Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

sipp protocol honeypot #20

Open
libin-math opened this issue Jul 30, 2022 · 0 comments
Open

sipp protocol honeypot #20

libin-math opened this issue Jul 30, 2022 · 0 comments

Comments

@libin-math
Copy link

libin-math commented Jul 30, 2022

I am trying to make some connection attempt on SIP protocol using the sipp utility, however the utility is sending connections to the port 5060, but the honeypot running on the same is not capturing anything as the sip.log is empty.

the command performed is as follows

sipp 192.168.100.27:5060 -au admin -ap admin

the config.json is as follows ...

"sip":{ "port":5060, "ip":"192.168.100.27", "username":"admin", "password":"admin", "log_file_name":"sip.log", "max_bytes":10000, "backup_count":10, "options":["capture_commands"] }

The following are the logs from the sipp utility.


----------------------------- Statistics Screen ------- [1-9]: Change Screen --
Start Time | 2022-07-30 07:16:22:444 1659179782.444098
Last Reset Time | 2022-07-30 07:16:35:468 1659179795.468695
Current Time | 2022-07-30 07:16:36:450 1659179796.450314
-------------------------+---------------------------+--------------------------
Counter Name | Periodic value | Cumulative value
-------------------------+---------------------------+--------------------------
Elapsed Time | 00:00:00:981 | 00:00:14:006
Call Rate | 10.194 cps | 9.996 cps
-------------------------+---------------------------+--------------------------
Incoming call created | 0 | 0
OutGoing call created | 10 | 140
Total Call created | | 140
Current Call | 1 |
-------------------------+---------------------------+--------------------------
Successful call | 9 | 139
Failed call | 0 | 0
-------------------------+---------------------------+--------------------------
Response Time 1 | 00:00:00:007 | 00:00:00:009
Call Length | 00:00:00:015 | 00:00:00:018
------------------------------ Test Terminated --------------------------------

2022-07-30 07:16:36:357 1659179796.357174: Dead call 139-12601@127.0.1.1 (successful), received 'SIP/2.0 200 OK
Via: SIP/2.0/UDP 127.0.1.1:5060;branch=z9hG4bK-12601-139-7;received=192.168.100.36
To: service sip:service@192.168.100.27:5060
From: sipp sip:sipp@127.0.1.1:5060;tag=12601SIPpTag00139
Call-ID: 139-12601@127.0.1.1
CSeq: 2 BYE


Sorry I am not that familiar with how SIP protocol works, or am I missing something?

Can you also please let me know if there is any tool I can use to simulate some connections to SIP honeypot.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant