[pjsip] Seeing alot of weird attack attempts

Norman Franke norman at myasd.com
Thu Oct 1 14:35:49 EDT 2015


Probably more a question for asterisk-users. However, any Asterisk box on the internet will be attached constantly. I’d recommend some sort of fail to ban script to cut down on the re-attempts.

Norman Franke
Answering Service for Directors, Inc.
www.myasd.com <http://www.myasd.com/>



> On Oct 1, 2015, at 4:15 AM, Markus Kovanen <markus.kovanen at nettitieto.fi> wrote:
> 
> Hi,
> 
> Could anyone give me some specifics why i am seeing a lot of these kind of attack attemps on my asterisk log and what kind of attack this is? Should i be worried?
> 
> -- end of packet.
> [2015-10-01 02:27:53] ERROR[2562] pjsip:     sip_transport. Error processing 429 bytes packet from UDP 146.0.73.14:57944 : PJSIP syntax error exception when parsing 'Co
> ntact' header on line 4 col 11:
> REGISTER sip:xxx.xxx.xxx.xxx:5060 SIP/2.0
> Via: SIP/2.0/UDP 146.0.73.14:57944;branch=z9hG4bK610f49168c4f609be09b7cdba3060815eb0bb516e23d1a0d3165409d761b78
> Call-id: 206dbbcc476ab1413b663659b5e63d00
> Contact: *C*# <sip:*C*#@146.0.73.14:57944>
> Cseq: 1 REGISTER
> Expires: 1800
> From: *C*# <sip:*C*#@xxx.xxx.xxx.xxx:5060>;tag=52545f9b5db4f92d6eb52d4217d92bce
> Max-forwards: 70
> To: *C*# <sip:*C*#@xxx.xxx.xxx.xxx:5060>
> Content-length: 0
> 
> 
> -Markus Kovanen
> 
> _______________________________________________
> Visit our blog: http://blog.pjsip.org
> 
> pjsip mailing list
> pjsip at lists.pjsip.org
> http://lists.pjsip.org/mailman/listinfo/pjsip_lists.pjsip.org

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.pjsip.org/pipermail/pjsip_lists.pjsip.org/attachments/20151001/78b64ce4/attachment-0002.html>


More information about the pjsip mailing list