[nsp-sec] voip hacking?

Stephen Gill gillsr at cymru.com
Fri Oct 7 15:09:46 EDT 2011


> Would it be worth an effort to concentrate all intel on SIP scanning/pw
> guessing activities
> to a datafeed? Cymru: could you consider a new feed on this area?

Absolutely!

It looks like we're reporting UDP 5060 already so the more the merrier.  Get
in touch with us if you would like to contribute SIP scanner data.  It is
presently filed under the 'scanners' report.

For 2011-10-07 alone we reported 730 entries over 171 unique Ips.

EG:

9931  | 122.154.239.29  | 2011-10-05 22:27:33 5060/udp | CAT-AP The
Communication Authoity of Thailand, CAT
...

The data matches up nicely with Yiming's original list and clusters of
activity around SIBIRTELECOM, FORTRESSITX, READYNET, etc.   See below for a
list of Ips seen in the past 24H, tagged by ASN.

I'll look into a few of these and see if we can get our hands on the
software/tools used as well as sussing out where they are being controlled
from.  

Also as an aside I'd love to know which of these server tags are considered
pseudo malicious besides 'friendly-scanner':

 Asterisk PBX
 VOS2009 V2.1.1.5
 Linksys/PAP2T-3.1.15(LS)
 SyncSwitch
 VOS3000 V2.1.2.4
 VOS3000 V2.1.2.0
 friendly-scanner
 Zadarma Voip
 iTelMobileDialer-1.4
 Nimbuzz Single
 IXC SS
 MERA MVTS3G v.4.3.0-44a
 Cisco/SPA504G-7.4.7
 Asterisk PBX 1.6.0.26-FONCORE-r78
 Linksys/PAP2-3.1.9(LSc)
 Linksys/PAP2T-3.1.15 (LS)
 gPlex/3.0
 UniBilling
 MERA MVTS3G v.4.3.0-44
 VoipSwitch 2.0.0.987
 nike
 VoipSwitch 2.985.0.119
 dble
 Linksys/PAP2T-5.1.6(LS)
 iTelMobileDialer-2.10
 Reve
 ZTE Softswitch/1.0.0
 Linksys/PAP2-3.1.22(LS)
 MediaCore/1.0.2
 VoxBridge
 Quintum/1.0.0 SN/0030E100B5B4 SW/P105-19-14
 GTalk2VoIP V8 by RZ and UGIN, Tyumen, Russia
 iTelMobileDialer-2.05
 BRSIP v3.0.2.2
 TRiM iS
 ZTE-SBC
 iTelMobileDialer-2.06
 SIP Server 5.29
 FPBX-2.5.2(1.4.21.2)
 VeriSwitch
 Linksys/PAP2-3.1.3(LS)
 iTelMobileDialer-2.07
 Quintum/1.0.0
 VOS2009 V2.1.2.0
 VoipSwitch 2.0
 SIPLink v2.1
 JOOD-VS SoftSwitch v1.9.57
 TELES.iGATE 15.1.6.57_thorsten 39019358127049
 AddPac SIP Gateway
 ProntoPlus 7.0.0
 Quintum/1.0.0 SN/0030E1011C99 SW/P108-09-00
 FPBX-2.8.1(1.4.37)
 VoipSwitch 2.0.0.954
 vocl-essentra-ex/8.1 (19070.64)
 VoipSwitch 2.0.0.965
 DigestPBX
 PolycomSoundPointIP-SPIP_301-UA/2.1.3.0028
 MERA MVTS3G v.4.3.0-34
 Quintum/1.0.0 SN/0030E130475B SW/P106-12-14
 E63-1 RM-437 500.21.009
 E66-1 RM-343 210.21.007
 Quintum/1.0.0 SN/0030E10127AB SW/P108-09-04
 E66-1 RM-343 500.21.009
 LOGICA
 TELES.iGATE 14.5b 923
 
 FPBX-2.9.0(1.8.5.0)
 MERA MVTS3G v.4.3.0-33a
 Sipura/SPA2100-2.0.5(c)
 MERA MVTS3G v.4.3.0-41a
 Linksys/PAP2T-5.1.3(LS)
 gigasip-ffm57
 gigasip-ffm60
 gigasip-ffm56
 gigasip-ffm55
 gPlex/2.0
 Asterisk PBX 1.8.4.2
 fring
 Asterisk PBX 1.6.2.7
 GplexUS (1.5.1-notls (i386/linux))
 iTelMobileDialer-2.02
 MERA MVTS3G v.3.10.2-59b-Release
 Quintum/1.0.0 SN/0030E1304759 SW/P106-12-14
 sipXecs/4.4.0 sipXecs/registry (Linux)
 HG4000/1.0
 COMPAQ
 E71-1 RM-346 500.21.009
 iTelMobileDialer-2.08
 E71-1 RM-346 510.21.009
 Quintum/1.0.0 SN/0030E1305F13 SW/P107-09-10
 PolycomSoundPointIP-SPIP_501-UA/3.1.3.0439
 MERA MVTS3G v.4.3.0-40
 Nokia RM-244 300.34.56
 MOR Softswitch
 key2voip softswitch v2.1.78
 FPBX-2.8.1(1.4.40)
 VoipSwitch 2.0.0.979
 Sipura/SPA2000-2.0.10(e)
 Linksys/PAP2-2.0.12(LS)
 VoIPMS/SERAST
 Cisco ATA 186  v3.2.0 atasip (041111A)
 MERA MVTS3G v.4.0.1-51
 Huawei SoftX3000 V300R010
 E63-1 RM-437 200.21.012
 E66-1 RM-343 410.21.010
 Quintum/1.0.0 SN/0030E1101ECC SW/P107-09-00
 Nokia RM-244 220.34.37
 Voip Phone 1.0
 SIPAUA/0.1.001
 FPBX-2.8.1(1.6.2.18.1)
 Nokia RM-244 400.34.011
 sundayddr
 Quintum/1.0.0 SN/0030E13046CF SW/P106-12-14
 Cisco ATA 186  v3.1.0 atasip (040211A)
 gigasip-ffm63
 gigasip-ffm51
 E71-1 RM-346 410.21.010
 Xip (embedded openSER)
 gigasip-ffm50
 Vox Callcontrol
 gigasip-ffm53
 Asterisk PBX 10.0.0-beta1
 iTelMobileDialer-2.1
 gigasip-ffm58
 Quintum/1.0.0 SN/0030E1012702 SW/P107-09-00
 Quintum/1.0.0 SN/0030E11047E6 SW/P107-09-00
 X-Lite release 1002tx stamp 29712
 VoIP4BIZ Sip Switch
 Nokia RM-244 200.34.36
 Quintum/1.0.0 SN/0030E1403162 SW/P106-12-14
 Cisco-SIPGateway/IOS-12.x
 Sipura/SPA2002-3.1.2(a)
 MERA MSIP v.1.0.2
 Yealink SIP-T26P 6.43.0.70
 E71-1 RM-346 400.21.013
 Grandstream HT287 1.1.0.45 DevId 000b822cdf07
 Grandstream HT386 1.0.2.2
 VoipSwitch 2.0.0.980
 Grandstream HT287 1.1.0.45 DevId 000b822a2fc6
 VoipSwitch
 Asterisk PBX 1.8.7.0
 Grandstream HT287 1.1.0.42 DevId 000b82306ffa
 LOGIC1
 eyeBeam release 3010n stamp 19039
 Linksys/PAP2-3.1.9 (LSc)
 E66-1 RM-343 510.21.009
 Quintum/1.0.0 SN/0030E140316D SW/P108-09-10
 E66-1 RM-343 400.21.013
 iTelPCDialer-2.0
 Quintum/1.0.0 SN/0030E10126B4 SW/P107-09-10
 VoipSwitch 2.0.0.983
 Quintum/1.0.0 SN/0030E1011717
 Asterisk PBX 1.8.3.2
 Grandstream HT386 1.0.2.9
 PolycomSoundPointIP-SPIP_300-UA/2.1.3.0028
 Quintum/1.0.0 SN/0030E130472B SW/P106-12-14
 E63-1 RM-437 510.21.010
 Bria 3 release 3.2.1 stamp 62387
 X-PRO release 1105x
 Quintum/1.0.0 SN/0030E1206635 SW/P108-09-10
 ENSR2.5.46.22-IS1-RMRG720-RG837-
 Asterisk PBX 1.6.2.13
 A580 IP/022270000000
 eyeBeam release 3007n stamp 17816
 E63-1 RM-437 501.21.001
 Quintum/1.0.0 SN/0030E11028F4
 VoipSwitch 2.985.0.68
 Yealink SIP-T28P 2.50.0.50
 Linksys/PAP2-3.1.12(LS)
 Grandstream GXP2000 1.2.1.4
 Grandstream GXV3140 1.0.7.3
 Linksys/SPA941-5.1.8
 OpenSIPS (1.6.3-notls (x86_64/linux))
 Quintum/1.0.0 SN/0030E1101ED0 SW/P107-09-00
 Bria iPhone 1.0.2
 Quintum/1.0.0 SN/0030E13046C5 SW/P106-12-14
 Quintum/1.0.0 SN/0030E1105050
 Sippy Softswitch v2.1.75
 Sipura/SPA2000-3.1.5
 Asterisk PBX 1.6.2.16.1
 E66-1 RM-343 200.21.118
 prelay (1.5.3-notls (x86_64/linux))
 Asterisk PBX 1.6.2.9
 Quintum/1.0.0 SN/0030E13046CB SW/P106-12-14
 Quintum/1.0.0 SN/0030E1205EB6 SW/P108-09-10
 Quintum/1.0.0 SN/0030E1205EAC
 Asterisk PBX (Switchvox)
 X-Lite release 1003l stamp 30942
 E63-1 RM-437 410.21.010
 VCS  5.8.2.50-08
 Asterisk PBX 1.6.0.17
 eyeBeam release 1013t stamp 43069
 VoipSwitch 2.0.0.969
 FPBX-2.8.1(1.4.21.1)
 Voiper PBX
 Asterisk
 E66-1 RM-343 102.07.81
 E66-1 RM-343 110.07.126
 E71-1 RM-346 300.21.012
 Linksys/PAP2-2.0.10(LSc)
 Nokia RM-208 3.0633.69.00
 Linksys/PAP2-3.1.8(LS)
 MizuPhone/2.1.0
 VaxSIPUserAgent/3.0
 Keyzone-Core-SIP-03
 FPBX-2.8.1(1.4.22)
 Grandstream GXP2000 1.0.1.9
 Grandstream HT287 1.1.0.42 DevId 000b822ad422
 Vox Bridge
 Aastra 6730i/2.5.1.2000
 VoIPforYourBusiness
 Grandstream HT287 1.1.0.42 DevId 000b822ad426
 A580 IP021920000000
 ifono
 PBX.Varna.Net
 Yealink SIP-T22P 7.50.0.50
 (Very nice Sip Registrar/Proxy Server)
 Keyzone-Core-SIP-04
 eyeBeam AudioOnly release 3014w stamp 26704
 Asterisk PBX 1.8.4.4
 sipsak 0.9.6
 wildixgw
 PBX-MATRIX
 Nokia RM-244 100.34.20
 FPBX-2.8.1(1.2.26)
 Cisco ATA 186 v3.1.0 atasip (040211A)
 Nokia RM-320 V 31.0.015
 OptiMobile DMS
 Telasip MGW
 Asterisk PBX 1.6.0.10-FONCORE-r40
 Quintum/1.0.0 SN/0030E14002E4 SW/P108-09-04
 Slican CCT
 Asterisk PBX (Fireworx)
 eyeBeam release 1009l stamp 37965
 Nokia RM-244 410.34.001
 Asterisk PBX (digium)
 MERA MVTS3G v.4.3.0-45
 Linksys/RT31P2-3.1.3(LI)
 Nokia RA-6 210.34.75
 E66-1 RM-343 300.21.012
 elophone
 snom320/7.1.39
 Linksys/RT31P2-3.1.9(LId)
 yealink sipt9
 Asterisk PBX 1.6.2.18
 Asterisk PBX 1.6.0.9-samy-r27
 BRSIP v3.0.1.3
 eyeBeam release 1003s stamp 31160
 Linksys/SPA2100-3.3.9
 Asterisk PBX 1.6.0.25
 Asterisk PBX 1.8.2-rc1
 Sippy
 Telepathy-SofiaSIP/0.6.2 sofia-sip/1.12.10devel
 NBSVoiCE
 DIDWW
 VOS2009 V2.1.2.6
 X-Lite release 1011s stamp 41150
 Sipura/SPA2100-3.2.5(d)
 Grandstream HT287 1.1.0.42 DevId 000b822a2fbe
 Vippie
 Linksys/PAP2T-5.1.6 (LS)
 Grandstream HT287 1.1.0.45 DevId 000b822acc0b
 Nokia RM-208 2.0633.65.01
 Grandstream HT287 1.1.0.42 DevId 000b822ad42a
 Sipata/ATA1000-2.2.20
 Linksys/PAP2-3.1.22 (LS)
 Grandstream HT287 1.1.0.45 DevId 000b822a2fce
 Grandstream HT287 1.1.0.45 DevId 000b822ace32
 Nokia RM-208 4.0633.74.00
 Quintum/1.0.0 SN/0030E1030E5C SW/P108-09-10
 TalkFree
 Vippie/4.4.4 (Android 2.3.4)
 iTelMobileDialer-2.0
 CallToNet/4.4.4 (Android 3.2.1)
 Grandstream HT287 1.1.0.42 DevId 000b822acc0a
 dBox
 CEM ATA
 NetLogic Switch v3.2.3
 IPKall
 XIVO PBX
 FPBX-2.7.0(1.4.42)
 PolycomSoundPointIP-SPIP_501-UA/1.6.3.0067
 Keyzone-Core-SIP-02
 X-Lite 4 release 4.1 stamp 63214
 Keyzone-Core-SIP-01
 VOB800-TA2S  (804280)
 Asterisk PBX 1.6.0.9
 edgeBOX
 snom320/7.1.30
 FreeSWITCH-mod_sofia/1.0.head-git-2b4f163 2011-02-06 01-40-13 -0500
 Mitel-3300-ICP 10.2.0.26_2
 Linksys/SPA8000-6.1.3
 Vippie/4.4.9 (Android 2.3.4)
 Telastic SBC
 eyeBeam release 3006o stamp 17551
 eyeBeam release 1102q stamp 51814
 E71-1 RM-346 200.21.118
 Nokia RM-208 1.0633.18.01
 Bria Professional release 2.4.3 stamp 50906
 Nokia RM-179 V 11.0.045
 Cisco-CP7940G/7.5
 E71-1 RM-346 110.07.127
 Acrobits SIPIS (http://www.acrobits.cz)
 eyeBeam release 1010f stamp 39239
 WRTP54G-3.1.27
 ENSR2.5.46.22-IS1-RMRG712-RG837-
 eyeBeam release 1100z stamp 47739
 Linksys/SPA2102-5.2.5
 S60 RM-596 024.001
 X-Lite release 1103m
 Sipura/SPA2002-3.1.5
 Linksys/PAP2T-5.1.1(LS)
 Linksys/SPA2102-3.3.6
 AVM FRITZ_Box Fon WLAN 7270 v2 (UI) 54.05.05 TAL (Jul  1 2011)
 OwnSwitch
 2N StarGate V-02.30.01
 Linksys/PAP2T-5.1.5(LS)
 Zoiper Communicator 2.05.11136 rev.11135
 eyeBeam release 1105z stamp 59030
 TELES.iSWITCH
 DIDWW B2BUA (v1.0)
 CallToNet/4.4.4 (Android 2.3.3)
 E63-1 RM-437 400.21.013
 UVMan
 3CXPhoneSystem 10.0.20085.0
 Nokia RM-320 V 35.0.001
 JOOD-VS SoftSwitch v2.1.76
 iTelMobileDialer-2.04
 Nokia RM-223 V 22.0.002
 Media5-fone/2.8.1.41
 sipXecs/4.4.0 sipXecs/rls (Linux)
 AscentSIP
 E71-1 RM-346 401.21.002
 DrayTek UA-1.2.2 Vigor2700 series
 CM5K  (711090)
 Nokia RM-313 V 35.0.002
 Nokia RM-179 V 21.0.010
 TELES.MGC
 Nokia RM-89 3.0633.09.04
 Vippie Video Client
 Nokia RA-6 300.34.84
 FreeSWITCH-mod_sofia/1.0.head-git-
 CallToNet/4.4.4 (Android 2.1-update1)
 E71-1 RM-346 501.21.001
 Nokia RM-159 V 21.0.016
 Configured by 2600hz_
 Brekeke SIP Server rev.286 Evaluation
 Net2Phone Carrier
 Pinnacle
 sipXecs/4.4.0 sipXecs/sipxbridge (Linux)
 Acrobits Softphone/4.9.1
 PJSIP/2.0.0-alpha-svn (win32) MicroSIP/1.7.0
 Quintum/1.0.0 SN/0030E1100710 SW/P107-09-00
 Nokia RM-92 V 5.0719.0.2
 eyeBeam release 1102u stamp 52344
 FPBX-2.9.0(1.8.6.0)
 PJSIP/2.0.0-alpha (win32) MicroSIP/1.8.0
 Speedport W 503V 66.04.78 (Sep  3 2009)
 Acrobits Softphone Business/1.8.8
 NCH Software Express Talk 4.20
 Linksys/SPA2102-5.1.12
 Nokia RM-313 V 31.0.016
 VOS3000 V2.1.2.6
 WEBA.tel/4.4.4 (Android 2.3.5)
 E63-1 RM-437 100.21.110
 CallToNet-UC/4.2.2 (Android 2.1-update1)
 Bria release 2.2 stamp 45414
 XCast Carrier/1.0
 eyeBeam release 1105z stamp 59031
 Linksys/SPA2002-3.1.20(o)
 BlackberryVoipDialer
 Grandstream GXV3175 1.0.3.22
 Asterisk PBX 1.6.2.14
 OpenSIPS (1.6.4-2-notls (x86_64/linux))
 Asterisk PBX 1.6.2.17.2
 OpenSIPS
 Nokia RM-313 V 10.0.046
 Linksys/SPA942-5.1.15(a)
 sipXecs/4.4.0 sipXecs/publisher (Linux)
 voip
 Sipdroid/2.3 beta/DROIDX
 CSipSimple r944 / GT-I9100-10
 eyeBeam release 1003s stamp 31159
 12Connect Open SIP v3.0
 CS2000_NGSS/9.0
 Grandstream HT488 1.0.3.99 FXS
 Nokia RM-320 V 20.0.016
 snom870/8.4.32
 Linksys/SPA942-6.1.5(a)
 AdoreSoftphone
 E71-1 RM-346 210.21.006
 hstelsip/V5.0AT1-29-hs
 E66-1 RM-343 401.21.002
 PolycomSoundPointIP-SPIP_550-UA/3.2.3.1734
 Nokia RM-159 V 30.0.015
 PortSIP softphone 2.0
 Embeded-IP-PBX B071218
 Nokia RM-159 V 20.0.015
 Asterisk PBX 1.6.2.10
 Nokia RM-159 V 31.0.017
 Vippie Voice Client
 iTelPCDialer-2.10
 Bria iPhone 1.2.10
 Asterisk PBX 1.6.2.20
 Nokia RM-159 V 12.0.013
 Nokia RM-313 V 20.0.062
 Mtel_SBC_US
 Grandstream HT-502  V1.2A 1.0.1.57
 OpenSIPS (1.4.2-notls (i386/linux))
 E71-1 RM-346 102.07.81
 Pinger Softphone
 sip8
 Asterisk PBX 1.6.1.12
 Pangolin v5.3, Build 11292009
 DiDXsuPErTecSIP5
 RebTel B2Bua
 Vippie/4.4.9 (Android 2.2.1)
 ISPT-b2bua
 TSS4000
 Linksys/SPA3102-3.3.6(GW)
 IronSoftSwitch 1.0
 snomSoft/5.3
 RTC/1.3.5369
 Linksys/SPA3102-5.1.10(GW)
 WWComVoice
 2N StarGate V-02.30.05i30
 InnoMedia SIP MTA6328-2Re v3.0.77
 Vippie/4.4.4 (Android 2.2.1)
 RTC/1.2.4949
 Nokia RM-426 201.34.38
 FPBX-2.9.0(1.6.2.11)
 MERA MVTS3G v.3.10.4-11d-Release
 FreeSWITCH-mod_sofia/1.0.head-git-e88b963 2011-01-31 22-08-37 -0600
 sipXecs/4.4.0 sipXecs/reg-event (Linux)
 Nokia RM-223 V 11.0.045
 MERA MVTS3G v.4.2.0-30a
 MERA MVTS3G v.3.10.2-53-Release
 Mtel_SBC1
 Linksys/SPA2102-3.3.5(a)
 ENSR2.5.46.22-IS1-RMRG726-RG834-CPO4159
 PortGo v6.8, Build 09032011
 RTC/1.3
 Vippie/4.4.9 (Android 2.2.2)
 InnoMedia SIP MTA6328-2Re v3.0.75
 Acrobits Softphone/4.4
 Linksys/SPA2102-5.2.10
 Jitsi1.0-beta1-nightly.build.3689Mac OS X
 Vphone iOS 1.7
 vos3000
 voxvalley/1.1.0
 Linksys/PAP2-3.1.3/(LS)
 sipXacd (4.4.0) (Linux)
 Kamailio (1.4.3-notls (x86_64/linux))
 OpenSER (1.2.0-notls (i386/linux))
 RTP300-3.1.22

Ips in past 24H doing scanning:

3758 116.12.218.205 ERX-SINGNET
4134 115.168.71.84 CHINANET-BACKBONE
4134 117.41.190.226 CHINANET-BACKBONE
4134 125.88.123.9 CHINANET-BACKBONE
4134 125.95.18.146 CHINANET-BACKBONE
4134 202.103.52.143 CHINANET-BACKBONE
4134 202.103.52.147 CHINANET-BACKBONE
4134 218.87.16.135 CHINANET-BACKBONE
4134 220.178.16.98 CHINANET-BACKBONE
4134 220.178.16.99 CHINANET-BACKBONE
4134 222.241.151.149 CHINANET-BACKBONE
4134 61.189.184.76 CHINANET-BACKBONE
4134 61.191.41.53 CHINANET-BACKBONE
4134 61.191.41.6 CHINANET-BACKBONE
4134 61.191.41.7 CHINANET-BACKBONE
4230 201.65.24.234 Embratel
4765 61.47.10.251 WORLDNET-AS
4766 220.76.117.139 KIXS-AS-KR
4808 114.247.18.4 CHINA169-BJ
4812 222.73.176.123 CHINANET-SH-AP
4837 119.188.7.143 CHINA169-BACKBONE
4837 221.192.141.77 CHINA169-BACKBONE
4837 60.208.77.210 CHINA169-BACKBONE
6461 66.235.209.73 MFNX
6661 178.254.77.115 EPT-LU
6661 83.99.90.196 EPT-LU
6661 87.240.195.68 EPT-LU
6661 87.240.211.54 EPT-LU
6661 87.240.215.126 EPT-LU
6661 88.207.245.82 EPT-LU
7595 117.120.2.105 READYNET-AS-AP
7595 117.120.2.110 READYNET-AS-AP
7595 117.120.2.16 READYNET-AS-AP
7595 117.120.2.79 READYNET-AS-AP
7595 117.120.2.80 READYNET-AS-AP
7595 117.120.2.82 READYNET-AS-AP
7595 117.120.5.11 READYNET-AS-AP
7595 117.120.5.12 READYNET-AS-AP
7595 117.120.5.152 READYNET-AS-AP
7595 117.120.5.20 READYNET-AS-AP
7595 117.120.5.215 READYNET-AS-AP
7595 117.120.5.21 READYNET-AS-AP
7595 117.120.5.233 READYNET-AS-AP
7595 117.120.5.235 READYNET-AS-AP
7595 117.120.5.236 READYNET-AS-AP
7595 117.120.5.239 READYNET-AS-AP
7595 117.120.5.23 READYNET-AS-AP
7595 117.120.6.102 READYNET-AS-AP
7595 117.120.6.104 READYNET-AS-AP
7796 64.27.0.26 ATMLINK
7796 64.69.36.120 ATMLINK
8455 193.47.79.52 ATOM86-AS
8551 62.219.6.134 BEZEQ-INTERNATIONAL-AS
8560 74.208.125.60 ONEANDONE-AS
8560 82.165.196.230 ONEANDONE-AS
8560 87.106.240.156 ONEANDONE-AS
8972 188.138.16.203 PLUSSERVER-AS
8972 188.138.48.72 PLUSSERVER-AS
8972 80.86.91.58 PLUSSERVER-AS
8972 85.25.146.72 PLUSSERVER-AS
9318 211.44.132.26 HANARO-AS
9597 115.146.17.231 CPI-NET
9808 221.176.3.163 CMNET-GD
9931 122.154.239.29 CAT-AP
10316 206.225.83.77 CODERO-AS
12695 95.163.64.44 DINET-AS
12846 90.188.1.24 OJSC
12975 188.161.176.25 PALTEL-AS
13237 80.86.174.240 LAMBDANET-AS
13237 80.86.174.4 LAMBDANET-AS
13354 108.60.212.80 ASN-EBLGLOBAL
14720 66.152.77.22 GAMMANETWORKING-EAST
15598 62.146.72.141 IP-EXCHANGE
15759 217.18.139.251 DIN-AS
16265 85.17.141.86 LEASEWEB
16265 85.17.189.161 LEASEWEB
16265 85.17.189.7 LEASEWEB
16265 85.17.222.150 LEASEWEB
16265 85.17.92.151 LEASEWEB
16265 85.17.92.157 LEASEWEB
16276 91.121.1.87 OVH
16276 94.23.212.141 OVH
16287 217.116.128.31 KUZBASSNET
16805 64.38.44.130 LAYER3-ASN-2
17428 120.132.134.249 CHINA-ABITCOOL
17633 219.146.8.78 CHINATELECOM-SD-AS-AP
19994 184.106.251.130 RACKSPACE
19994 50.57.141.65 RACKSPACE
19994 50.57.142.101 RACKSPACE
19994 50.57.142.4 RACKSPACE
19994 50.57.144.112 RACKSPACE
20007 204.27.53.171 AS-ALOGI
20495 217.18.77.197 WEDARE
20773 83.169.35.14 HOSTEUROPE-AS
20860 109.169.37.175 IOMART-AS
20860 109.169.77.163 IOMART-AS
20860 78.129.252.211 IOMART-AS
20959 81.112.127.196 TELECOM-ITALIA-DATA-COM
21844 74.55.119.50 THEPLANET-AS
21844 75.125.211.10 THEPLANET-AS
21844 75.125.78.138 THEPLANET-AS
21889 209.241.232.100 RAPIDSYSTEMS
23201 190.128.229.122 Telecel
23304 208.75.87.83 DATOTEL-STL-AS
25653 208.116.16.150 FORTRESSITX
25653 208.116.44.16 FORTRESSITX
25653 208.116.46.238 FORTRESSITX
25653 208.116.46.62 FORTRESSITX
25653 208.116.60.140 FORTRESSITX
25653 208.116.60.60 FORTRESSITX
25847 207.58.161.45 SERVINT
26228 74.3.202.178 SERVEPATH
26241 69.4.79.11 3ZNET-CVG001
26241 69.4.79.5 3ZNET-CVG001
26496 72.167.201.179 PAH-INC
27257 67.55.110.36 WEBAIR-INTERNET
27501 64.72.101.132 LASVEGASNET-AS
27968 200.125.255.8 CORPORACION
29278 87.229.45.28 DENINET-HU-AS
29550 213.229.125.121 SIMPLYTRANSIT
30983 196.200.172.11 MARWAN-AS
31846 204.13.1.28 DIGIPORT
32244 67.225.154.36 LIQUID-WEB-INC
32244 67.227.196.226 LIQUID-WEB-INC
32475 96.127.179.50 SINGLEHOP-INC
32613 72.55.156.56 IWEB-AS
33182 67.23.245.12 DIMENOC---HOSTDIME
36351 50.22.55.171 SOFTLAYER
36351 67.228.169.154 SOFTLAYER
37204 41.220.16.233 TELONE
41440 87.103.236.20 SIBIRTELECOM-AS
41440 90.189.192.101 SIBIRTELECOM-AS
41440 90.189.192.102 SIBIRTELECOM-AS
41440 90.189.192.104 SIBIRTELECOM-AS
41440 90.189.192.108 SIBIRTELECOM-AS
41440 90.189.192.124 SIBIRTELECOM-AS
41440 90.189.192.179 SIBIRTELECOM-AS
41440 90.189.192.181 SIBIRTELECOM-AS
41440 90.189.192.183 SIBIRTELECOM-AS
41440 90.189.192.185 SIBIRTELECOM-AS
41440 90.189.192.202 SIBIRTELECOM-AS
41440 90.189.192.204 SIBIRTELECOM-AS
41440 90.189.192.225 SIBIRTELECOM-AS
41440 90.189.192.229 SIBIRTELECOM-AS
41440 90.189.192.232 SIBIRTELECOM-AS
41440 90.189.192.238 SIBIRTELECOM-AS
41440 90.189.192.249 SIBIRTELECOM-AS
41440 90.189.192.251 SIBIRTELECOM-AS
41440 90.189.192.253 SIBIRTELECOM-AS
41440 90.189.192.74 SIBIRTELECOM-AS
44911 92.61.102.158 BUSINESS-TELECOM
45899 113.160.45.74 VNPT-AS-VN
46475 208.115.207.144 LIMESTONENETWORKS
46475 208.115.207.178 LIMESTONENETWORKS
46475 208.115.207.243 LIMESTONENETWORKS
46475 208.115.236.172 LIMESTONENETWORKS
46475 208.115.236.193 LIMESTONENETWORKS
46475 208.115.237.5 LIMESTONENETWORKS
46475 64.31.25.229 LIMESTONENETWORKS
46475 64.31.39.229 LIMESTONENETWORKS
46475 74.63.209.24 LIMESTONENETWORKS
46475 74.63.209.252 LIMESTONENETWORKS
46475 74.63.209.97 LIMESTONENETWORKS
46475 74.63.229.104 LIMESTONENETWORKS
46562 69.163.45.122 COLO-AT-55-LLC
46816 174.140.167.214 DSNETWORKS-001
46816 69.163.40.194 DSNETWORKS-001
46844 204.188.197.10 ST-BGP
46844 204.188.221.154 ST-BGP
48691 194.28.112.36 SPECIALIST-AS
49505 188.93.17.123 SELECTEL

-- steve

-- 
Stephen Gill, Chief Scientist, Team Cymru
http://www.team-cymru.org | +1 (847) 378-3323  | gillsr at cymru.com

We just launched our new Training Practice, see
http://www.team-cymru.com/Services/Training/





More information about the nsp-security mailing list