Has anyone noticed SIP Invites showing up from IP's in the 91.226.97.0/24 subnet? Seeing a progessive "scan" targeting our endpoints yesterday and today.
On 10/28/2011 12:13 PM, Stappenbeck, Mark wrote:
Has anyone noticed SIP Invites showing up from IP's in the 91.226.97.0/24 subnet? Seeing a progessive "scan" targeting our endpoints yesterday and today.
We see progressive scans from many subnets daily. :-) -- Alex Balashov - Principal Evariste Systems LLC 260 Peachtree Street NW Suite 2200 Atlanta, GA 30303 Tel: +1-678-954-0670 Fax: +1-404-961-1892 Web: http://www.evaristesys.com/
On 10/28/11 9:13 AM, Stappenbeck, Mark wrote:
Has anyone noticed SIP Invites showing up from IP's in the 91.226.97.0/24 subnet? Seeing a progessive "scan" targeting our endpoints yesterday and today.
We see SIP scans all the time from several subnets. Some claim to be friendly (they aren't), others are vicious, and all kinds of other miscellany. Sansay does a good job of blocking them. -- Jay Hennigan - CCIE #7880 - Network Engineering - jay at impulse.net Impulse Internet Service - http://www.impulse.net/ Your local telephone and internet company - 805 884-6323 - WB6RDV
participants (3)
-
abalashov＠evaristesys.com -
jay＠west.net -
MStappenbeck＠allworx.com