[asterisk-users] Sip Registration Hijacking

[eherr]

I have a honey pot box with extensions that are not just numbers ie )

 

100-MySipUserName

 

And the passwords are from an openssl generated password ie)

 

Gq5VNIjDFWIQoUT6

 

However, this one extension keeps getting hacked and showing up on a different IP address.

 

It is also register on an AudioCodes MP-118.

 

I wanted to know if anyone else ran into this and if it's a vulnerability on the MP-118 or with Asterisk.

 

Thanks,

-E

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.digium.com/pipermail/asterisk-users/attachments/20120119/2aea9b78/attachment.htm>