Time | 2023/05/27, 00:50:10 (GMT) |
Transaction ID | RB1SMRDA7X83VRNB |
Service | sip |
Location | US (United States) |
Attacker | 23.148.145.29 |
Classification | Invite |
Harm Potential | High |
- Received ------------------------------------------------------- INVITE sip:+33177686485@46.4.222.114 SIP/2.0 Via: SIP/2.0/TCP 23.148.145.29:9795;branch=z9hG4bK-524287-1---93599c00e4789c7d;rport Max-Forwards: 70 Contact: <sip:101@23.148.145.29:9795;ob;transport=tcp>;+sip.instance="<urn:uuid:6308E59A-A94B-7F2F-11F1-BBABC0C3C343>" To: <sip:+33177686485@46.4.222.114> From: "101"<sip:101@46.4.222.114>;tag=c8469201 Call-ID: TZQ9nVy_BH9bO1y4wpUYPw.. CSeq: 1 INVITE Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, NOTIFY, MESSAGE, REGISTER, SUBSCRIBE, INFO, PUBLISH Content-Type: application/sdp Supported: replaces, outbound, path User-Agent: PortSIP VoIP SDK 11.2 Allow-Events: hold, talk, conference Content-Length: 275 v=0 o=- 444720322 1 IN IP4 23.148.145.29 s=portsip.com c=IN IP4 23.148.145.29 t=0 0 m=audio 20004 RTP/AVP 0 8 18 101 a=rtpmap:0 PCMU/8000 a=rtpmap:8 PCMA/8000 a=rtpmap:18 G729/8000 a=fmtp:18 annexb=no a=rtpmap:101 telephone-event/8000 a=fmtp:101 0-16 a=sendrecv - Sended ------------------------------------------------------- SIP/2.0 400 Bad Request Via: SIP/2.0/TCP 23.148.145.29:9795;branch=z9hG4bK-524287-1---93599c00e4789c7d;received=23.148.145.29;rport=49805 Max-Forwards: 70 Contact: <sip:101@23.148.145.29:9795;ob;transport=tcp>;+sip.instance="<urn:uuid:6308E59A-A94B-7F2F-11F1-BBABC0C3C343>" To: <sip:+33177686485@46.4.222.114>;tag=msxdqovemu From: "101"<sip:101@46.4.222.114>;tag=c8469201 Call-ID: TZQ9nVy_BH9bO1y4wpUYPw.. CSeq: 1 INVITE Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, NOTIFY, MESSAGE, REGISTER, SUBSCRIBE, INFO, PUBLISH Content-Type: application/sdp Supported: replaces, outbound, path User-Agent: PortSIP VoIP SDK 11.2 Allow-Events: hold, talk, conference Content-Length: 0
All details are coming from honeypot central database.
Please share your wishes, opinions and suggestions with us: Honeypots.tk Admin |
If you like, you can support |