Threat Level: green Handler on Duty: Didier Stevens

SANS ISC: InfoSec Handlers Diary Blog - SANS Internet Storm Center InfoSec Handlers Diary Blog

Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

SIP Attacks on internet connected port5060 targeting Asterix servers

Published: 2010-04-15
Last Updated: 2010-04-16 00:04:12 UTC
by Mark Hofman (Version: 1)
1 comment(s)

 We have had a few reports on IP addresses in certain parts of the world sending INVITE requests to Asterix servers and attempting to make calls.  Looking at the port 5060 data there does seem to be an uptick in targets. 


If you have some packet captures of this or logs. I'd be interested to take a look at them. 



Keywords: SIP VOIP
1 comment(s)
Diary Archives