Project

General

Profile

Actions
Copy link

Feature #9452

open

Unknown heavy traffic targeting :5060

Added by Lax Lutther 8 days ago.

Status:
New
Priority:
High
Assignee:
Demian Biscocho
Category:
Features
Target version:
-
Start date:
05/11/2025
Due date:
% Done:

0%

Estimated time:

Description

Hi all,

kindly help, I have tried all security measures I know of to stop this however I still can't block unknown ip hitting the :5060 port.

I have the below implemented;

1. Allowed ports only through firewall
2. CrowdSec
3. I do have SSL implemented

I still see the below when I run the server and monitor using sngrep. Please direct me on a way to secure my server or understand if this is something to worry about?

^Idx Method SIP From SIP To Msgs Source Destination Call State
\[ ] 154 OPTIONS asterisk\@go-host-ip:5 godialler.hexiga.agency 2 go-host-ip:5070 go-host-ip:5060
\[ ] 155 INVITE 903129994000\@207.180.192. 700048422032120\@207.180.1 2 138.124.60.132:60234 go-host-ip:5060 REJECTED
\[ ] 156 INVITE 12345\@go-host-ip 6000421233015202\@207.180. 1 217.156.123.26:55721 go-host-ip:5060 CALL SETUP
\[ ] 157 OPTIONS asterisk\@go-host-ip:5 godialler.hexiga.agency 2 go-host-ip:5070 go-host-ip:5060
\[ ] 158 INVITE 12345\@go-host-ip 17900421233015202\@207.180 1 217.156.123.26:54702 go-host-ip:5060 CALL SETUP
\[ ] 159 INVITE 12345\@go-host-ip 0200421233015202\@207.180. 1 217.156.123.26:59619 go-host-ip:5060 CALL SETUP
\[ ] 160 OPTIONS asterisk\@go-host-ip:5 godialler.hexiga.agency 2 go-host-ip:5070 go-host-ip:5060
\[ ] 161 INVITE 1001\@go-host-ip 003905119900432\@207.180.1 2 77.110.114.15:64259 go-host-ip:5060 REJECTED"

No data to display

Actions
Copy link

Also available in: Atom PDF

Go to top