3 ms·

There are kamailio setups that just respond to every request with a 200 OK, and then log the source in a db. If you want to get fancy with that you could make

There are kamailio setups that just respond to every request with a 200 OK, and then log the source in a db. If you want to get fancy with that you could make it reply to invites with 100 Trying and make them wait a bit for whatever timout they want to have. The problem with tarpiting them though is that it is hard to make them tie up more resources then you spend on it. SMTP can abuse tcp to send replies 1 charachter at a time with long delays between each one. SIP TCP doesn't really have the same capability.

LinuxBender 4y ago
I will give Kamailio a shot. It's at least a starting point so I can get some stats on what a majority of them are doing. It seems Kamailio is already in the Alpine Linux repository so that saves me a step.
jeroenhd 4y ago
With SIP you'll probably need to exploit SIP directly, not the underlying protocol. Things like redirect loops may confuse callers. With a bit of luck you can redirect the caller to call sip:defaultspamuser@localhost so it calls itself, or redirect it to another bot you've detected to make the spammers bother each other.