Aug. 19, 2009
3:31 p.m.
Has anybody noticed any SIP attacks coming in from 217.23.0.125 or other IPs the profile of the attack was basically a scan of every ip on several of my segments at port 5060 the packets were all fragmented into approx 8.7k worth of data. unfortunately I don't have any sniffer captures of what they were trying to do. anybody else seeing anything like this lately? -J