Scam telemarketers spoofing our NOC phone number for callerid

William Herrin bill at
Wed Oct 6 10:15:25 CDT 2010

On Wed, Oct 6, 2010 at 10:37 AM, Dan White <dwhite at> wrote:
> If your PBX is SIP based, you might be victim of a SIP registration hijack,
> which are on the rise, based on traffic we've been seeing in our network.

I had my unpublished asterisk box up for all of two days before
getting half a megabit per second worth of false SIP registration
attempts. Filled /var/log. I had to write a script to dynamically
filter source IPs with too many failures.

Bill Herrin

William D. Herrin ................ herrin at  bill at
3005 Crane Dr. ...................... Web: <>
Falls Church, VA 22042-3004

More information about the NANOG mailing list