[130581] in North American Network Operators' Group
RE: Scam telemarketers spoofing our NOC phone number for callerid
daemon@ATHENA.MIT.EDU (Matthew Huff)
Wed Oct 6 11:20:12 2010
From: Matthew Huff <mhuff@ox.com>
To: 'William Herrin' <bill@herrin.us>, 'Dan White' <dwhite@olp.net>
Date: Wed, 6 Oct 2010 11:20:03 -0400
In-Reply-To: <AANLkTikD7in6K21J8uOiTB8xdAD5=ZhCnRkFtz3Arq=1@mail.gmail.com>
Cc: "'\(nanog@nanog.org\)'" <nanog@nanog.org>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
--_002_483E6B0272B0284BA86D7596C40D29F9E2C7B80772PUREXCH07oxco_
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Our system is PRI based, not sip.
----
Matthew Huff=A0=A0=A0=A0=A0=A0 | One Manhattanville Rd
OTA Management LLC | Purchase, NY 10577
http://www.ox.com | Phone: 914-460-4039
aim: matthewbhuff=A0 | Fax:=A0=A0 914-460-4139
> -----Original Message-----
> From: wherrin@gmail.com [mailto:wherrin@gmail.com] On Behalf Of William H=
errin
> Sent: Wednesday, October 06, 2010 11:15 AM
> To: Dan White
> Cc: Matthew Huff; (nanog@nanog.org)
> Subject: Re: Scam telemarketers spoofing our NOC phone number for calleri=
d
>=20
> On Wed, Oct 6, 2010 at 10:37 AM, Dan White <dwhite@olp.net> wrote:
> > If your PBX is SIP based, you might be victim of a SIP registration hij=
ack,
> > which are on the rise, based on traffic we've been seeing in our networ=
k.
>=20
> I had my unpublished asterisk box up for all of two days before
> getting half a megabit per second worth of false SIP registration
> attempts. Filled /var/log. I had to write a script to dynamically
> filter source IPs with too many failures.
>=20
> Regards,
> Bill Herrin
>=20
> --
> William D. Herrin ................ herrin@dirtside.com=A0 bill@herrin.us
> 3005 Crane Dr. ...................... Web: <http://bill.herrin.us/>
> Falls Church, VA 22042-3004
--_002_483E6B0272B0284BA86D7596C40D29F9E2C7B80772PUREXCH07oxco_
Content-Type: text/x-vcard; name="Matthew Huff.vcf"
Content-Description: Matthew Huff.vcf
Content-Disposition: attachment; filename="Matthew Huff.vcf"; size=1612;
creation-date="Wed, 06 Oct 2010 11:19:46 GMT";
modification-date="Wed, 06 Oct 2010 11:19:46 GMT"
Content-Transfer-Encoding: base64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--_002_483E6B0272B0284BA86D7596C40D29F9E2C7B80772PUREXCH07oxco_--
