I know its coming from a sip scan ive used those tools before they are higly annoying was just wondering if there was a way to plug the hole since i believe the 202 opens port 5060. seems like its allowing annonymous sip traffic. Seen this before on asterisk but they seemed to fix that.