Our system is PRI based, not sip. ---- Matthew Huff | One Manhattanville Rd OTA Management LLC | Purchase, NY 10577 http://www.ox.com | Phone: 914-460-4039 aim: matthewbhuff | Fax: 914-460-4139
-----Original Message----- From: wherrin@gmail.com [mailto:wherrin@gmail.com] On Behalf Of William Herrin Sent: Wednesday, October 06, 2010 11:15 AM To: Dan White Cc: Matthew Huff; (nanog@nanog.org) Subject: Re: Scam telemarketers spoofing our NOC phone number for callerid
On Wed, Oct 6, 2010 at 10:37 AM, Dan White <dwhite@olp.net> wrote:
If your PBX is SIP based, you might be victim of a SIP registration hijack, which are on the rise, based on traffic we've been seeing in our network.
I had my unpublished asterisk box up for all of two days before getting half a megabit per second worth of false SIP registration attempts. Filled /var/log. I had to write a script to dynamically filter source IPs with too many failures.
Regards, Bill Herrin
-- William D. Herrin ................ herrin@dirtside.com bill@herrin.us 3005 Crane Dr. ...................... Web: <http://bill.herrin.us/> Falls Church, VA 22042-3004