[asterisk-users] sip:ping at noname.com

[Joshua Colp]

On Wed, Jan 11, 2017, at 11:09 AM, Thufir Hawat wrote:
> The SIP trace shows messages from what I took to be a suspicious 
> connection from sip:ping at noname.com so I added that IP address to IP 
> tables...but then anveo showed as unreachable so I removed that rule.
> 
> Yes, I'm running fail2ban.
> 
> What are these messages from sip:ping at noname.com?  The domain name alone 
> set off alarm bells for me.  (I was looking for my own registration 
> attempts when I turned on SIP debugging.)

It's just a keepalive from their end to determine that your SIP server
is still reachable and to keep open any NAT mappings so you are
reachable.

-- 
Joshua Colp
Digium, Inc. | Senior Software Developer
445 Jan Davis Drive NW - Huntsville, AL 35806 - US
Check us out at: www.digium.com & www.asterisk.org