[130580] in North American Network Operators' Group
Re: Scam telemarketers spoofing our NOC phone number for callerid
daemon@ATHENA.MIT.EDU (William Herrin)
Wed Oct 6 11:15:58 2010
In-Reply-To: <20101006143735.GA3425@dan.olp.net>
From: William Herrin <bill@herrin.us>
Date: Wed, 6 Oct 2010 11:15:25 -0400
To: Dan White <dwhite@olp.net>
Cc: "\(nanog@nanog.org\)" <nanog@nanog.org>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
On Wed, Oct 6, 2010 at 10:37 AM, Dan White <dwhite@olp.net> wrote:
> If your PBX is SIP based, you might be victim of a SIP registration hijac=
k,
> which are on the rise, based on traffic we've been seeing in our network.
I had my unpublished asterisk box up for all of two days before
getting half a megabit per second worth of false SIP registration
attempts. Filled /var/log. I had to write a script to dynamically
filter source IPs with too many failures.
Regards,
Bill Herrin
--=20
William D. Herrin ................ herrin@dirtside.com=A0 bill@herrin.us
3005 Crane Dr. ...................... Web: <http://bill.herrin.us/>
Falls Church, VA 22042-3004
