[App_rpt-users] Re : Bogus SIP registrations

[pete M]

China hacker or china gov tha try to connect to you.. thats where the ip is located..

--- Message initial ---

De : "KB0KZR" <kb0kzr at matthouse.com>
Envoyé : 23 juin 2013 16:03
A : app_rpt-users at ohnosec.org
Objet : [App_rpt-users] Bogus SIP registrations

All--

While diagnosing another problem (which I will post about in a little bit
if I can't get it figured out, but I wanted to keep separate threads
separate) -- suddenly somebody started sending me a ton of bogus SIP
registrations.  The source-IP is 210.73.202.76 for whatever that may be
worth.  I thought about firewalling it, but I don't think SIP is required
at all for app_rpt to work?  So I disabled chan_sip entirely in
modules.conf.

Just throwing it out there as something to consider for other app_rpt
nodes...  I don't know of any security flaws in chan_sip, but I figured
since it isn't being used there's no reason to run it.

-Matt-

_______________________________________________
App_rpt-users mailing list
App_rpt-users at ohnosec.org
http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users