SIP scanning spammer.. seemingly in Telia in Sweeden has been scanning my SIP server making calls to all extensions one by one with the RTP audio address of localhost.

Non-Codec Capability: 1
Their Codec Capability: 0
Joint Codec Capability: 14
Format ulaw
Theoretical Address:
Received Address:
NAT Support: Always
Audio IP: my.server.ip (local)
Our Tag: as3131eae6
Their Tag: 3931310131363930353830303434
SIP User agent: friendly-scanner
Original uri: sip:911@my.server.ip
Caller-ID: 911
Need Destroy: 0
Last Message: Rx: INVITE

I’ve banned them. Posting here as this IP didn’t appear anywhere on the internet so I thought I may as well start their internet presence.

This entry was posted in Uncategorized. Bookmark the permalink.

Comment on this topic

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out /  Change )

Google+ photo

You are commenting using your Google+ account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )


Connecting to %s