...@wispa.org] On
Behalf Of Josh Luthman
Sent: Monday, October 11, 2010 4:09 PM
To: WISPA General List
Subject: Re: [WISPA] port 5060 relaying attack?
I am being sneaky sneaky sir =)
You can probably just drop all 5060/tcp input forever as I seriously doubt
your Mikrotik is a SIP gateway.
Josh
t;>>>
>>>> WAVELINC
>>>>
>>>> P.O. Box 126
>>>>
>>>> Bucyrus, OH 44820
>>>>
>>>> 419-562-6405
>>>>
>>>>
>>>>
>>>>
>>>> -
>
>>> Kurt Fankhauser
>>>
>>> WAVELINC
>>>
>>> P.O. Box 126
>>>
>>> Bucyrus, OH 44820
>>>
>>> 419-562-6405
>>>
>>>
>>>
>>>
>>> --
>>>
; 419-562-6405
>>
>>
>>
>>
>> --
>>
>> *From:* wireless-boun...@wispa.org [mailto:wireless-boun...@wispa.org] *On
>> Behalf Of *RickG
>> *Sent:* Saturday, October 09, 2010 6:13 PM
>>
>> *To:* WISPA Gen
t; WAVELINC
>
> P.O. Box 126
>
> Bucyrus, OH 44820
>
> 419-562-6405
>
>
>
>
> --
>
> *From:* wireless-boun...@wispa.org [mailto:wireless-boun...@wispa.org] *On
> Behalf Of *RickG
> *Sent:* Saturday, October 09, 2010 6:
Bucyrus, OH 44820
419-562-6405
_
From: wireless-boun...@wispa.org [mailto:wireless-boun...@wispa.org] On
Behalf Of RickG
Sent: Saturday, October 09, 2010 6:13 PM
To: WISPA General List
Subject: Re: [WISPA] port 5060 relaying attack?
Packet sniffer works better for this.
On Sat
s-boun...@wispa.org] *On
>> Behalf Of *Cameron Crum
>> *Sent:* Friday, October 08, 2010 3:09 PM
>> *To:* WISPA General List
>> *Subject:* Re: [WISPA] port 5060 relaying attack?
>>
>>
>>
>> Can't you look at the inside of your network to see which i
;
>
> --
>
> *From:* wireless-boun...@wispa.org [mailto:wireless-boun...@wispa.org] *On
> Behalf Of *Cameron Crum
> *Sent:* Friday, October 08, 2010 3:09 PM
> *To:* WISPA General List
> *Subject:* Re: [WISPA] port 5060 relaying attack?
>
>
: [WISPA] port 5060 relaying attack?
Can't you look at the inside of your network to see which ip is generating
the traffic? O Ris it originating off your network?
On Thu, Oct 7, 2010 at 11:17 PM, RickG wrote:
I had that same EXACT thing happen to me about a month ago. Sniffed it out
(wit
http://www.e-c-group.com/news/2010-06-02-sip-registration-attacks/
http://www.freepbx.org/forum/freepbx/users/security-alert-is-port-5060-open-on-your-router
Jim Patient
Cell: 314-565-6863
Desk: 636-692-4200
YIM: jeffcosoho
www.wlan1.com
www.linktechs.net
www.wifimidwest.com
On 10/8/2010 2:09
Can't you look at the inside of your network to see which ip is generating
the traffic? O Ris it originating off your network?
On Thu, Oct 7, 2010 at 11:17 PM, RickG wrote:
> I had that same EXACT thing happen to me about a month ago. Sniffed it out
> (with the help from the list) and blocked th
I had that same EXACT thing happen to me about a month ago. Sniffed it out
(with the help from the list) and blocked the ip. Yes, I'm on TW fiber.
-RickG
On Thu, Oct 7, 2010 at 4:22 PM, Kurt Fankhauser wrote:
> I never have had this happen for 6 years until I got my new fiber line
> installed f
Saw this happen many times when time Warner was here. When they left and it
changed to comcast I have not experienced it since. Plays hell on voip calls.
Not saying they are initiating it but they sure don't do much to stop it.
Sent from my iPhone4
On Oct 7, 2010, at 3:22 PM, "Kurt Fankhauser"
Sounds like a SIP DOS or possibly brute-force attack.
We get them from time to time.
On Thu, Oct 7, 2010 at 3:22 PM, Kurt Fankhauser wrote:
> I never have had this happen for 6 years until I got my new fiber line
> installed form Time Warner. Apparently a few times a day somone starts a
> relay o
14 matches
Mail list logo
