{"ip":"160.119.71.129","total_events":529,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"residential ISP","why":["529 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."]},"first_seen":"2026-07-08T00:05:56","last_seen":"2026-07-11T13:43:16","events_24h":0,"events_7d":0,"geo":{"country_code":"SC","country_name":"Seychelles","region":"","city":"","lat":-4.5833,"lon":55.6667,"asn":49870,"org":"Alsycon B.V."},"source_domain":"160-119-71-129.ptr.as49870.net","known_scanners":[],"scanner_tag":{"key":"peeringdb:as49870","label":"Alsycon AS49870","category":"isp","url":"https://www.peeringdb.com/asn/49870"},"cve_matches":[],"malware":[],"top_ports":[{"port":5060,"proto":"tcp","label":"SIP","count":529}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-07-08","count":142},{"date":"2026-07-09","count":22},{"date":"2026-07-10","count":220},{"date":"2026-07-11","count":145}],"recent_events":[{"timestamp":"2026-07-11T13:43:16","port":5060,"proto":"tcp","app_proto":"","app_protocol":"sip","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"INVITE sip:@<HONEYPOT>:5060;transport=TCP SIP/2.0\r\nVia: SIP/2.0/TCP 160.119.71.129:22652;branch=z9hG4bK-524287-1---2033e7ad9b4d153a;rport\r\nMax-Forwards: 70\r\nFrom: <sip:16611721484@<HONEYPOT>>;tag=72f69ffd\r\nTo: <sip:@<HONEYPOT>:5060>\r\nCall-ID: voaK4eQAa1Qu21H88Xif6s..\r\nCSeq: 1 INVITE\r\nContact: <sip:16611721484@160.119.71.129:22652;transport=TCP>\r\nUser-Agent: Jitsi\r\nAllow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO, UPDATE\r\nSupported: replaces, timer, 100rel, norefersub\r\nSession-Expires: 1800;refresher=uac\r\nAllow-Events: presence, kpml, talk\r\nContent-Type: application/sdp\r\nContent-Length: 433\r\n\r\nv=0\r\no=- 3747 3747 IN IP4 160.119.71.129\r\ns=TUFAN Call\r\nc=IN IP4 160.119.71.129\r\nt=0 0\r\nm=audio 10990 RTP/AVP 0 8 18 9 101 13 126 97\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=no\r\na=rtpmap:9 G722/8000\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=rtpmap:13 CN/8000\r\na=rtpmap:126 telephone-event/16000\r\na=fmtp:126 0-16\r\na=rtpmap:97 iLBC/8000\r\na=ptime:20\r\na=maxptime:150\r\na=sendrecv\r\n","payload_hex":"494e56495445207369703a40<HONEYPOT>3a353036303b7472616e73706f72743d544350205349502f322e300d0a5669613a205349502f322e302f544350203136302e3131392e37312e3132393a32323635323b6272616e63683d7a39684734624b2d3532343238372d312d2d2d323033336537616439623464313533613b72706f72740d0a4d61782d466f7277617264733a2037300d0a46726f6d3a203c7369703a313636313137323134383440<HONEYPOT>3e3b7461673d37326636396666640d0a546f3a203c7369703a40<HONEYPOT>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","method":"","user_agent":"","community_id":"1:YI0+vsKCV1EXWjpLU74jt4j2lh8=","ja3":"","session":"d52613d3-5ca2-4937-a560-fc442dd2e58b","seq":1,"duration_ms":100,"bytes_in":1063,"bytes_out":14,"enriched":{"digest":"a6ff43b2e0058692","label":"SIP","strings":["INVITE sip:@<HONEYPOT>:5060;transport=TCP SIP/2.0","Via: SIP/2.0/TCP 160.119.71.129:22652;branch=z9hG4bK-524287-1---2033e7ad9b4d153a…","Max-Forwards: 70","From: <sip:16611721484@<HONEYPOT>>;tag=72f69ffd","To: <sip:@<HONEYPOT>:5060>","Call-ID: voaK4eQAa1Qu21H88Xif6s..","CSeq: 1 INVITE","Contact: <sip:16611721484@160.119.71.129:22652;transport=TCP>","User-Agent: Jitsi","Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO, UPDATE"],"iocs":{"ips":["160.119.71.129"],"paths":["/2.0/TCP"]}}},{"timestamp":"2026-07-11T13:37:56","port":5060,"proto":"tcp","app_proto":"","app_protocol":"sip","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"INVITE sip:@<HONEYPOT>:5060;transport=TCP SIP/2.0\r\nVia: SIP/2.0/TCP 160.119.71.129:7434;branch=z9hG4bK-524287-1---4cb6e2182fa08278;rport\r\nMax-Forwards: 70\r\nFrom: <sip:16611721484@<HONEYPOT>>;tag=d65c2bb0\r\nTo: <sip:@<HONEYPOT>:5060>\r\nCall-ID: zNWMMDCCsvnS3PKjaaEWWK..\r\nCSeq: 1 INVITE\r\nContact: <sip:16611721484@160.119.71.129:7434;transport=TCP>\r\nUser-Agent: PolycomVVX-VVX_601-UA/6.4.5.4527\r\nAllow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO, UPDATE\r\nSupported: replaces, timer, 100rel, norefersub\r\nSession-Expires: 1800;refresher=uac\r\nAllow-Events: presence, kpml, talk\r\nContent-Type: application/sdp\r\nContent-Length: 433\r\n\r\nv=0\r\no=- 3747 3747 IN IP4 160.119.71.129\r\ns=TUFAN Call\r\nc=IN IP4 160.119.71.129\r\nt=0 0\r\nm=audio 10990 RTP/AVP 0 8 18 9 101 13 126 97\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=no\r\na=rtpmap:9 G722/8000\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=rtpmap:13 CN/8000\r\na=rtpmap:126 telephone-event/16000\r\na=fmtp:126 0-16\r\na=rtpmap:97 iLBC/8000\r\na=ptime:20\r\na=maxptime:150\r\na=sendrecv\r\n","payload_hex":"494e56495445207369703a40<HONEYPOT>3a353036303b7472616e73706f72743d544350205349502f322e300d0a5669613a205349502f322e302f544350203136302e3131392e37312e3132393a373433343b6272616e63683d7a39684734624b2d3532343238372d312d2d2d346362366532313832666130383237383b72706f72740d0a4d61782d466f7277617264733a2037300d0a46726f6d3a203c7369703a313636313137323134383440<HONEYPOT>3e3b7461673d64363563326262300d0a546f3a203c7369703a40<HONEYPOT>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","method":"","user_agent":"","community_id":"1:7FUnyoAhAybRZfGGzvWDtDclMhc=","ja3":"","session":"56788dba-9825-46df-98c8-1c8b19ec88de","seq":1,"duration_ms":100,"bytes_in":1088,"bytes_out":14,"enriched":{"digest":"f4688fe550dec5ef","label":"SIP","strings":["INVITE sip:@<HONEYPOT>:5060;transport=TCP SIP/2.0","Via: SIP/2.0/TCP 160.119.71.129:7434;branch=z9hG4bK-524287-1---4cb6e2182fa08278;…","Max-Forwards: 70","From: <sip:16611721484@<HONEYPOT>>;tag=d65c2bb0","To: <sip:@<HONEYPOT>:5060>","Call-ID: zNWMMDCCsvnS3PKjaaEWWK..","CSeq: 1 INVITE","Contact: <sip:16611721484@160.119.71.129:7434;transport=TCP>","User-Agent: PolycomVVX-VVX_601-UA/6.4.5.4527","Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO, UPDATE"],"iocs":{"ips":["160.119.71.129"],"paths":["/2.0/TCP"]}}},{"timestamp":"2026-07-11T13:32:36","port":5060,"proto":"tcp","app_proto":"","app_protocol":"sip","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"INVITE sip:@<HONEYPOT>:5060;transport=TCP SIP/2.0\r\nVia: SIP/2.0/TCP 160.119.71.129:11880;branch=z9hG4bK-524287-1---07fcae0ac8617fde;rport\r\nMax-Forwards: 70\r\nFrom: <sip:16611721484@<HONEYPOT>>;tag=42edd8fe\r\nTo: <sip:@<HONEYPOT>:5060>\r\nCall-ID: sYoY1EsBGLvvf0FHnYWcxA..\r\nCSeq: 1 INVITE\r\nContact: <sip:16611721484@160.119.71.129:11880;transport=TCP>\r\nUser-Agent: Zoiper5/5.5.12\r\nAllow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO, UPDATE\r\nSupported: replaces, timer, 100rel, norefersub\r\nSession-Expires: 1800;refresher=uac\r\nAllow-Events: presence, kpml, talk\r\nContent-Type: application/sdp\r\nContent-Length: 433\r\n\r\nv=0\r\no=- 3747 3747 IN IP4 160.119.71.129\r\ns=TUFAN Call\r\nc=IN IP4 160.119.71.129\r\nt=0 0\r\nm=audio 10990 RTP/AVP 0 8 18 9 101 13 126 97\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=no\r\na=rtpmap:9 G722/8000\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=rtpmap:13 CN/8000\r\na=rtpmap:126 telephone-event/16000\r\na=fmtp:126 0-16\r\na=rtpmap:97 iLBC/8000\r\na=ptime:20\r\na=maxptime:150\r\na=sendrecv\r\n","payload_hex":"494e56495445207369703a40<HONEYPOT>3a353036303b7472616e73706f72743d544350205349502f322e300d0a5669613a205349502f322e302f544350203136302e3131392e37312e3132393a31313838303b6272616e63683d7a39684734624b2d3532343238372d312d2d2d303766636165306163383631376664653b72706f72740d0a4d61782d466f7277617264733a2037300d0a46726f6d3a203c7369703a313636313137323134383440<HONEYPOT>3e3b7461673d34326564643866650d0a546f3a203c7369703a40<HONEYPOT>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","method":"","user_agent":"","community_id":"1:/r21Mr9YXHbbktkEwsWGlXNTUUA=","ja3":"","session":"9387c09a-5031-4998-a593-285e3c624e22","seq":1,"duration_ms":100,"bytes_in":1072,"bytes_out":14,"enriched":{"digest":"3b12c12606129057","label":"SIP","strings":["INVITE sip:@<HONEYPOT>:5060;transport=TCP SIP/2.0","Via: SIP/2.0/TCP 160.119.71.129:11880;branch=z9hG4bK-524287-1---07fcae0ac8617fde…","Max-Forwards: 70","From: <sip:16611721484@<HONEYPOT>>;tag=42edd8fe","To: <sip:@<HONEYPOT>:5060>","Call-ID: sYoY1EsBGLvvf0FHnYWcxA..","CSeq: 1 INVITE","Contact: <sip:16611721484@160.119.71.129:11880;transport=TCP>","User-Agent: Zoiper5/5.5.12","Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO, UPDATE"],"iocs":{"ips":["160.119.71.129"],"paths":["/2.0/TCP"]}}},{"timestamp":"2026-07-11T13:27:16","port":5060,"proto":"tcp","app_proto":"","app_protocol":"sip","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"INVITE sip:@<HONEYPOT>:5060;transport=TCP SIP/2.0\r\nVia: SIP/2.0/TCP 160.119.71.129:32094;branch=z9hG4bK-524287-1---fb4348e5a85f9c8a;rport\r\nMax-Forwards: 70\r\nFrom: <sip:16611721484@<HONEYPOT>>;tag=2e7fdbee\r\nTo: <sip:@<HONEYPOT>:5060>\r\nCall-ID: Ic91byFat9jlGW8RfejXbT..\r\nCSeq: 1 INVITE\r\nContact: <sip:16611721484@160.119.71.129:32094;transport=TCP>\r\nUser-Agent: Kamailio (5.6.3 (x86_64/linux))\r\nAllow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO, UPDATE\r\nSupported: replaces, timer, 100rel, norefersub\r\nSession-Expires: 1800;refresher=uac\r\nAllow-Events: presence, kpml, talk\r\nContent-Type: application/sdp\r\nContent-Length: 433\r\n\r\nv=0\r\no=- 3747 3747 IN IP4 160.119.71.129\r\ns=TUFAN Call\r\nc=IN IP4 160.119.71.129\r\nt=0 0\r\nm=audio 10990 RTP/AVP 0 8 18 9 101 13 126 97\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=no\r\na=rtpmap:9 G722/8000\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=rtpmap:13 CN/8000\r\na=rtpmap:126 telephone-event/16000\r\na=fmtp:126 0-16\r\na=rtpmap:97 iLBC/8000\r\na=ptime:20\r\na=maxptime:150\r\na=sendrecv\r\n","payload_hex":"494e56495445207369703a40<HONEYPOT>3a353036303b7472616e73706f72743d544350205349502f322e300d0a5669613a205349502f322e302f544350203136302e3131392e37312e3132393a33323039343b6272616e63683d7a39684734624b2d3532343238372d312d2d2d666234333438653561383566396338613b72706f72740d0a4d61782d466f7277617264733a2037300d0a46726f6d3a203c7369703a313636313137323134383440<HONEYPOT>3e3b7461673d32653766646265650d0a546f3a203c7369703a40<HONEYPOT>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","method":"","user_agent":"","community_id":"1:M2zJhIQh9RoIhWhvK7PKolBQBWo=","ja3":"","session":"36044bc6-e3ec-4e42-92b9-8d1349712d2e","seq":1,"duration_ms":100,"bytes_in":1089,"bytes_out":14,"enriched":{"digest":"4b99440616b7c2f3","label":"SIP","strings":["INVITE sip:@<HONEYPOT>:5060;transport=TCP SIP/2.0","Via: SIP/2.0/TCP 160.119.71.129:32094;branch=z9hG4bK-524287-1---fb4348e5a85f9c8a…","Max-Forwards: 70","From: <sip:16611721484@<HONEYPOT>>;tag=2e7fdbee","To: <sip:@<HONEYPOT>:5060>","Call-ID: Ic91byFat9jlGW8RfejXbT..","CSeq: 1 INVITE","Contact: <sip:16611721484@160.119.71.129:32094;transport=TCP>","User-Agent: Kamailio (5.6.3 (x86_64/linux))","Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO, UPDATE"],"iocs":{"ips":["160.119.71.129"],"paths":["/2.0/TCP"]}}},{"timestamp":"2026-07-11T13:21:59","port":5060,"proto":"tcp","app_proto":"","app_protocol":"sip","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"INVITE sip:@<HONEYPOT>:5060;transport=TCP SIP/2.0\r\nVia: SIP/2.0/TCP 160.119.71.129:2714;branch=z9hG4bK-524287-1---48f094d0d10eb5c4;rport\r\nMax-Forwards: 70\r\nFrom: <sip:16611721484@<HONEYPOT>>;tag=88edcb6e\r\nTo: <sip:@<HONEYPOT>:5060>\r\nCall-ID: g4tZPPNexAQLTKGxyyYnom..\r\nCSeq: 1 INVITE\r\nContact: <sip:16611721484@160.119.71.129:2714;transport=TCP>\r\nUser-Agent: SIPp/3.6.2\r\nAllow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO, UPDATE\r\nSupported: replaces, timer, 100rel, norefersub\r\nSession-Expires: 1800;refresher=uac\r\nAllow-Events: presence, kpml, talk\r\nContent-Type: application/sdp\r\nContent-Length: 433\r\n\r\nv=0\r\no=- 3747 3747 IN IP4 160.119.71.129\r\ns=TUFAN Call\r\nc=IN IP4 160.119.71.129\r\nt=0 0\r\nm=audio 10990 RTP/AVP 0 8 18 9 101 13 126 97\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=no\r\na=rtpmap:9 G722/8000\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=rtpmap:13 CN/8000\r\na=rtpmap:126 telephone-event/16000\r\na=fmtp:126 0-16\r\na=rtpmap:97 iLBC/8000\r\na=ptime:20\r\na=maxptime:150\r\na=sendrecv\r\n","payload_hex":"494e56495445207369703a40<HONEYPOT>3a353036303b7472616e73706f72743d544350205349502f322e300d0a5669613a205349502f322e302f544350203136302e3131392e37312e3132393a323731343b6272616e63683d7a39684734624b2d3532343238372d312d2d2d343866303934643064313065623563343b72706f72740d0a4d61782d466f7277617264733a2037300d0a46726f6d3a203c7369703a313636313137323134383440<HONEYPOT>3e3b7461673d38386564636236650d0a546f3a203c7369703a40<HONEYPOT>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","method":"","user_agent":"","community_id":"1:QT8YbdYb/cfZK1g6j6fCsdjZ3W4=","ja3":"","session":"c45b9048-03df-4523-bd7e-3e968edf5262","seq":1,"duration_ms":100,"bytes_in":1066,"bytes_out":14,"enriched":{"digest":"0bdfb25a57669e2a","label":"SIP","strings":["INVITE sip:@<HONEYPOT>:5060;transport=TCP SIP/2.0","Via: SIP/2.0/TCP 160.119.71.129:2714;branch=z9hG4bK-524287-1---48f094d0d10eb5c4;…","Max-Forwards: 70","From: <sip:16611721484@<HONEYPOT>>;tag=88edcb6e","To: <sip:@<HONEYPOT>:5060>","Call-ID: g4tZPPNexAQLTKGxyyYnom..","CSeq: 1 INVITE","Contact: <sip:16611721484@160.119.71.129:2714;transport=TCP>","User-Agent: SIPp/3.6.2","Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO, UPDATE"],"iocs":{"ips":["160.119.71.129"],"paths":["/2.0/TCP"]}}},{"timestamp":"2026-07-11T13:11:23","port":5060,"proto":"tcp","app_proto":"","app_protocol":"sip","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"INVITE sip:@<HONEYPOT>:5060;transport=TCP SIP/2.0\r\nVia: SIP/2.0/TCP 160.119.71.129:56934;branch=z9hG4bK-524287-1---be61327eaa95d875;rport\r\nMax-Forwards: 70\r\nFrom: <sip:16611721484@<HONEYPOT>>;tag=d19d7517\r\nTo: <sip:@<HONEYPOT>:5060>\r\nCall-ID: LbC3SzYEldpWHX78pJe1up..\r\nCSeq: 1 INVITE\r\nContact: <sip:16611721484@160.119.71.129:56934;transport=TCP>\r\nUser-Agent: PolycomVVX-VVX_410-UA/5.9.3.13345\r\nAllow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO, UPDATE\r\nSupported: replaces, timer, 100rel, norefersub\r\nSession-Expires: 1800;refresher=uac\r\nAllow-Events: presence, kpml, talk\r\nContent-Type: application/sdp\r\nContent-Length: 433\r\n\r\nv=0\r\no=- 3747 3747 IN IP4 160.119.71.129\r\ns=TUFAN Call\r\nc=IN IP4 160.119.71.129\r\nt=0 0\r\nm=audio 10990 RTP/AVP 0 8 18 9 101 13 126 97\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=no\r\na=rtpmap:9 G722/8000\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=rtpmap:13 CN/8000\r\na=rtpmap:126 telephone-event/16000\r\na=fmtp:126 0-16\r\na=rtpmap:97 iLBC/8000\r\na=ptime:20\r\na=maxptime:150\r\na=sendrecv\r\n","payload_hex":"494e56495445207369703a40<HONEYPOT>3a353036303b7472616e73706f72743d544350205349502f322e300d0a5669613a205349502f322e302f544350203136302e3131392e37312e3132393a35363933343b6272616e63683d7a39684734624b2d3532343238372d312d2d2d626536313332376561613935643837353b72706f72740d0a4d61782d466f7277617264733a2037300d0a46726f6d3a203c7369703a313636313137323134383440<HONEYPOT>3e3b7461673d64313964373531370d0a546f3a203c7369703a40<HONEYPOT>3a353036303e0d0a43616c6c2d49443a204c624333537a59456c64705748583738704a653175702e2e0d0a435365713a203120494e564954450d0a436f6e746163743a203c7369703a3136363131373231343834403136302e3131392e37312e3132393a35363933343b7472616e73706f72743d5443503e0d0a557365722d4167656e743a20506f6c79636f6d5656582d5656585f3431302d55412f352e392e332e31333334350d0a416c6c6f773a20494e564954452c2041434b2c2043414e43454c2c204f5054494f4e532c204259452c2052454645522c205355425343524942452c204e4f544946592c20494e464f2c205550444154450d0a537570706f727465643a207265706c616365732c2074696d65722c2031303072656c2c206e6f72656665727375620d0a53657373696f6e2d457870697265733a20313830303b7265667265736865723d7561630d0a416c6c6f772d4576656e74733a2070726573656e63652c206b706d6c2c2074616c6b0d0a436f6e74656e742d547970653a206170706c69636174696f6e2f7364700d0a436f6e74656e742d4c656e6774683a203433330d0a0d0a763d300d0a6f3d2d2033373437203337343720494e20495034203136302e3131392e37312e3132390d0a733d545546414e2043616c6c0d0a633d494e20495034203136302e3131392e37312e3132390d0a743d3020300d0a6d3d617564696f203130393930205254502f41565020302038203138203920313031203133203132362039370d0a613d7274706d61703a302050434d552f383030300d0a613d7274706d61703a382050434d412f383030300d0a613d7274706d61703a313820473732392f383030300d0a613d666d74703a313820616e6e6578623d6e6f0d0a613d7274706d61703a3920473732322f383030300d0a613d7274706d61703a3130312074656c6570686f6e652d6576656e742f383030300d0a613d666d74703a31303120302d31360d0a613d7274706d61703a313320434e2f383030300d0a613d7274706d61703a3132362074656c6570686f6e652d6576656e742f31363030300d0a613d666d74703a31323620302d31360d0a613d7274706d61703a393720694c42432f383030300d0a613d7074696d653a32300d0a613d6d61787074696d653a3135300d0a613d73656e64726563760d0a","method":"","user_agent":"","community_id":"1:OEz36ZX/o8bWVDzIRwMiGW5Wrfw=","ja3":"","session":"957220ba-4935-4be8-9b50-677e6c4846a8","seq":1,"duration_ms":100,"bytes_in":1091,"bytes_out":14,"enriched":{"digest":"d68c37875c46faa6","label":"SIP","strings":["INVITE sip:@<HONEYPOT>:5060;transport=TCP SIP/2.0","Via: SIP/2.0/TCP 160.119.71.129:56934;branch=z9hG4bK-524287-1---be61327eaa95d875…","Max-Forwards: 70","From: <sip:16611721484@<HONEYPOT>>;tag=d19d7517","To: <sip:@<HONEYPOT>:5060>","Call-ID: LbC3SzYEldpWHX78pJe1up..","CSeq: 1 INVITE","Contact: <sip:16611721484@160.119.71.129:56934;transport=TCP>","User-Agent: PolycomVVX-VVX_410-UA/5.9.3.13345","Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO, UPDATE"],"iocs":{"ips":["160.119.71.129"],"paths":["/2.0/TCP"]}}},{"timestamp":"2026-07-11T13:00:44","port":5060,"proto":"tcp","app_proto":"","app_protocol":"sip","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"INVITE sip:@<HONEYPOT>:5060;transport=TCP SIP/2.0\r\nVia: SIP/2.0/TCP 160.119.71.129:25710;branch=z9hG4bK-524287-1---8e86457242bd5f01;rport\r\nMax-Forwards: 70\r\nFrom: <sip:16611721484@<HONEYPOT>>;tag=48c98164\r\nTo: <sip:@<HONEYPOT>:5060>\r\nCall-ID: nNWaDDBvF0TpSSD3G6zw7v..\r\nCSeq: 1 INVITE\r\nContact: <sip:16611721484@160.119.71.129:25710;transport=TCP>\r\nUser-Agent: Yealink SIP-T19P\r\nAllow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO, UPDATE\r\nSupported: replaces, timer, 100rel, norefersub\r\nSession-Expires: 1800;refresher=uac\r\nAllow-Events: presence, kpml, talk\r\nContent-Type: application/sdp\r\nContent-Length: 433\r\n\r\nv=0\r\no=- 3747 3747 IN IP4 160.119.71.129\r\ns=TUFAN Call\r\nc=IN IP4 160.119.71.129\r\nt=0 0\r\nm=audio 10990 RTP/AVP 0 8 18 9 101 13 126 97\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=no\r\na=rtpmap:9 G722/8000\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=rtpmap:13 CN/8000\r\na=rtpmap:126 telephone-event/16000\r\na=fmtp:126 0-16\r\na=rtpmap:97 iLBC/8000\r\na=ptime:20\r\na=maxptime:150\r\na=sendrecv\r\n","payload_hex":"494e56495445207369703a40<HONEYPOT>3a353036303b7472616e73706f72743d544350205349502f322e300d0a5669613a205349502f322e302f544350203136302e3131392e37312e3132393a32353731303b6272616e63683d7a39684734624b2d3532343238372d312d2d2d386538363435373234326264356630313b72706f72740d0a4d61782d466f7277617264733a2037300d0a46726f6d3a203c7369703a313636313137323134383440<HONEYPOT>3e3b7461673d34386339383136340d0a546f3a203c7369703a40<HONEYPOT>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","method":"","user_agent":"","community_id":"1:Sr3E2UTb4hJvT4oozGk4ecaIuro=","ja3":"","session":"80f1c7ca-e7fe-4369-8e85-cb4f5b3ea873","seq":1,"duration_ms":100,"bytes_in":1074,"bytes_out":14,"enriched":{"digest":"3b6181aac135b085","label":"SIP","strings":["INVITE sip:@<HONEYPOT>:5060;transport=TCP SIP/2.0","Via: SIP/2.0/TCP 160.119.71.129:25710;branch=z9hG4bK-524287-1---8e86457242bd5f01…","Max-Forwards: 70","From: <sip:16611721484@<HONEYPOT>>;tag=48c98164","To: <sip:@<HONEYPOT>:5060>","Call-ID: nNWaDDBvF0TpSSD3G6zw7v..","CSeq: 1 INVITE","Contact: <sip:16611721484@160.119.71.129:25710;transport=TCP>","User-Agent: Yealink SIP-T19P","Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO, UPDATE"],"iocs":{"ips":["160.119.71.129"],"paths":["/2.0/TCP"]}}},{"timestamp":"2026-07-11T12:55:24","port":5060,"proto":"tcp","app_proto":"","app_protocol":"sip","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"INVITE sip:@<HONEYPOT>:5060;transport=TCP SIP/2.0\r\nVia: SIP/2.0/TCP 160.119.71.129:1608;branch=z9hG4bK-524287-1---51afe61bf21848e8;rport\r\nMax-Forwards: 70\r\nFrom: <sip:16611721484@<HONEYPOT>>;tag=0880625c\r\nTo: <sip:@<HONEYPOT>:5060>\r\nCall-ID: UIhSSrpOhJXia13hsv4xT5..\r\nCSeq: 1 INVITE\r\nContact: <sip:16611721484@160.119.71.129:1608;transport=TCP>\r\nUser-Agent: OpenSIPS\r\nAllow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO, UPDATE\r\nSupported: replaces, timer, 100rel, norefersub\r\nSession-Expires: 1800;refresher=uac\r\nAllow-Events: presence, kpml, talk\r\nContent-Type: application/sdp\r\nContent-Length: 433\r\n\r\nv=0\r\no=- 3747 3747 IN IP4 160.119.71.129\r\ns=TUFAN Call\r\nc=IN IP4 160.119.71.129\r\nt=0 0\r\nm=audio 10990 RTP/AVP 0 8 18 9 101 13 126 97\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=no\r\na=rtpmap:9 G722/8000\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=rtpmap:13 CN/8000\r\na=rtpmap:126 telephone-event/16000\r\na=fmtp:126 0-16\r\na=rtpmap:97 iLBC/8000\r\na=ptime:20\r\na=maxptime:150\r\na=sendrecv\r\n","payload_hex":"494e56495445207369703a40<HONEYPOT>3a353036303b7472616e73706f72743d544350205349502f322e300d0a5669613a205349502f322e302f544350203136302e3131392e37312e3132393a313630383b6272616e63683d7a39684734624b2d3532343238372d312d2d2d353161666536316266323138343865383b72706f72740d0a4d61782d466f7277617264733a2037300d0a46726f6d3a203c7369703a313636313137323134383440<HONEYPOT>3e3b7461673d30383830363235630d0a546f3a203c7369703a40<HONEYPOT>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","method":"","user_agent":"","community_id":"1:T0Z3zn5jKDSzCwKn4PhGVaaGSOc=","ja3":"","session":"00813eb9-31c9-471d-b7e1-450bff7af9ce","seq":1,"duration_ms":101,"bytes_in":1064,"bytes_out":14,"enriched":{"digest":"98d1fd05f44bbf53","label":"SIP","strings":["INVITE sip:@<HONEYPOT>:5060;transport=TCP SIP/2.0","Via: SIP/2.0/TCP 160.119.71.129:1608;branch=z9hG4bK-524287-1---51afe61bf21848e8;…","Max-Forwards: 70","From: <sip:16611721484@<HONEYPOT>>;tag=0880625c","To: <sip:@<HONEYPOT>:5060>","Call-ID: UIhSSrpOhJXia13hsv4xT5..","CSeq: 1 INVITE","Contact: <sip:16611721484@160.119.71.129:1608;transport=TCP>","User-Agent: OpenSIPS","Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO, UPDATE"],"iocs":{"ips":["160.119.71.129"],"paths":["/2.0/TCP"]}}},{"timestamp":"2026-07-11T12:44:51","port":5060,"proto":"tcp","app_proto":"","app_protocol":"sip","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"INVITE sip:@<HONEYPOT>:5060;transport=TCP SIP/2.0\r\nVia: SIP/2.0/TCP 160.119.71.129:20330;branch=z9hG4bK-524287-1---08b1be2e89c8f54c;rport\r\nMax-Forwards: 70\r\nFrom: <sip:16611721484@<HONEYPOT>>;tag=83314274\r\nTo: <sip:@<HONEYPOT>:5060>\r\nCall-ID: ur00RxIyTDz9qJ57w9okWK..\r\nCSeq: 1 INVITE\r\nContact: <sip:16611721484@160.119.71.129:20330;transport=TCP>\r\nUser-Agent: Gigaset N510 IP PRO\r\nAllow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO, UPDATE\r\nSupported: replaces, timer, 100rel, norefersub\r\nSession-Expires: 1800;refresher=uac\r\nAllow-Events: presence, kpml, talk\r\nContent-Type: application/sdp\r\nContent-Length: 433\r\n\r\nv=0\r\no=- 3747 3747 IN IP4 160.119.71.129\r\ns=TUFAN Call\r\nc=IN IP4 160.119.71.129\r\nt=0 0\r\nm=audio 10990 RTP/AVP 0 8 18 9 101 13 126 97\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=no\r\na=rtpmap:9 G722/8000\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=rtpmap:13 CN/8000\r\na=rtpmap:126 telephone-event/16000\r\na=fmtp:126 0-16\r\na=rtpmap:97 iLBC/8000\r\na=ptime:20\r\na=maxptime:150\r\na=sendrecv\r\n","payload_hex":"494e56495445207369703a40<HONEYPOT>3a353036303b7472616e73706f72743d544350205349502f322e300d0a5669613a205349502f322e302f544350203136302e3131392e37312e3132393a32303333303b6272616e63683d7a39684734624b2d3532343238372d312d2d2d303862316265326538396338663534633b72706f72740d0a4d61782d466f7277617264733a2037300d0a46726f6d3a203c7369703a313636313137323134383440<HONEYPOT>3e3b7461673d38333331343237340d0a546f3a203c7369703a40<HONEYPOT>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","method":"","user_agent":"","community_id":"1:aJw01YLjZ7ouoMuQ+WEZXkfgcD8=","ja3":"","session":"5a97eece-5816-4e49-b634-da9811e687e0","seq":1,"duration_ms":100,"bytes_in":1077,"bytes_out":14,"enriched":{"digest":"d547bc3a302259a1","label":"SIP","strings":["INVITE sip:@<HONEYPOT>:5060;transport=TCP SIP/2.0","Via: SIP/2.0/TCP 160.119.71.129:20330;branch=z9hG4bK-524287-1---08b1be2e89c8f54c…","Max-Forwards: 70","From: <sip:16611721484@<HONEYPOT>>;tag=83314274","To: <sip:@<HONEYPOT>:5060>","Call-ID: ur00RxIyTDz9qJ57w9okWK..","CSeq: 1 INVITE","Contact: <sip:16611721484@160.119.71.129:20330;transport=TCP>","User-Agent: Gigaset N510 IP PRO","Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO, UPDATE"],"iocs":{"ips":["160.119.71.129"],"paths":["/2.0/TCP"]}}},{"timestamp":"2026-07-11T12:39:33","port":5060,"proto":"tcp","app_proto":"","app_protocol":"sip","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"INVITE sip:@<HONEYPOT>:5060;transport=TCP SIP/2.0\r\nVia: SIP/2.0/TCP 160.119.71.129:37844;branch=z9hG4bK-524287-1---acc881a959c326d5;rport\r\nMax-Forwards: 70\r\nFrom: <sip:16611721484@<HONEYPOT>>;tag=3064fdd7\r\nTo: <sip:@<HONEYPOT>:5060>\r\nCall-ID: d0QalJo3Dj2UiTs6C8IsOC..\r\nCSeq: 1 INVITE\r\nContact: <sip:16611721484@160.119.71.129:37844;transport=TCP>\r\nUser-Agent: Avaya one-X Deskphone\r\nAllow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO, UPDATE\r\nSupported: replaces, timer, 100rel, norefersub\r\nSession-Expires: 1800;refresher=uac\r\nAllow-Events: presence, kpml, talk\r\nContent-Type: application/sdp\r\nContent-Length: 433\r\n\r\nv=0\r\no=- 3747 3747 IN IP4 160.119.71.129\r\ns=TUFAN Call\r\nc=IN IP4 160.119.71.129\r\nt=0 0\r\nm=audio 10990 RTP/AVP 0 8 18 9 101 13 126 97\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=no\r\na=rtpmap:9 G722/8000\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=rtpmap:13 CN/8000\r\na=rtpmap:126 telephone-event/16000\r\na=fmtp:126 0-16\r\na=rtpmap:97 iLBC/8000\r\na=ptime:20\r\na=maxptime:150\r\na=sendrecv\r\n","payload_hex":"494e56495445207369703a40<HONEYPOT>3a353036303b7472616e73706f72743d544350205349502f322e300d0a5669613a205349502f322e302f544350203136302e3131392e37312e3132393a33373834343b6272616e63683d7a39684734624b2d3532343238372d312d2d2d616363383831613935396333323664353b72706f72740d0a4d61782d466f7277617264733a2037300d0a46726f6d3a203c7369703a313636313137323134383440<HONEYPOT>3e3b7461673d33303634666464370d0a546f3a203c7369703a40<HONEYPOT>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","method":"","user_agent":"","community_id":"1:kYToHtpbiEPApAoM+37M3E1f6oo=","ja3":"","session":"eea3703f-82e4-4340-aa1f-47248baee5d2","seq":1,"duration_ms":100,"bytes_in":1079,"bytes_out":14,"enriched":{"digest":"7c09604e5bfde84d","label":"SIP","strings":["INVITE sip:@<HONEYPOT>:5060;transport=TCP SIP/2.0","Via: SIP/2.0/TCP 160.119.71.129:37844;branch=z9hG4bK-524287-1---acc881a959c326d5…","Max-Forwards: 70","From: <sip:16611721484@<HONEYPOT>>;tag=3064fdd7","To: <sip:@<HONEYPOT>:5060>","Call-ID: d0QalJo3Dj2UiTs6C8IsOC..","CSeq: 1 INVITE","Contact: <sip:16611721484@160.119.71.129:37844;transport=TCP>","User-Agent: Avaya one-X Deskphone","Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO, UPDATE"],"iocs":{"ips":["160.119.71.129"],"paths":["/2.0/TCP"]}}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-07-26T00:24:58.983668+00:00"}