SIP Attacks on internet connected port5060 targeting Asterix servers, (Thu, Apr 15th)
We have had a few reports on IP addresses in certain parts of the world sending INVITE requests to Asterix servers and attempting to make calls. Looking at the port 5060 data there does seem to be an uptick in targets.
If you have some packet captures of this or logs. I'd be interested to take a look at them.
(c) SANS Internet Storm Center. http://isc.sans.org Creative Commons Attribution-Noncommercial 3.0 United States License.