[OpenSIPS-Users] 回复: Re: my opensips can`t registered

Mon Dec 2 04:25:43 CET 2013

HI, 
    thank for you help, is real somebody trying to login on our server and Now has banned his visit

Regards,
YIN

Òü»ªÁú¦òHualong Yin           
¼¼ÊõÖÐÐÄºóÌ¨ÑÐ·¢²¿¦òTechlology Department Server-Side

java¹¤³ÌÊ¦¦ò JAVA engineer

ÖÐÂóÍ¨ÐÅÍøÂçÓÐÏÞ¹«Ë¾
China MCommunication Co.,Ltd 
±±¾©ÊÐ³¯ÑôÇø½¨Íâ´ó½Ö12ºÅÂ¥ºóÐ¡Â¥£¨100022£©
TEL£º(8610) 53208866-8865  
FAX£º(8610) 53208860                           
CELL£º(86)186 1019 1892                
E-MAIL£ºhualong.yin at busap.com 
www.busap.com

·¢¼þÈË£º Mike Tesliuk
·¢ËÍÊ±¼ä£º 2013-11-30 21:54
ÊÕ¼þÈË£º OpenSIPS users mailling list
Ö÷Ìâ£º Re: [OpenSIPS-Users] my opensips can`t registered
According with you maxfwd log you have a loop

Nov 28 15:19:00 MYCALL-500-73 /usr/local/opensips_proxy/sbin/opensips[28994]: DBG:maxfwd:is_maxfwd_present: value = 70 

and if user 342 is not a real user so you have somebody trying to login on your server

2013/11/28 hualong.yin at busap.com <hualong.yin at busap.com>

hello all,
      my opensips server can`t  registered  and call , I saw this information in the log file:
0-73 /usr/local/opensips_proxy/sbin/opensips[28992]: DBG:core:receive_msg: cleaning up
Nov 28 15:19:00 MYCALL-500-73 /usr/local/opensips_proxy/sbin/opensips[28994]: DBG:core:parse_msg: SIP Request:
Nov 28 15:19:00 MYCALL-500-73 /usr/local/opensips_proxy/sbin/opensips[28994]: DBG:core:parse_msg:  method:  <REGISTER>
Nov 28 15:19:00 MYCALL-500-73 /usr/local/opensips_proxy/sbin/opensips[28994]: DBG:core:parse_msg:  uri:     <sip:172.16.100.73>
Nov 28 15:19:00 MYCALL-500-73 /usr/local/opensips_proxy/sbin/opensips[28994]: DBG:core:parse_msg:  version: <SIP/2.0>
Nov 28 15:19:00 MYCALL-500-73 /usr/local/opensips_proxy/sbin/opensips[28994]: DBG:core:parse_headers: flags=2
Nov 28 15:19:00 MYCALL-500-73 /usr/local/opensips_proxy/sbin/opensips[28994]: DBG:core:parse_via_param: found param type 235, <rport> = <n/a>; state=6
Nov 28 15:19:00 MYCALL-500-73 /usr/local/opensips_proxy/sbin/opensips[28994]: DBG:core:parse_via_param: found param type 232, <branch> = <z9hG4bK-805371511>; state=16
Nov 28 15:19:00 MYCALL-500-73 /usr/local/opensips_proxy/sbin/opensips[28994]: DBG:core:parse_via: end of header reached, state=5
Nov 28 15:19:00 MYCALL-500-73 /usr/local/opensips_proxy/sbin/opensips[28994]: DBG:core:parse_headers: via found, flags=2
Nov 28 15:19:00 MYCALL-500-73 /usr/local/opensips_proxy/sbin/opensips[28994]: DBG:core:parse_headers: this is the first via
Nov 28 15:19:00 MYCALL-500-73 /usr/local/opensips_proxy/sbin/opensips[28994]: DBG:core:receive_msg: After parse_msg...
Nov 28 15:19:00 MYCALL-500-73 /usr/local/opensips_proxy/sbin/opensips[28994]: DBG:core:receive_msg: preparing to run routing scripts...
Nov 28 15:19:00 MYCALL-500-73 /usr/local/opensips_proxy/sbin/opensips[28994]: DBG:core:check_ip_address: params 178.162.199.65, 127.0.0.1, 0
Nov 28 15:19:00 MYCALL-500-73 /usr/local/opensips_proxy/sbin/opensips[28994]: DBG:core:parse_headers: flags=100
Nov 28 15:19:00 MYCALL-500-73 /usr/local/opensips_proxy/sbin/opensips[28994]: DBG:core:parse_to: end of header reached, state=10
Nov 28 15:19:00 MYCALL-500-73 /usr/local/opensips_proxy/sbin/opensips[28994]: DBG:core:parse_to: display={"342"}, ruri={sip:342 at 172.16.100.73}
Nov 28 15:19:00 MYCALL-500-73 /usr/local/opensips_proxy/sbin/opensips[28994]: DBG:core:get_hdr_field: <To> [31]; uri=[sip:342 at 172.16.100.73] 
Nov 28 15:19:00 MYCALL-500-73 /usr/local/opensips_proxy/sbin/opensips[28994]: DBG:core:get_hdr_field: to body ["342" <sip:342 at 172.16.100.73>#015#012]
Nov 28 15:19:00 MYCALL-500-73 /usr/local/opensips_proxy/sbin/opensips[28994]: DBG:core:get_hdr_field: cseq <CSeq>: <1> <REGISTER>
Nov 28 15:19:00 MYCALL-500-73 /usr/local/opensips_proxy/sbin/opensips[28994]: DBG:maxfwd:is_maxfwd_present: value = 70 
Nov 28 15:19:00 MYCALL-500-73 /usr/local/opensips_proxy/sbin/opensips[28994]: DBG:uri:has_totag: no totag
Nov 28 15:19:00 MYCALL-500-73 /usr/local/opensips_proxy/sbin/opensips[28994]: DBG:core:parse_headers: flags=78
Nov 28 15:19:00 MYCALL-500-73 /usr/local/opensips_proxy/sbin/opensips[28994]: DBG:tm:t_lookup_request: start searching: hash=49499, isACK=0
Nov 28 15:19:00 MYCALL-500-73 /usr/local/opensips_proxy/sbin/opensips[28994]: DBG:tm:matching_3261: RFC3261 transaction matching failed
Nov 28 15:19:00 MYCALL-500-73 /usr/local/opensips_proxy/sbin/opensips[28994]: DBG:tm:t_lookup_request: no transaction found
Nov 28 15:19:00 MYCALL-500-73 /usr/local/opensips_proxy/sbin/opensips[28994]: DBG:core:parse_headers: flags=200
Nov 28 15:19:00 MYCALL-500-73 /usr/local/opensips_proxy/sbin/opensips[28994]: DBG:core:get_hdr_field: content_length=0
Nov 28 15:19:00 MYCALL-500-73 /usr/local/opensips_proxy/sbin/opensips[28994]: DBG:core:get_hdr_field: found end of header
Nov 28 15:19:00 MYCALL-500-73 /usr/local/opensips_proxy/sbin/opensips[28994]: DBG:rr:find_first_route: No Route headers found
Nov 28 15:19:00 MYCALL-500-73 /usr/local/opensips_proxy/sbin/opensips[28994]: DBG:rr:loose_route: There is no Route HF
Nov 28 15:19:00 MYCALL-500-73 /usr/local/opensips_proxy/sbin/opensips[28994]: DBG:core:grep_sock_info: checking if host==us: 13==13 &&  [172.16.100.73] == [172.16.100.73]
Nov 28 15:19:00 MYCALL-500-73 /usr/local/opensips_proxy/sbin/opensips[28994]: DBG:core:grep_sock_info: checking if port 5060 matches port 5060
Nov 28 15:19:00 MYCALL-500-73 /usr/local/opensips_proxy/sbin/opensips[28994]: DBG:core:parse_to: end of header reached, state=10
Nov 28 15:19:00 MYCALL-500-73 /usr/local/opensips_proxy/sbin/opensips[28994]: DBG:core:parse_to: display={"342"}, ruri={sip:342 at 172.16.100.73}
Nov 28 15:19:00 MYCALL-500-73 /usr/local/opensips_proxy/sbin/opensips[28994]: DBG:core:comp_scriptvar: str 20 : 342
Nov 28 15:19:00 MYCALL-500-73 /usr/local/opensips_proxy/sbin/opensips[28994]: DBG:core:cachedb_fetch: from script [redis] - no grp
Nov 28 15:19:00 MYCALL-500-73 /usr/local/opensips_proxy/sbin/opensips[28994]: DBG:cachedb_redis:redis_get: no such key - PHUID_342
Nov 28 15:19:00 MYCALL-500-73 /usr/local/opensips_proxy/sbin/opensips[28994]: DBG:core:parse_headers: flags=ffffffffffffffff
Nov 28 15:19:00 MYCALL-500-73 /usr/local/opensips_proxy/sbin/opensips[28994]: DBG:core:destroy_avp_list: destroying list 0x7ff593bcf348
Nov 28 15:19:00 MYCALL-500-73 /usr/local/opensips_proxy/sbin/opensips[28994]: DBG:core:receive_msg: cleaning up

the username 342(sip:342 at 172.16.100.73) are not in our system,but constantly have such registration information to my server. It is being attacked£¿¡¡what should i can do from here¡¡ 
Regards,
YIN

Òü»ªÁú¦òHualong Yin           
¼¼ÊõÖÐÐÄºóÌ¨ÑÐ·¢²¿¦òTechlology Department Server-Side

java¹¤³ÌÊ¦¦ò JAVA engineer

ÖÐÂóÍ¨ÐÅÍøÂçÓÐÏÞ¹«Ë¾
China MCommunication Co.,Ltd 
±±¾©ÊÐ³¯ÑôÇø½¨Íâ´ó½Ö12ºÅÂ¥ºóÐ¡Â¥£¨100022£©
TEL£º(8610) 53208866-8865  
FAX£º(8610) 53208860                           
CELL£º(86)186 1019 1892                
E-MAIL£ºhualong.yin at busap.com 
www.busap.com

_______________________________________________
Users mailing list
Users at lists.opensips.org
http://lists.opensips.org/cgi-bin/mailman/listinfo/users
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.opensips.org/pipermail/users/attachments/20131202/979842a9/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: image/png
Size: 4368 bytes
Desc: not available
URL: <http://lists.opensips.org/pipermail/users/attachments/20131202/979842a9/attachment-0004.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: image/png
Size: 346 bytes
Desc: not available
URL: <http://lists.opensips.org/pipermail/users/attachments/20131202/979842a9/attachment-0005.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: image/png
Size: 4368 bytes
Desc: not available
URL: <http://lists.opensips.org/pipermail/users/attachments/20131202/979842a9/attachment-0006.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: image/png
Size: 346 bytes
Desc: not available
URL: <http://lists.opensips.org/pipermail/users/attachments/20131202/979842a9/attachment-0007.png>