35353834323b7472616e73706f72743d5443503e0d0a557365722d4167656e743a205965616c696e6b205349502d543438470d0a416c6c6f773a20494e564954452c2041434b2c2043414e43454c2c204f5054494f4e532c204259452c2052454645522c205355425343524942452c204e4f544946592c20494e464f2c205550444154450d0a537570706f727465643a207265706c616365732c2074696d65722c2031303072656c2c206e6f72656665727375620d0a53657373696f6e2d457870697265733a20313830303b7265667265736865723d7561630d0a416c6c6f772d4576656e74733a2070726573656e63652c206b706d6c2c2074616c6b0d0a436f6e74656e742d547970653a206170706c69636174696f6e2f7364700d0a436f6e74656e742d4c656e6774683a203433330d0a0d0a763d300d0a6f3d2d2033373437203337343720494e20495034203136302e3131392e37312e3131310d0a733d545546414e2043616c6c0d0a633d494e20495034203136302e3131392e37312e3131310d0a743d3020300d0a6d3d617564696f203130393930205254502f41565020302038203138203920313031203133203132362039370d0a613d7274706d61703a302050434d552f383030300d0a613d7274706d61703a382050434d412f383030300d0a613d7274706d61703a313820473732392f383030300d0a613d666d74703a313820616e6e6578623d6e6f0d0a613d7274706d61703a3920473732322f383030300d0a613d7274706d61703a3130312074656c6570686f6e652d6576656e742f383030300d0a613d666d74703a31303120302d31360d0a613d7274706d61703a313320434e2f383030300d0a613d7274706d61703a3132362074656c6570686f6e652d6576656e742f31363030300d0a613d666d74703a31323620302d31360d0a613d7274706d61703a393720694c42432f383030300d0a613d7074696d653a32300d0a613d6d61787074696d653a3135300d0a613d73656e64726563760d0a","method":"","user_agent":"","community_id":"1:EQHttJVLLs7839841XcCQsmmU+8=","ja3":"","session":"91787b3e-28cc-42e8-bc5a-23cad62cfd8f","seq":1,"duration_ms":100,"bytes_in":1077,"bytes_out":14,"enriched":{"digest":"d77e442b3cd74157","label":"SIP","strings":["INVITE sip:@<HONEYPOT>:5060;transport=TCP SIP/2.0","Via: SIP/2.0/TCP 160.119.71.111:55842;branch=z9hG4bK-524287-1---1977ec0de43d4af2…","Max-Forwards: 70","From: <sip:16614501931@<HONEYPOT>>;tag=040989e3","To: <sip:@<HONEYPOT>:5060>","Call-ID: JGf28PqdWoSvRaxTykfR7R..","CSeq: 1 INVITE","Contact: <sip:16614501931@160.119.71.111:55842;transport=TCP>","User-Agent: Yealink SIP-T48G","Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO, UPDATE"],"iocs":{"ips":["160.119.71.111"],"paths":["/2.0/TCP"]}}},{"timestamp":"2026-07-11T13:28:29","port":5060,"proto":"tcp","app_proto":"","app_protocol":"sip","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"INVITE sip:@<HONEYPOT>:5060;transport=TCP SIP/2.0\r\nVia: SIP/2.0/TCP 160.119.71.111:54188;branch=z9hG4bK-524287-1---9f0f5126fcca63d0;rport\r\nMax-Forwards: 70\r\nFrom: <sip:16613455031@<HONEYPOT>>;tag=4aac3e89\r\nTo: <sip:@<HONEYPOT>:5060>\r\nCall-ID: eUFpjoKbb7FUXf7UWfprhP..\r\nCSeq: 1 INVITE\r\nContact: <sip:16613455031@160.119.71.111:54188;transport=TCP>\r\nUser-Agent: PolycomSoundPointIP-SPIP_320-UA/3.2.3.0428\r\nAllow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO, UPDATE\r\nSupported: replaces, timer, 100rel, norefersub\r\nSession-Expires: 1800;refresher=uac\r\nAllow-Events: presence, kpml, talk\r\nContent-Type: application/sdp\r\nContent-Length: 433\r\n\r\nv=0\r\no=- 3747 3747 IN IP4 160.119.71.111\r\ns=TUFAN Call\r\nc=IN IP4 160.119.71.111\r\nt=0 0\r\nm=audio 10990 RTP/AVP 0 8 18 9 101 13 126 97\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=no\r\na=rtpmap:9 G722/8000\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=rtpmap:13 CN/8000\r\na=rtpmap:126 telephone-event/16000\r\na=fmtp:126 0-16\r\na=rtpmap:97 iLBC/8000\r\na=ptime:20\r\na=maxptime:150\r\na=sendrecv\r\n","payload_hex":"494e56495445207369703a40<HONEYPOT>3a353036303b7472616e73706f72743d544350205349502f322e300d0a5669613a205349502f322e302f544350203136302e3131392e37312e3131313a35343138383b6272616e63683d7a39684734624b2d3532343238372d312d2d2d396630663531323666636361363364303b72706f72740d0a4d61782d466f7277617264733a2037300d0a46726f6d3a203c7369703a313636313334353530333140<HONEYPOT>3e3b7461673d34616163336538390d0a546f3a203c7369703a40<HONEYPOT>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","method":"","user_agent":"","community_id":"1:wBOPLsVkAdZJSh9zwjjF8PRLYN4=","ja3":"","session":"9eb05948-9534-4004-8a70-0a2e1cac7c33","seq":1,"duration_ms":100,"bytes_in":1106,"bytes_out":14,"enriched":{"digest":"4489b5318381e256","label":"SIP","strings":["INVITE sip:@<HONEYPOT>:5060;transport=TCP SIP/2.0","Via: SIP/2.0/TCP 160.119.71.111:54188;branch=z9hG4bK-524287-1---9f0f5126fcca63d0…","Max-Forwards: 70","From: <sip:16613455031@<HONEYPOT>>;tag=4aac3e89","To: <sip:@<HONEYPOT>:5060>","Call-ID: eUFpjoKbb7FUXf7UWfprhP..","CSeq: 1 INVITE","Contact: <sip:16613455031@160.119.71.111:54188;transport=TCP>","User-Agent: PolycomSoundPointIP-SPIP_320-UA/3.2.3.0428","Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO, UPDATE"],"iocs":{"ips":["160.119.71.111"],"paths":["/2.0/TCP"]}}},{"timestamp":"2026-07-11T13:23:58","port":5060,"proto":"tcp","app_proto":"","app_protocol":"sip","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"INVITE sip:@<HONEYPOT>:5060;transport=TCP SIP/2.0\r\nVia: SIP/2.0/TCP 160.119.71.111:47412;branch=z9hG4bK-524287-1---8c808dcfff75aafb;rport\r\nMax-Forwards: 70\r\nFrom: <sip:16614501931@<HONEYPOT>>;tag=0909a026\r\nTo: <sip:@<HONEYPOT>:5060>\r\nCall-ID: xRXWO6t6tknOEnGWdrk0I6..\r\nCSeq: 1 INVITE\r\nContact: <sip:16614501931@160.119.71.111:47412;transport=TCP>\r\nUser-Agent: snom320\r\nAllow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO, UPDATE\r\nSupported: replaces, timer, 100rel, norefersub\r\nSession-Expires: 1800;refresher=uac\r\nAllow-Events: presence, kpml, talk\r\nContent-Type: application/sdp\r\nContent-Length: 433\r\n\r\nv=0\r\no=- 3747 3747 IN IP4 160.119.71.111\r\ns=TUFAN Call\r\nc=IN IP4 160.119.71.111\r\nt=0 0\r\nm=audio 10990 RTP/AVP 0 8 18 9 101 13 126 97\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=no\r\na=rtpmap:9 G722/8000\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=rtpmap:13 CN/8000\r\na=rtpmap:126 telephone-event/16000\r\na=fmtp:126 0-16\r\na=rtpmap:97 iLBC/8000\r\na=ptime:20\r\na=maxptime:150\r\na=sendrecv\r\n","payload_hex":"494e56495445207369703a40<HONEYPOT>3a353036303b7472616e73706f72743d544350205349502f322e300d0a5669613a205349502f322e302f544350203136302e3131392e37312e3131313a34373431323b6272616e63683d7a39684734624b2d3532343238372d312d2d2d386338303864636666663735616166623b72706f72740d0a4d61782d466f7277617264733a2037300d0a46726f6d3a203c7369703a313636313435303139333140<HONEYPOT>3e3b7461673d30393039613032360d0a546f3a203c7369703a40<HONEYPOT>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","method":"","user_agent":"","community_id":"1:7mbjmGAqjAmc+jmczsCjL2A7Qts=","ja3":"","session":"c9d8c236-d244-415d-8e6b-3c54d3477287","seq":1,"duration_ms":100,"bytes_in":1068,"bytes_out":14,"enriched":{"digest":"8bdab5145a4d518f","label":"SIP","strings":["INVITE sip:@<HONEYPOT>:5060;transport=TCP SIP/2.0","Via: SIP/2.0/TCP 160.119.71.111:47412;branch=z9hG4bK-524287-1---8c808dcfff75aafb…","Max-Forwards: 70","From: <sip:16614501931@<HONEYPOT>>;tag=0909a026","To: <sip:@<HONEYPOT>:5060>","Call-ID: xRXWO6t6tknOEnGWdrk0I6..","CSeq: 1 INVITE","Contact: <sip:16614501931@160.119.71.111:47412;transport=TCP>","User-Agent: snom320","Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO, UPDATE"],"iocs":{"ips":["160.119.71.111"],"paths":["/2.0/TCP"]}}},{"timestamp":"2026-07-11T13:22:50","port":5060,"proto":"tcp","app_proto":"","app_protocol":"sip","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"INVITE sip:@<HONEYPOT>:5060;transport=TCP SIP/2.0\r\nVia: SIP/2.0/TCP 160.119.71.111:46496;branch=z9hG4bK-524287-1---539ad4d6ca2b996f;rport\r\nMax-Forwards: 70\r\nFrom: <sip:16613455031@<HONEYPOT>>;tag=f1eba43f\r\nTo: <sip:@<HONEYPOT>:5060>\r\nCall-ID: LuF1hJvxd2C3WS1xHoFwAU..\r\nCSeq: 1 INVITE\r\nContact: <sip:16613455031@160.119.71.111:46496;transport=TCP>\r\nUser-Agent: Telnyx\r\nAllow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO, UPDATE\r\nSupported: replaces, timer, 100rel, norefersub\r\nSession-Expires: 1800;refresher=uac\r\nAllow-Events: presence, kpml, talk\r\nContent-Type: application/sdp\r\nContent-Length: 433\r\n\r\nv=0\r\no=- 3747 3747 IN IP4 160.119.71.111\r\ns=TUFAN Call\r\nc=IN IP4 160.119.71.111\r\nt=0 0\r\nm=audio 10990 RTP/AVP 0 8 18 9 101 13 126 97\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=no\r\na=rtpmap:9 G722/8000\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=rtpmap:13 CN/8000\r\na=rtpmap:126 telephone-event/16000\r\na=fmtp:126 0-16\r\na=rtpmap:97 iLBC/8000\r\na=ptime:20\r\na=maxptime:150\r\na=sendrecv\r\n","payload_hex":"494e56495445207369703a40<HONEYPOT>3a353036303b7472616e73706f72743d544350205349502f322e300d0a5669613a205349502f322e302f544350203136302e3131392e37312e3131313a34363439363b6272616e63683d7a39684734624b2d3532343238372d312d2d2d353339616434643663613262393936663b72706f72740d0a4d61782d466f7277617264733a2037300d0a46726f6d3a203c7369703a313636313334353530333140<HONEYPOT>3e3b7461673d66316562613433660d0a546f3a203c7369703a40<HONEYPOT>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","method":"","user_agent":"","community_id":"1:4jtYQtTRKHhKjrYDLI8s9cHsWCI=","ja3":"","session":"1508787c-1065-4bb0-8c0d-746ee424ced7","seq":1,"duration_ms":100,"bytes_in":1070,"bytes_out":14,"enriched":{"digest":"4adf06367b68aaad","label":"SIP","strings":["INVITE sip:@<HONEYPOT>:5060;transport=TCP SIP/2.0","Via: SIP/2.0/TCP 160.119.71.111:46496;branch=z9hG4bK-524287-1---539ad4d6ca2b996f…","Max-Forwards: 70","From: <sip:16613455031@<HONEYPOT>>;tag=f1eba43f","To: <sip:@<HONEYPOT>:5060>","Call-ID: LuF1hJvxd2C3WS1xHoFwAU..","CSeq: 1 INVITE","Contact: <sip:16613455031@160.119.71.111:46496;transport=TCP>","User-Agent: Telnyx","Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO, UPDATE"],"iocs":{"ips":["160.119.71.111"],"paths":["/2.0/TCP"]}}},{"timestamp":"2026-07-11T13:18:20","port":5060,"proto":"tcp","app_proto":"","app_protocol":"sip","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"INVITE sip:@<HONEYPOT>:5060;transport=TCP SIP/2.0\r\nVia: SIP/2.0/TCP 160.119.71.111:1552;branch=z9hG4bK-524287-1---80a0de1bf47dec63;rport\r\nMax-Forwards: 70\r\nFrom: <sip:16614501931@<HONEYPOT>>;tag=29dd7621\r\nTo: <sip:@<HONEYPOT>:5060>\r\nCall-ID: CPLVBVXVFvpCGrxfnHBNwM..\r\nCSeq: 1 INVITE\r\nContact: <sip:16614501931@160.119.71.111:1552;transport=TCP>\r\nUser-Agent: sipsak 0.9.6\r\nAllow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO, UPDATE\r\nSupported: replaces, timer, 100rel, norefersub\r\nSession-Expires: 1800;refresher=uac\r\nAllow-Events: presence, kpml, talk\r\nContent-Type: application/sdp\r\nContent-Length: 433\r\n\r\nv=0\r\no=- 3747 3747 IN IP4 160.119.71.111\r\ns=TUFAN Call\r\nc=IN IP4 160.119.71.111\r\nt=0 0\r\nm=audio 10990 RTP/AVP 0 8 18 9 101 13 126 97\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=no\r\na=rtpmap:9 G722/8000\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=rtpmap:13 CN/8000\r\na=rtpmap:126 telephone-event/16000\r\na=fmtp:126 0-16\r\na=rtpmap:97 iLBC/8000\r\na=ptime:20\r\na=maxptime:150\r\na=sendrecv\r\n","payload_hex":"494e56495445207369703a40<HONEYPOT>3a353036303b7472616e73706f72743d544350205349502f322e300d0a5669613a205349502f322e302f544350203136302e3131392e37312e3131313a313535323b6272616e63683d7a39684734624b2d3532343238372d312d2d2d383061306465316266343764656336333b72706f72740d0a4d61782d466f7277617264733a2037300d0a46726f6d3a203c7369703a313636313435303139333140<HONEYPOT>3e3b7461673d32396464373632310d0a546f3a203c7369703a40<HONEYPOT>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","method":"","user_agent":"","community_id":"1:Aywq1uf/eDR6tYGDvxZQ0fK2/1s=","ja3":"","session":"f4c9987c-8a0f-46ec-8f33-4f251cd0b6a0","seq":1,"duration_ms":100,"bytes_in":1071,"bytes_out":14,"enriched":{"digest":"83e648a4dd26042d","label":"SIP","strings":["INVITE sip:@<HONEYPOT>:5060;transport=TCP SIP/2.0","Via: SIP/2.0/TCP 160.119.71.111:1552;branch=z9hG4bK-524287-1---80a0de1bf47dec63;…","Max-Forwards: 70","From: <sip:16614501931@<HONEYPOT>>;tag=29dd7621","To: <sip:@<HONEYPOT>:5060>","Call-ID: CPLVBVXVFvpCGrxfnHBNwM..","CSeq: 1 INVITE","Contact: <sip:16614501931@160.119.71.111:1552;transport=TCP>","User-Agent: sipsak 0.9.6","Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO, UPDATE"],"iocs":{"ips":["160.119.71.111"],"paths":["/2.0/TCP"]}}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-07-27T02:13:21.123697+00:00"}