Hacker attempts

[KSComs]

Hi there I just found that someone in the seattle region decided to try and hack a free connection out of my system... they failed many many times...

So that got me thinking and I was wondering if it is worth while keeping track of ip addresses here on the forum so that people can lock their systems down from the HACKER list.

But if you do not feel it is worth while then fair enough...

For those that 'might' want to keep an eye out for a Rogue Seattle IP... here is the offending IP address : 174.129.176.192

Regards

Kevin


Here is what turned up in the event log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~~~~~~~~~~~~~~~~~~~~
New Thu Sep 24 10:16:36 2009 3 SIP ip phone registration rejected IP phone user jim [174.129.176.192:5124]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:36 2009 3 SIP ip phone registration rejected IP phone user trinity [174.129.176.192:5124]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:36 2009 3 SIP ip phone registration rejected IP phone user nicole [174.129.176.192:5124]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:36 2009 3 SIP ip phone registration rejected IP phone user monica [174.129.176.192:5124]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:35 2009 3 SIP ip phone registration rejected IP phone user norman [174.129.176.192:5124]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:35 2009 3 SIP ip phone registration rejected IP phone user lori [174.129.176.192:5124]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:35 2009 3 SIP ip phone registration rejected IP phone user diana [174.129.176.192:5124]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:34 2009 3 SIP ip phone registration rejected IP phone user martin [174.129.176.192:5124]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:34 2009 3 SIP ip phone registration rejected IP phone user sebastian [174.129.176.192:5124]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:34 2009 3 SIP ip phone registration rejected IP phone user sasha [174.129.176.192:5124]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:34 2009 3 SIP ip phone registration rejected IP phone user edison [174.129.176.192:5124]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:33 2009 3 SIP ip phone registration rejected IP phone user peterson [174.129.176.192:5124]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:33 2009 3 SIP ip phone registration rejected IP phone user nora [174.129.176.192:5124]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:33 2009 3 SIP ip phone registration rejected IP phone user samantha [174.129.176.192:5124]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:32 2009 3 SIP ip phone registration rejected IP phone user andy [174.129.176.192:5124]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:32 2009 3 SIP ip phone registration rejected IP phone user harris [174.129.176.192:5124]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:32 2009 3 SIP ip phone registration rejected IP phone user kristina [174.129.176.192:5124]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:32 2009 3 SIP ip phone registration rejected IP phone user larry [174.129.176.192:5124]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:31 2009 3 SIP ip phone registration rejected IP phone user freddy [174.129.176.192:5124]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:31 2009 3 SIP ip phone registration rejected IP phone user debbie [174.129.176.192:5124]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:31 2009 3 SIP ip phone registration rejected IP phone user teddy [174.129.176.192:5124]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:30 2009 3 SIP ip phone registration rejected IP phone user stefan [174.129.176.192:5124]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:30 2009 3 SIP ip phone registration rejected IP phone user heaven [174.129.176.192:5124]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:30 2009 3 SIP ip phone registration rejected IP phone user patricia [174.129.176.192:5124]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:30 2009 3 SIP ip phone registration rejected IP phone user public [174.129.176.192:5124]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:29 2009 3 SIP ip phone registration rejected IP phone user bobby [174.129.176.192:5124]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:29 2009 3 SIP ip phone registration rejected IP phone user billy [174.129.176.192:5124]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:29 2009 3 SIP ip phone registration rejected IP phone user teresa [174.129.176.192:5124]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:28 2009 3 SIP ip phone registration rejected IP phone user cassandra [174.129.176.192:5124]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:28 2009 3 SIP ip phone registration rejected IP phone user terry [174.129.176.192:5124]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:28 2009 3 SIP ip phone registration rejected IP phone user barry [174.129.176.192:5124]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:28 2009 3 SIP ip phone registration rejected IP phone user oscar [174.129.176.192:5124]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:27 2009 3 SIP ip phone registration rejected IP phone user peter [174.129.176.192:5124]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:27 2009 3 SIP ip phone registration rejected IP phone user sarah [174.129.176.192:5124]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:27 2009 3 SIP ip phone registration rejected IP phone user susan [174.129.176.192:5124]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:26 2009 3 SIP ip phone registration rejected IP phone user edward [174.129.176.192:5124]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:26 2009 3 SIP ip phone registration rejected IP phone user brian [174.129.176.192:5124]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:26 2009 3 SIP ip phone registration rejected IP phone user steven [174.129.176.192:5124]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:26 2009 3 SIP ip phone registration rejected IP phone user jennifer [174.129.176.192:5124]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:25 2009 3 SIP ip phone registration rejected IP phone user mark [174.129.176.192:5124]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:25 2009 3 SIP ip phone registration rejected IP phone user thomas [174.129.176.192:5124]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:25 2009 3 SIP ip phone registration rejected IP phone user richard [174.129.176.192:5124]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:24 2009 3 SIP ip phone registration rejected IP phone user chloe [174.129.176.192:5124]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:24 2009 3 SIP ip phone registration rejected IP phone user elizabeth [174.129.176.192:5124]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:24 2009 3 SIP ip phone registration rejected IP phone user abigail [174.129.176.192:5124]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:24 2009 3 SIP ip phone registration rejected IP phone user sophia [174.129.176.192:5124]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:23 2009 3 SIP ip phone registration rejected IP phone user olivia [174.129.176.192:5124]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:23 2009 3 SIP ip phone registration rejected IP phone user ava [174.129.176.192:5124]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:23 2009 3 SIP ip phone registration rejected IP phone user madison [174.129.176.192:5124]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:22 2009 3 SIP ip phone registration rejected IP phone user emily [174.129.176.192:5124]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:22 2009 3 SIP ip phone registration rejected IP phone user isabella [174.129.176.192:5124]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:22 2009 3 SIP ip phone registration rejected IP phone user emma [174.129.176.192:5124]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:22 2009 3 SIP ip phone registration rejected IP phone user christopher [174.129.176.192:5124]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:21 2009 3 SIP ip phone registration rejected IP phone user william [174.129.176.192:5124]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:21 2009 3 SIP ip phone registration rejected IP phone user anthony [174.129.176.192:5124]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:21 2009 3 SIP ip phone registration rejected IP phone user alexander [174.129.176.192:5124]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:20 2009 3 SIP ip phone registration rejected IP phone user joshua [174.129.176.192:5124]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:20 2009 3 SIP ip phone registration rejected IP phone user ethan [174.129.176.192:5124]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:20 2009 3 SIP ip phone registration rejected IP phone user michael [174.129.176.192:5124]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:20 2009 3 SIP ip phone registration rejected IP phone user jacob [174.129.176.192:5124]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:19 2009 3 SIP ip phone registration rejected IP phone user daniel [174.129.176.192:5124]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:19 2009 3 SIP ip phone registration rejected IP phone user mike [174.129.176.192:5124]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:19 2009 3 SIP ip phone registration rejected IP phone user linda [174.129.176.192:5124]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:18 2009 3 SIP ip phone registration rejected IP phone user oracle [174.129.176.192:5124]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:18 2009 3 SIP ip phone registration rejected IP phone user bill [174.129.176.192:5124]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:18 2009 3 SIP ip phone registration rejected IP phone user adam [174.129.176.192:5124]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:17 2009 3 SIP ip phone registration rejected IP phone user jeff [174.129.176.192:5124]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:17 2009 3 SIP ip phone registration rejected IP phone user ben [174.129.176.192:5124]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:17 2009 3 SIP ip phone registration rejected IP phone user tom [174.129.176.192:5124]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:17 2009 3 SIP ip phone registration rejected IP phone user jane [174.129.176.192:5124]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:16 2009 3 SIP ip phone registration rejected IP phone user james [174.129.176.192:5124]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:16 2009 3 SIP ip phone registration rejected IP phone user matthew [174.129.176.192:5124]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:16 2009 3 SIP ip phone registration rejected IP phone user robert [174.129.176.192:5124]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:15 2009 3 SIP ip phone registration rejected IP phone user andrew [174.129.176.192:5124]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:15 2009 3 SIP ip phone registration rejected IP phone user paul [174.129.176.192:5124]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:15 2009 3 SIP ip phone registration rejected IP phone user dave [174.129.176.192:5124]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:15 2009 3 SIP ip phone registration rejected IP phone user steve [174.129.176.192:5124]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:14 2009 3 SIP ip phone registration rejected IP phone user aaron [174.129.176.192:5124]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:14 2009 3 SIP ip phone registration rejected IP phone user orders [174.129.176.192:5124]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:14 2009 3 SIP ip phone registration rejected IP phone user help [174.129.176.192:5124]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:13 2009 3 SIP ip phone registration rejected IP phone user shop [174.129.176.192:5124]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:13 2009 3 SIP ip phone registration rejected IP phone user jobs [174.129.176.192:5124]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:13 2009 3 SIP ip phone registration rejected IP phone user temp [174.129.176.192:5124]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:13 2009 3 SIP ip phone registration rejected IP phone user oracle [174.129.176.192:5124]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:12 2009 3 SIP ip phone registration rejected IP phone user asterisk [174.129.176.192:5124]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:12 2009 3 SIP ip phone registration rejected IP phone user operator [174.129.176.192:5124]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:12 2009 3 SIP ip phone registration rejected IP phone user client [174.129.176.192:5124]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:11 2009 3 SIP ip phone registration rejected IP phone user owner [174.129.176.192:5124]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:11 2009 3 SIP ip phone registration rejected IP phone user postfix [174.129.176.192:5124]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:11 2009 3 SIP ip phone registration rejected IP phone user fax [174.129.176.192:5124]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:11 2009 3 SIP ip phone registration rejected IP phone user news [174.129.176.192:5124]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:10 2009 3 SIP ip phone registration rejected IP phone user trixbox [174.129.176.192:5124]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:10 2009 3 SIP ip phone registration rejected IP phone user cpanel [174.129.176.192:5124]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:10 2009 3 SIP ip phone registration rejected IP phone user data [174.129.176.192:5124]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:09 2009 3 SIP ip phone registration rejected IP phone user user [174.129.176.192:5124]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:09 2009 3 SIP ip phone registration rejected IP phone user spam [174.129.176.192:5124]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:09 2009 3 SIP ip phone registration rejected IP phone user server [174.129.176.192:5124]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:09 2009 3 SIP ip phone registration rejected IP phone user market [174.129.176.192:5124]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:08 2009 3 SIP ip phone registration rejected IP phone user manager [174.129.176.192:5124]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:08 2009 3 SIP ip phone registration rejected IP phone user marketing [174.129.176.192:5124]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:08 2009 3 SIP ip phone registration rejected IP phone user support [174.129.176.192:5124]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:07 2009 3 SIP ip phone registration rejected IP phone user service [174.129.176.192:5124]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:07 2009 3 SIP ip phone registration rejected IP phone user sales [174.129.176.192:5124]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:06 2009 3 SIP ip phone registration rejected IP phone user postmaster [174.129.176.192:5124]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:06 2009 3 SIP ip phone registration rejected IP phone user test [174.129.176.192:5124]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:05 2009 3 SIP ip phone registration rejected IP phone user info [174.129.176.192:5124]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:05 2009 3 SIP ip phone registration rejected IP phone user admin [174.129.176.192:5124]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:04 2009 3 SIP ip phone registration rejected IP phone user 121 [174.129.176.192:5104]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:04 2009 3 SIP ip phone registration rejected IP phone user 120 [174.129.176.192:5104]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:03 2009 3 SIP ip phone registration rejected IP phone user 119 [174.129.176.192:5104]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:03 2009 3 SIP ip phone registration rejected IP phone user 118 [174.129.176.192:5104]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:02 2009 3 SIP ip phone registration rejected IP phone user 117 [174.129.176.192:5104]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:02 2009 3 SIP ip phone registration rejected IP phone user 116 [174.129.176.192:5104]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:01 2009 3 SIP ip phone registration rejected IP phone user 115 [174.129.176.192:5104]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:01 2009 3 SIP ip phone registration rejected IP phone user 114 [174.129.176.192:5104]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:16:00 2009 3 SIP ip phone registration rejected IP phone user 113 [174.129.176.192:5104]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:15:59 2009 3 SIP ip phone registration rejected IP phone user 112 [174.129.176.192:5104]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:15:59 2009 3 SIP ip phone registration rejected IP phone user 111 [174.129.176.192:5104]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:15:58 2009 3 SIP ip phone registration rejected IP phone user 110 [174.129.176.192:5104]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:15:58 2009 3 SIP ip phone registration rejected IP phone user 109 [174.129.176.192:5104]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:15:57 2009 3 SIP ip phone registration rejected IP phone user 1373098600 [174.129.176.192:5124]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:15:57 2009 3 SIP ip phone registration rejected IP phone user 108 [174.129.176.192:5104]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:15:56 2009 3 SIP ip phone registration rejected IP phone user 107 [174.129.176.192:5104]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:15:56 2009 3 SIP ip phone registration rejected IP phone user 106 [174.129.176.192:5104]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:15:55 2009 3 SIP ip phone registration rejected IP phone user 105 [174.129.176.192:5104]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:15:55 2009 3 SIP ip phone registration rejected IP phone user 104 [174.129.176.192:5104]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:15:54 2009 3 SIP ip phone registration rejected IP phone user 103 [174.129.176.192:5104]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:15:53 2009 3 SIP ip phone registration rejected IP phone user 102 [174.129.176.192:5104]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:15:52 2009 3 SIP ip phone registration rejected IP phone user 101 [174.129.176.192:5104]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:15:51 2009 3 SIP ip phone registration rejected IP phone user 100 [174.129.176.192:5104]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;) New Thu Sep 24 10:15:51 2009 3 SIP ip phone registration rejected IP phone user 3982066576 [174.129.176.192:5104]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status (http://javascript%3Cb%3E%3C/b%3E:document.form850.action=%27/status.cgi?page=iplines%27;WBG_Submit%28%29;)

[dogcom]

Mine as well!!
Fri Sep 25 04:51:53 2009 3 SIP ip phone registration rejected IP phone user thomas [75.101.173.15:5175]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status
New Fri Sep 25 04:51:53 2009 3 SIP ip phone registration rejected IP phone user richard [75.101.173.15:5175]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status
New Fri Sep 25 04:51:52 2009 3 SIP ip phone registration rejected IP phone user chloe [75.101.173.15:5175]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status
New Fri Sep 25 04:51:52 2009 3 SIP ip phone registration rejected IP phone user elizabeth [75.101.173.15:5175]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status
New Fri Sep 25 04:51:52 2009 3 SIP ip phone registration rejected IP phone user abigail [75.101.173.15:5175]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status
New Fri Sep 25 04:51:51 2009 3 SIP ip phone registration rejected IP phone user sophia [75.101.173.15:5175]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status
New Fri Sep 25 04:51:51 2009 3 SIP ip phone registration rejected IP phone user olivia [75.101.173.15:5175]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status
New Fri Sep 25 04:51:51 2009 3 SIP ip phone registration rejected IP phone user ava [75.101.173.15:5175]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status
New Fri Sep 25 04:51:50 2009 3 SIP ip phone registration rejected IP phone user madison [75.101.173.15:5175]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status
New Fri Sep 25 04:51:50 2009 3 SIP ip phone registration rejected IP phone user emily [75.101.173.15:5175]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status
New Fri Sep 25 04:51:50 2009 3 SIP ip phone registration rejected IP phone user isabella [75.101.173.15:5175]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status
New Fri Sep 25 04:51:50 2009 3 SIP ip phone registration rejected IP phone user emma [75.101.173.15:5175]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status
New Fri Sep 25 04:51:49 2009 3 SIP ip phone registration rejected IP phone user christopher [75.101.173.15:5175]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status
New Fri Sep 25 04:51:49 2009 3 SIP ip phone registration rejected IP phone user william [75.101.173.15:5175]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status
New Fri Sep 25 04:51:49 2009 3 SIP ip phone registration rejected IP phone user anthony [75.101.173.15:5175]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status
New Fri Sep 25 04:51:48 2009 3 SIP ip phone registration rejected IP phone user alexander [75.101.173.15:5175]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status
New Fri Sep 25 04:51:48 2009 3 SIP ip phone registration rejected IP phone user joshua [75.101.173.15:5175]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status
New Fri Sep 25 04:51:48 2009 3 SIP ip phone registration rejected IP phone user ethan [75.101.173.15:5175]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status
New Fri Sep 25 04:51:47 2009 3 SIP ip phone registration rejected IP phone user michael [75.101.173.15:5175]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status
New Fri Sep 25 04:51:47 2009 3 SIP ip phone registration rejected IP phone user jacob [75.101.173.15:5175]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status
New Fri Sep 25 04:51:47 2009 3 SIP ip phone registration rejected IP phone user daniel [75.101.173.15:5175]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status
New Fri Sep 25 04:51:47 2009 3 SIP ip phone registration rejected IP phone user mike [75.101.173.15:5175]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status
New Fri Sep 25 04:51:46 2009 3 SIP ip phone registration rejected IP phone user linda [75.101.173.15:5175]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status
New Fri Sep 25 04:51:46 2009 3 SIP ip phone registration rejected IP phone user oracle [75.101.173.15:5175]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status
New Fri Sep 25 04:51:46 2009 3 SIP ip phone registration rejected IP phone user bill [75.101.173.15:5175]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status
New Fri Sep 25 04:51:45 2009 3 SIP ip phone registration rejected IP phone user adam [75.101.173.15:5175]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status
New Fri Sep 25 04:51:45 2009 3 SIP ip phone registration rejected IP phone user jeff [75.101.173.15:5175]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status
New Fri Sep 25 04:51:45 2009 3 SIP ip phone registration rejected IP phone user ben [75.101.173.15:5175]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status
New Fri Sep 25 04:51:44 2009 3 SIP ip phone registration rejected IP phone user tom [75.101.173.15:5175]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status
New Fri Sep 25 04:51:44 2009 3 SIP ip phone registration rejected IP phone user jane [75.101.173.15:5175]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status
New Fri Sep 25 04:51:44 2009 3 SIP ip phone registration rejected IP phone user james [75.101.173.15:5175]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status
New Fri Sep 25 04:51:44 2009 3 SIP ip phone registration rejected IP phone user matthew [75.101.173.15:5175]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status
New Fri Sep 25 04:51:43 2009 3 SIP ip phone registration rejected IP phone user robert [75.101.173.15:5175]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status
New Fri Sep 25 04:51:43 2009 3 SIP ip phone registration rejected IP phone user andrew [75.101.173.15:5175]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status
New Fri Sep 25 04:51:43 2009 3 SIP ip phone registration rejected IP phone user paul [75.101.173.15:5175]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status
New Fri Sep 25 04:51:43 2009 3 SIP ip phone registration rejected IP phone user dave [75.101.173.15:5175]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status
New Fri Sep 25 04:51:42 2009 3 SIP ip phone registration rejected IP phone user steve [75.101.173.15:5175]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status
New Fri Sep 25 04:51:42 2009 3 SIP ip phone registration rejected IP phone user aaron [75.101.173.15:5175]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status
New Fri Sep 25 04:51:42 2009 3 SIP ip phone registration rejected IP phone user orders [75.101.173.15:5175]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status
New Fri Sep 25 04:51:41 2009 3 SIP ip phone registration rejected IP phone user help [75.101.173.15:5175]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status
New Fri Sep 25 04:51:41 2009 3 SIP ip phone registration rejected IP phone user shop [75.101.173.15:5175]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status
New Fri Sep 25 04:51:41 2009 3 SIP ip phone registration rejected IP phone user jobs [75.101.173.15:5175]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status
New Fri Sep 25 04:51:41 2009 3 SIP ip phone registration rejected IP phone user temp [75.101.173.15:5175]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status
New Fri Sep 25 04:51:40 2009 3 SIP ip phone registration rejected IP phone user oracle [75.101.173.15:5175]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status
New Fri Sep 25 04:51:40 2009 3 SIP ip phone registration rejected IP phone user asterisk [75.101.173.15:5175]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status
New Fri Sep 25 04:51:40 2009 3 SIP ip phone registration rejected IP phone user operator [75.101.173.15:5175]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status
New Fri Sep 25 04:51:40 2009 3 SIP ip phone registration rejected IP phone user client [75.101.173.15:5175]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status
New Fri Sep 25 04:51:39 2009 3 SIP ip phone registration rejected IP phone user owner [75.101.173.15:5175]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status
New Fri Sep 25 04:51:39 2009 3 SIP ip phone registration rejected IP phone user postfix [75.101.173.15:5175]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status
New Fri Sep 25 04:51:38 2009 3 SIP ip phone registration rejected IP phone user fax [75.101.173.15:5175]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status
New Fri Sep 25 04:51:38 2009 3 SIP ip phone registration rejected IP phone user news [75.101.173.15:5175]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status
New Fri Sep 25 04:51:37 2009 3 SIP ip phone registration rejected IP phone user trixbox [75.101.173.15:5175]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status
New Fri Sep 25 04:51:37 2009 3 SIP ip phone registration rejected IP phone user cpanel [75.101.173.15:5175]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status
New Fri Sep 25 04:51:36 2009 3 SIP ip phone registration rejected IP phone user data [75.101.173.15:5175]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status
New Fri Sep 25 04:51:36 2009 3 SIP ip phone registration rejected IP phone user user [75.101.173.15:5175]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status
New Fri Sep 25 04:51:36 2009 3 SIP ip phone registration rejected IP phone user spam [75.101.173.15:5175]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status
New Fri Sep 25 04:51:35 2009 3 SIP ip phone registration rejected IP phone user server [75.101.173.15:5175]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status
New Fri Sep 25 04:51:35 2009 3 SIP ip phone registration rejected IP phone user market [75.101.173.15:5175]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status
New Fri Sep 25 04:51:34 2009 3 SIP ip phone registration rejected IP phone user manager [75.101.173.15:5175]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status
New Fri Sep 25 04:51:34 2009 3 SIP ip phone registration rejected IP phone user marketing [75.101.173.15:5175]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status
New Fri Sep 25 04:51:33 2009 3 SIP ip phone registration rejected IP phone user support [75.101.173.15:5175]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status
New Fri Sep 25 04:51:33 2009 3 SIP ip phone registration rejected IP phone user service [75.101.173.15:5175]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status
New Fri Sep 25 04:51:32 2009 3 SIP ip phone registration rejected IP phone user sales [75.101.173.15:5175]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status
New Fri Sep 25 04:51:32 2009 3 SIP ip phone registration rejected IP phone user postmaster [75.101.173.15:5175]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status
New Fri Sep 25 04:51:32 2009 3 SIP ip phone registration rejected IP phone user test [75.101.173.15:5175]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status
New Fri Sep 25 04:51:31 2009 3 SIP ip phone registration rejected IP phone user info [75.101.173.15:5175]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status
New Fri Sep 25 04:51:30 2009 3 SIP ip phone registration rejected IP phone user admin [75.101.173.15:5175]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status
New Fri Sep 25 04:51:30 2009 3 SIP ip phone registration rejected IP phone user 2369475756 [75.101.173.15:5175]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status
New Fri Sep 25 04:51:27 2009 3 SIP ip phone registration rejected IP phone user 1260445166 [75.101.173.15:5087]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status



Epic fail!

Sorry not as flash as yours KS but I was in a hurry lol.
Note the different ip. Still US based, but I believe it belongs to a 70yr old war veteran who is bedridden but loans his laptop his grandkids!!
However ............... I have been informed that these attacks have "locked" onto certain Quadro's and with the portscans they send it actually degrades the call quality and is similar to a "DOS" attack(contact Phuc at Alloy for extra info).
This can be quickly remedied by contacting your isp and on "voip" only accounts, only allow traffic from your ivsp. the call quality will be immediately returned.



And when we find you my little parasites.........................

[skyplonk]

Same here. Got a few boxes with dozens of reg attempts from 174.129.176.192

[KSComs]

Hmm .. i wonder if this board is emitting our ips or something like that ?

[dogcom]

Don't think it's the board Kevin. I had an attempt over the weekend on a brand new 4x4 Quadro install that hasn't been registered yet.
Hack attempt by 174.129.176.192:5087, same report logs.
I suspect random port scanners.
Cheers
Mike

[KSComs]

Hmm .. Mike,

Out of interest did the New System have epygi stun extensions registered back to Epygi?

[dogcom]

I am using the Epygi stun server, however no epygi sip extns are registered. There are only 2 x ISVP services connected.(world dial point). No other World Dial Point customers have been affected according to their engineers.
Their ISP is iinet (same as mine).
I would suspect an iinet port scan if all the others targets are connected to the same ISP.

[KSComs]

Ok so does the Auto Attendant extension register ? ie 00 ?


Kev

[CEC]

Hi Kev

That IP belongs to Amazon so it is probably being spoofed. Blocking it may not achieve much. I had some problems on a customer unit a few months ago. It's very annoying.

Hacking/Port Scan is unrelenting. Have you every watched a live FW log. We use ISA Server and the rate of attack is frightening. For most people ISA might be overkill but there are some great hardware security appliances available. Excuse the plug... We're a reseller for one starting at < A$900 if anyone is interested. I'm in Melbourne. I'm not a big fan of SOHO routers in an enterprise environment.

Try this utility for very detailed domain scan: http://centralops.net/co/

[dogcom]

Ok so does the Auto Attendant extension register ? ie 00 ?


Kev

No Kev,
I remove all Epygi numbers from the rego (unless the client wants them, which in this case they didn't), on the bench and pre program the system from an isolated laptop with no wireless and no net connection(and virus and trojan free) before I connect the unit to the net for the first time. I can positively guarantee that there were only the two isvp numbers registered from the unit.
Cheers
Mike

[KSComs]

Do you register the units to the Epygi server or do you disable the registration process before it is connected to the internet first time ?

Kev

[dogcom]

They are disabled before the first connection.

Mike

[KSComs]

Well this is interesting, so it must be just several random attackers performing port scanner attempts ..

Ta,

Kev

[ccopley]

I had similar attempts and even though they didn't get in, they flooded the Wan port with enough traffic to cause the PBX to stop registereing anything..........
In the end we only allowed our ITSP address and my address for remote support, but it still kept trying to access the same IP address even though the router was dropping all packets.
I had to change the fixed IP as a final measure to stop this from happening as even though the packets were being dropped they still persisted.

Does anyone know the IP address range for epygi's sip server. I want to also allow this range.

[CEC]

Hi Craig

Use this utility... http://centralops.net/co/

The IP address for sip.epygi.com is: 74.54.85.200

At the risk of stating the obvious.. You will always get hack attempts so the FW/Router is your absolute best line of defence. Install the best router or dedicated Firewall that you can afford. Be very specific about allowed routes. Deny everything else.

Murray

[davrays]

Kev, your idea of hackers using STUN requests to determine VoIP devices could be right... But surely there are other ways to find voip PBX-es too..

We get from time to time such reports about registration attacks. They happen in completely different countries, and from completely different IP addresses...

Possible ways to protect yourself from such attackes, is either to allow only specific hosts to contact Quadro (either using "Allowed IP List" or "SIP Access" rule), using the Quadro embedded firewall, or alternatively, use external FW/router as CEC suggests.

Epygi, from its side, will try to implement some kind of SIP-aware attack detection tools on Quadro, but though this can prevent attacks of most common types, there is always possible that hackers will change theirs tactics, and pass through those filters. Protection from attacks is a separate big challenge, and though we can implement some basic tools, it is better to rely on a separate dedicated deviec for that.

Best regards,
David

[ccopley]

Thanks Murray,

Do epygi use a range of IP's?

[davrays]

No range. Just one fixed IP.

[dogcom]

Still getting these guy's.
Hope the Epygi Tech's are focusing on security!
Mind you, nothing has been successful on any of my Quadro's yet, so well done Epygi Tech's. Don't ever stop. They are trying!!!!!!!!!!!!
Latest attack was from 67.202.29.184:5075, usual random user name ip log on rubbish.
I believe the ip address will trace back to a WWII veteran who is bedridden with 67 great grandkids and their families who visited his computer over the holidays.
Can't really blame him ROFL!!!!
Kind regards and happy new year to you all.
Mike
www.peninsulatelephoneservices.com.au

[person]

I just got attacked from 204.236.164.208 with this same thing... ie random names "trixbox, harry etc"@204.236.164.208 .. saw it in my system events log with "Rejected nothing configured etc"...

We have a public IP being served to the epygi. The worrying thing is the only rules in the firewall are in "allowed sip access" and those are specific ip addresses of our VSP and a few remote extensions only... so this appeared to go through the firewall??

I'm using firmware 5.1.19 configured as Static IP...

[citchki]

oh ..I ll be careful now.
--------------

[person]

It would be really good if the next release for Quadro PBX's could incorporate automatic IP blocking similar to fail2ban does for Asterix... We really need something like this nowdays

[davrays]

We have a public IP being served to the epygi. The worrying thing is the only rules in the firewall are in "allowed sip access" and those are specific ip addresses of our VSP and a few remote extensions only... so this appeared to go through the firewall??

I'm using firmware 5.1.19 configured as Static IP...

There is a problem in the firewall of 5.1.19 (and actually all versions prior to 5.1.38), which is the following: if in the "SIP Access" list you allow access from a range of IP addresses, which includes the Quadro's own IP address, the SIP requests from all addresses get accepted...

This could be the case with your configuration. Please check it and make sure that you don't open a SIP access to any IP range, which includes Quadro's own IP address...
The fix for this will be published soon (version 5.1.39).

Best regards,
David

[davrays]

It would be really good if the next release for Quadro PBX's could incorporate automatic IP blocking similar to fail2ban does for Asterix... We really need something like this nowdays

This kind of feature is going to be published in the 5.2.x releases. It will be in the experimental stage yet, so will be placed on a hidden page, until we feel it is mature enough.

[a2zsrv]

Hello to all,
As there's an increasing amount of sip attacks, Here is a list of IP attackers, detected by the epygi's IDS system.
As you may see, some of them are local (Israel) and some of them are part of the Amazon cloud service (temp. assigned to their customers).
Once we entered those IPs to a block list, and at the same time, allowed sip connection only to those we know, all the system problem were solved.

94.75.236.41
92.48.119.37
85.211.97.87
85.211.67.143
82.151.87.59
81.174.57.62
76.9.9.215
76.9.16.171
76.89.148.245
62.50.134.34
62.219.186.7
221.12.160.198
217.132.91.51
212.199.78.17
212.12.160.198
196.213.177.250
195.81.186.202
195.143.135.194
192.117.235.237
192.117.235.235
188.105.17.11
184.73.16.184
174.120.159.130
121.12.118.162

[juanhf]

It would be silly to allow SIP access to everyone (unless it is not practical for you to implement - ie. you provide SIP services to roaming customers). If you are maintaining the box for a company's internal use then I would go as far to suggest that a SIP best practice would be to lock it down and only allow SIP connections from a specific list of IP's - hopefully your remote extensions can get static IP addresses assigned to them.

A recommendation for Epygi would be to allow hostnames and not just IP addresses and subnets as this would allow dyndns services to update the entry accordingly.

[afuchs]

A recommendation for Epygi would be to allow hostnames and not just IP addresses and subnets as this would allow dyndns services to update the entry accordingly.

I also vote for hostnames implementation to allow roaming and dynamic IP clients.

[person]

Yes I would love this hostnames feature! Please implement it if possible :)

[afuchs]

Can you please elaborate on the new "SIP IDS" feature in v.5.2.9
From release notes:
Security enhancement. Protection against certain SIP DoS attacks has been added by enabling the "SIP IDS" feature in the hidden menu generalconfig.cgi. Enabling this option will automatically block malicious IPs in the firewall.

I enabled SIP IDS with Security Level set to default 'Medium'.
However, I'm still getting dozens of attacks like these:

New Wed Jun 30 08:36:29 2010 3 SIP ip phone registration rejected IP phone user 399 [67.205.52.172:5092]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status
New Wed Jun 30 08:36:29 2010 3 SIP ip phone registration rejected IP phone user 398 [67.205.52.172:5092]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status
New Wed Jun 30 08:36:29 2010 3 SIP ip phone registration rejected IP phone user 397 [67.205.52.172:5092]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status
New Wed Jun 30 08:36:28 2010 3 SIP ip phone registration rejected IP phone user 396 [67.205.52.172:5092]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status
New Wed Jun 30 08:36:28 2010 3 SIP ip phone registration rejected IP phone user 395 [67.205.52.172:5092]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status
New Wed Jun 30 08:36:28 2010 3 SIP ip phone registration rejected IP phone user 394 [67.205.52.172:5092]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status
New Wed Jun 30 08:36:27 2010 3 SIP ip phone registration rejected IP phone user 393 [67.205.52.172:5092]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status
New Wed Jun 30 08:36:27 2010 3 SIP ip phone registration rejected IP phone user 392 [67.205.52.172:5092]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status
New Wed Jun 30 08:36:27 2010 3 SIP ip phone registration rejected IP phone user 391 [67.205.52.172:5092]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status
New Wed Jun 30 08:36:27 2010 3 SIP ip phone registration rejected IP phone user 390 [67.205.52.172:5092]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status
New Wed Jun 30 08:36:26 2010 3 SIP ip phone registration rejected IP phone user 389 [67.205.52.172:5092]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status
New Wed Jun 30 08:36:26 2010 3 SIP ip phone registration rejected IP phone user 388 [67.205.52.172:5092]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status
New Wed Jun 30 08:36:26 2010 3 SIP ip phone registration rejected IP phone user 387 [67.205.52.172:5092]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status
New Wed Jun 30 08:36:26 2010 3 SIP ip phone registration rejected IP phone user 386 [67.205.52.172:5092]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status
New Wed Jun 30 08:36:25 2010 3 SIP ip phone registration rejected IP phone user 385 [67.205.52.172:5092]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status
New Wed Jun 30 08:36:25 2010 3 SIP ip phone registration rejected IP phone user 384 [67.205.52.172:5092]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status
New Wed Jun 30 08:36:25 2010 3 SIP ip phone registration rejected IP phone user 383 [67.205.52.172:5092]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status


An idea of an easy fix:
Temporary disable an IP when consecutive failed registration attempts are detected

Also, because such registration attacks generate hundreds of event logs, it would be good to increase size of System Events and to have an ability to auto-download System Events, similar to Call Statistics

Thank you

[Vahan]

Hi afuchs,

When SIP IDS treats SIP registrations as an attack, the IP address sending this Registrations to Quadro(in your case 67.205.52.172) will be added to "Blocked IP" list of Firewall. Do you see 67.205.52.172 there?
In all cases, Quadro needs time to analyze SIP registers and to detect SIP IDS, all the Registrations came in that time period will generate an appropriate event in the Quadro "Events". So, you can see near a 100 or so events like "SIP ip phone registration rejected".
We don't like the huge amount of this events and are working on improving this mechanism(we want to decrease this amount of events). As for now, if you see the hackers IP address was added to "Blocked IP" list you have nothing to worry about.

Regards.

[afuchs]

Thank you Vahan,

No, I don't see 67.205.52.172 or any other IPs auto-entered by Epygi in "Blocked IP" list of Firewall (v.5.2.9)

My "SIP IDS" is Enabled with Security Level set to "Medium".
Should I increase Security Level to "High"?

I have "SIP Access" enable to Any IPs (for dynamic IP clients).
Would this conflict with SIP IDS?

I vote again for hostnames implementation in filter rules to allow roaming and dynamic IP clients (and deny everyone else)

Thanks

[afuchs]

I got another attack.
Log is flooded with 100s messages like

New Fri Jul 16 19:13:05 2010 3 SIP ip phone registration rejected IP phone user 434 [85.158.111.164:5078]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status
New Fri Jul 16 19:13:05 2010 3 SIP ip phone registration rejected IP phone user 433 [85.158.111.164:5078]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status
New Fri Jul 16 19:13:04 2010 3 SIP ip phone registration rejected IP phone user 432 [85.158.111.164:5078]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status
New Fri Jul 16 19:13:04 2010 3 SIP ip phone registration rejected IP phone user 431 [85.158.111.164:5078]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status
....
New Fri Jul 16 19:12:06 2010 3 SIP ip phone registration rejected IP phone user 249 [85.158.111.164:5078]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status
New Fri Jul 16 19:12:06 2010 3 SIP ip phone registration rejected IP phone user 248 [85.158.111.164:5078]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status
New Fri Jul 16 19:12:05 2010 3 SIP ip phone registration rejected IP phone user 247 [85.158.111.164:5078]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status
New Fri Jul 16 19:12:05 2010 3 SIP ip phone registration rejected IP phone user 246 [85.158.111.164:5078]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status

But I also see in the log

New Fri Jul 16 19:12:51 2010 3 SIP blocked ip The IP 85.158.111.164 is added into Blocked IP list. Filtering Rules

As well as in Blocked IP List:

Enabled All Blocked 85.158.111.164 Blocked by SIP UA. Reason: No Such Line Configured. Date: 07/16/2010 19:11:31

This is my first evidence that SIP IDS works.

Interestingly, there is one and 1/2 minute delay between Block IP entry (19:11:31) and last Registration attempt (19:13:05)
Is this because of log delay or delay in Firewall?

[ddexxters75]

I remove all Epygi numbers from the rego (unless the client wants them, which in this case they didn't), on the bench and pre program the system from an isolated laptop with no wireless and no net connection(and virus and trojan free) before I connect the unit to the net for the first time. I can positively guarantee that there were only the two isvp numbers registered from the unit.

[dogcom]

I remove all Epygi numbers from the rego (unless the client wants them, which in this case they didn't), on the bench and pre program the system from an isolated laptop with no wireless and no net connection(and virus and trojan free) before I connect the unit to the net for the first time. I can positively guarantee that there were only the two isvp numbers registered from the unit.
__________________________________
Excess Baggage (http://www.cargoforce.co.uk/excess-baggage.html)
Container Shipping (http://www.cargoforce.co.uk/container-shipping.html)

Is there an echo in here?

[KSComs]

Mike I think we need to turn echo cancellation on :D what do you think mate?

Kev

[dogcom]

lol
Getting a bit like that Kev !
Cheers Mate,
Mike

[afuchs]

Unauthorized SIP registration hack attacks are becoming worst every day.
SIP IDS is not working well; it not fast enough to block hundreds of near-simultaneous hack registration attempts from the same IP.

PLEASE expedite implementation of "SIP Access" filter by hostnames to allow roaming and dynamic IP clients.

Thanks,
Alex


New Thu Aug 12 09:19:15 2010 3 SIP ip phone registration rejected IP phone user 612 [200.52.114.67:52134]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status
New Thu Aug 12 09:19:15 2010 3 SIP ip phone registration rejected IP phone user 827 [200.52.114.67:52136]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status
New Thu Aug 12 09:19:15 2010 3 SIP ip phone registration rejected IP phone user 607 [200.52.114.67:52134]: registration failed. Reason: No Such Line Configured. IP Lines Registration Status
...............

[dogcom]

Hey Mate,
If you have a dedicated internet connection for your epygi system, you could always go to the firewall and block everything except for your ISVP. It works a treat as long as its dedicated to the Epygi.
Cheers

[afuchs]

Mike,
I have roaming dynamic IP clients, so I can not lock down because current "SIP Access" filter is only by static IP .
That's why I'm requesting an implementation of "SIP Access" filter by hostnames to allow for dyndns service.
Few others requested it in this thread too.

Alex

[hrant]

Alex:

we are working on your request, thank you for helpful suggestion.

[afuchs]

Great news - thanks!

[viperit]

Hi,

Today I got called onto site by a customer who was experiencing problems with line registrations and inbound calls not connecting. On looking through the event logs it was full of failed registrations - as soon as I put a block on the attacking IP everything worked again within a couple of minutes.

We also had this issue on another couple of Quadros and it would be good for the developers to get a fix out for this asap.

Thanks,

Tom

[ppvote]

I have found out today that someone has hacked our system and been making outgoing calls costing us around £70 per month... I have an IP address, which I am now blocking and have blocked International calls on the Analogue outbound lines...

two questions;
1 - Any idea if we will be able to get money back if we can find out who it was?
2 - Any thoughts as to why it routed this over PSTN rather than using the IP gateway as the call routing table says it should have?

In a way I am glad it used the PSTN as it meant we found the problem!

Thanks

Dominic

[keeskoets]

I am experiencing the same hacking attacks as described in this thread. The registration attemps are from China and Korea:
60.172.230.110
118.130.232.21

I am using firmware 5.1.19
The IP phones are registering on the WAN side.
I am NOT using external IP phones.

I already activated the Quadro firewall (low safety) but I am still puzzled how the hackers could get in through my router through port 5188 and 5249. I do not have these ports forwarded.

In any case, what is the recommended course of action to get this fixed?

1. Update the firmware?
and/or
2. Set the firewall to high safety and specify all ITSPs and local extensions? Can the ITSPs be allowed through a URL rather than an IP address? Does anybody have this working?

Any suggestions are greatly appreciated.

[hrant]

For complete set of the security measures take a look at the document at the link below:
http://support.epygi.com/index.php?_m=downloads&_a=viewdownload&downloaditemid=942
.. as well as the follwing article in the KB:
http://support.epygi.com/index.php?_m=knowledgebase&_a=viewarticle&kbarticleid=21&nav=0

[tsim]

Like all the users, we have our fair share of such attacks. I have always tried to report such abuses and often get back responses that the ISP's customer's server had been hacked and now resolved.

While a range of enhanced security measures are good to negate such attacks, the Laws in all countries need to be in consistent with the degree of damages caused by such hackers. For too long, legal deterrents in many countries are too light and not commensurate with the potential or actual damage suffered by users. For one, repeated system access to unauthorized resources should be made illegal globally similar to attempts in terms of child pornography and other crimes.

For systems, lockouts should be implemented for repeated failed attempts, just like the admin login in the Quadro. This should also extend to repeated SIP logins from one IP or several failed attempts, say more than 1 per second. The Quadro should not respond on such attempts unless unlocked by the admin. This may remove a high percentage of such attacks.

[hrant]

The SIP IDS in the latest firmware releases of Quadro is aimed to block the malicious IP addresses repeatedly trying to register on Quadro for making the unauthorized calls. Quadro stores them in the blocked IP list of the firewall and only admin can unlock those IPs.

[sreyesro]

Hrant, is possible in all models? We test in M26X and is Ok, but in Quadro 4x and 6L is posible to use the SIP IDS??

[hrant]

Yes, the feature will be available on all models, in the latest software releases.

[keeskoets]

I just implemented case 2 of the "How to protect an Epygi Quadro from SIP Attacks" article.

But by setting the firewall to high and only allowing SIP access, I now locked myself out of remote access! I cannot get on the epygi anymore...

How do I get access back?



Update: I got in on the LAN side with a laptop and opened up remote management. I would suggest to mention this in the article to allow "remote management" before activating the firewall!

[ccopley]

Go onsite and log in from the LAN side

[davrays]

Update: I got in on the LAN side with a laptop and opened up remote management. I would suggest to mention this in the article to allow "remote management" before activating the firewall!

I didn't add such warning as I assumed user will be changing from the default "Medium" setting (in that case he should have had the appropriate "management access" rule in place already), but I agree it could happen that you change it from any level, including Low and OFF, so an additional warning could be useful...

I have added the warning as you suggested. Thanks!

Best regards,
David