Scam telemarketers spoofing our NOC phone number for callerid

William Herrin bill at herrin.us
Wed Oct 6 15:15:25 UTC 2010


On Wed, Oct 6, 2010 at 10:37 AM, Dan White <dwhite at olp.net> wrote:
> If your PBX is SIP based, you might be victim of a SIP registration hijack,
> which are on the rise, based on traffic we've been seeing in our network.

I had my unpublished asterisk box up for all of two days before
getting half a megabit per second worth of false SIP registration
attempts. Filled /var/log. I had to write a script to dynamically
filter source IPs with too many failures.

Regards,
Bill Herrin

-- 
William D. Herrin ................ herrin at dirtside.com  bill at herrin.us
3005 Crane Dr. ...................... Web: <http://bill.herrin.us/>
Falls Church, VA 22042-3004




More information about the NANOG mailing list