[pjsip] Seeing alot of weird attack attempts

Nahum Nir hello.shalom.hi at gmail.com
Fri Oct 2 09:34:14 EDT 2015


I also have it. When I contacted the support of my hosting service they
said that "It is normal.... people/boots trying to find open VoIP servers
all the time".

On Thu, Oct 1, 2015 at 9:35 PM, Norman Franke <norman at myasd.com> wrote:

> Probably more a question for asterisk-users. However, any Asterisk box on
> the internet will be attached constantly. I’d recommend some sort of fail
> to ban script to cut down on the re-attempts.
>
> Norman Franke
> Answering Service for Directors, Inc.
> www.myasd.com
>
>
>
> On Oct 1, 2015, at 4:15 AM, Markus Kovanen <markus.kovanen at nettitieto.fi>
> wrote:
>
> Hi,
>
> Could anyone give me some specifics why i am seeing a lot of these kind of
> attack attemps on my asterisk log and what kind of attack this is? Should i
> be worried?
>
> -- end of packet.
> [2015-10-01 02:27:53] ERROR[2562] pjsip:     sip_transport. Error
> processing 429 bytes packet from UDP 146.0.73.14:57944 : PJSIP syntax
> error exception when parsing 'Co
> ntact' header on line 4 col 11:
> REGISTER sip:xxx.xxx.xxx.xxx:5060 SIP/2.0
> Via: SIP/2.0/UDP 146.0.73.14:57944
> ;branch=z9hG4bK610f49168c4f609be09b7cdba3060815eb0bb516e23d1a0d3165409d761b78
> Call-id: 206dbbcc476ab1413b663659b5e63d00
> Contact: *C*# <sip:*C*#@146.0.73.14:57944>
> Cseq: 1 REGISTER
> Expires: 1800
> From: *C*# <sip:*C*#@xxx.xxx.xxx.xxx:5060
> >;tag=52545f9b5db4f92d6eb52d4217d92bce
> Max-forwards: 70
> To: *C*# <sip:*C*#@xxx.xxx.xxx.xxx:5060>
> Content-length: 0
>
>
> -Markus Kovanen
>
> _______________________________________________
> Visit our blog: http://blog.pjsip.org
>
> pjsip mailing list
> pjsip at lists.pjsip.org
> http://lists.pjsip.org/mailman/listinfo/pjsip_lists.pjsip.org
>
>
>
> _______________________________________________
> Visit our blog: http://blog.pjsip.org
>
> pjsip mailing list
> pjsip at lists.pjsip.org
> http://lists.pjsip.org/mailman/listinfo/pjsip_lists.pjsip.org
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.pjsip.org/pipermail/pjsip_lists.pjsip.org/attachments/20151002/c067a0ed/attachment-0002.html>


More information about the pjsip mailing list