不正なSIP着信 22

大量のRegister Floodです。

攻撃元

 82.135.198.12
 208.90.24.9
 174.36.237.83

 inetnum:        82.135.198.0 - 82.135.198.255
 netname:        LIETUVOS-TELEKOMAS
 descr:          PROVIDER
 descr:          Joint Stock Company Lietuvos Telekomas
 descr:          local, long distance and international telecommunications
 descr:          services carrier
 descr:          LOCAL REGISTRY
 country:        LT

 OrgName:    5280 Networks, Inc. 
 OrgID:      5280N
 Address:    1801 Broadway St Suite 920
 City:       Denver
 StateProv:  CO
 PostalCode: 80202
 Country:    US
 
 NetRange:   208.90.24.0 - 208.90.31.255 
 CIDR:       208.90.24.0/21 
 NetName:    5280-NETWORKS-DEN
 NetHandle:  NET-208-90-24-0-1
 Parent:     NET-208-0-0-0-0
 NetType:    Direct Allocation
 NameServer: DNS.ELEMENTEK.NET
 NameServer: DNS2.ELEMENTEK.NET
 Comment:    
 RegDate:    2008-04-29
 Updated:    2008-06-17

 CustName:   Hosting Services Inc.
 Address:    223 West Jackson Blvd STE# 1014
 City:       Chicago
 StateProv:  IL
 PostalCode: 60606
 Country:    US
 RegDate:    2010-01-09
 Updated:    2010-04-02
 
 NetRange:   174.36.237.64 - 174.36.237.127 
 CIDR:       174.36.237.64/26 
 NetName:    NET-174-36-237-64
 NetHandle:  NET-174-36-237-64-1
 Parent:     NET-174-36-0-0-1
 NetType:    Reassigned
 Comment:    Send abuse issues to abuse@midphase.com
 RegDate:    2010-01-09
 Updated:    2010-04-02

[カテゴリ:IP電話観察日記]

by jyake