[VoiceOps] Wierd SIP attacks...

Jason Vanick jvanick at spruce.oaknet.com
Wed Aug 19 16:31:24 EDT 2009


Has anybody noticed any SIP attacks coming in from 217.23.0.125 or other IPs

the profile of the attack was basically a scan of every ip on several of my segments at port 5060
the packets were all fragmented into approx 8.7k worth of data.

unfortunately I don't have any sniffer captures of what they were trying to do.

anybody else seeing anything like this lately?

-J


More information about the VoiceOps mailing list