We’ve been seeing this attack for 4-5 months now… its out there in the wild for sure.

On Sep 11, 2017, at 12:23 PM, David Villasmil <david.villasmil.work@gmail.com> wrote:

I got this on a kamailio box:

From: a'or'3=3--<sip:a'or'3=3--@13.58.167.54>;tag=cdecd76f

Of course, nothing happened, just pointing it out.