Unknown heavy traffic targeting :5060 Inbox
Replies (1)
RE: Unknown heavy traffic targeting :5060 Inbox
-
Added by Lax Lutther 3 days ago
Lax Lutther wrote:
Hi all,
kindly help, I have tried all security measures I know of to stop this however I still can't block unknown ip hitting the :5060 port.
I have the below implemented;
1. Allowed ports only through firewall
2. CrowdSec
3. I do have SSL implementedI still see the below when I run the server and monitor using sngrep. Please direct me on a way to secure my server or understand if this is something to worry about?
^Idx Method SIP From SIP To Msgs Source Destination Call State
\[ ] 154 OPTIONS asterisk\@go-host-ip:5 godialler.hexiga.agency 2 go-host-ip:5070 go-host-ip:5060
\[ ] 155 INVITE 903129994000\@200.84.22. 700048422032120\@65.10.1 2 138.124.60.132:60234 go-host-ip:5060 REJECTED
\[ ] 156 INVITE 12345\@go-host-ip 6000421233015202\@65.180. 1 217.156.123.26:55721 go-host-ip:5060 CALL SETUP
\[ ] 157 OPTIONS asterisk\@go-host-ip:5 godialler.hexiga.agency 2 go-host-ip:5070 go-host-ip:5060
\[ ] 158 INVITE 12345\@go-host-ip 17900421233015202\@265.10 1 217.156.123.26:54702 go-host-ip:5060 CALL SETUP
\[ ] 159 INVITE 12345\@go-host-ip 0200421233015202\@65.10. 1 217.156.123.26:59619 go-host-ip:5060 CALL SETUP
\[ ] 160 OPTIONS asterisk\@go-host-ip:5 godialler.hexiga.agency 2 go-host-ip:5070 go-host-ip:5060
\[ ] 161 INVITE 1001\@go-host-ip 003905119900432\@65.10.1 2 77.110.114.15:64259 go-host-ip:5060 REJECTED"