@andy_woolford wrote:
I have the firewall version 13.0.24 installed.
My logs are full of anonymous sip attacks trying to call random numbers which are rejected.
The IP addresses change often, but many attacks are from the same IP. In some cases there are many attempts from the same IP, but no attackers are being rate limited or blocked by the Responsive firewall.
I have resorted to manually blacklisting the CIDR range of persistent attackers and this has calmed things down a bit, but the attempts keep coming.
What should I be looking for to diagnose or fix this?
Posts: 1
Participants: 1