@eagle wrote:
Someone is trying to hack SIP registrations into my new FreePBX, shouldn't Intrusion Detection be blocking them? When I look in the Intrusion Detection I can see it blocked one IP address but it's not this one.
[2016-08-05 14:07:18] NOTICE[13184]: chan_sip.c:23754 handle_response_peerpoke: Peer '101' is now Reachable. (90ms / 2000ms)
[2016-08-05 14:07:41] NOTICE[13184]: chan_sip.c:28347 handle_request_register: Registration from '555 <sip:555@x.x.x.x>' failed for '89.163.135.201:59023' - Wrong password
[2016-08-05 14:08:22] NOTICE[13184]: chan_sip.c:28347 handle_request_register: Registration from '622 <sip:622@x.x.x.x>' failed for '89.163.135.201:60393' - Wrong password
[2016-08-05 14:08:27] NOTICE[13184]: chan_sip.c:28347 handle_request_register: Registration from '722 <sip:722@x.x.x.x>' failed for '89.163.135.201:35272' - Wrong password
[2016-08-05 14:08:31] NOTICE[13184]: chan_sip.c:28347 handle_request_register: Registration from '321 <sip:321@x.x.x.x>' failed for '89.163.135.201:39926' - Wrong password
[2016-08-05 14:08:31] NOTICE[13184]: chan_sip.c:28347 handle_request_register: Registration from '120 <sip:120@x.x.x.x>' failed for '89.163.135.201:36683' - Wrong password
[2016-08-05 14:08:47] NOTICE[13184]: chan_sip.c:28347 handle_request_register: Registration from '1009 <sip:1009@x.x.x.x:5060>' failed for '89.163.135.201:35410' - Wrong password
[2016-08-05 14:08:49] NOTICE[13184]: chan_sip.c:28347 handle_request_register: Registration from '221 <sip:221@x.x.x.x>' failed for '89.163.135.201:42204' - Wrong password
[2016-08-05 14:08:55] NOTICE[13184]: chan_sip.c:28347 handle_request_register: Registration from '412 <sip:412@x.x.x.x>' failed for '89.163.135.201:55694' - Wrong password
[2016-08-05 14:09:30] NOTICE[13184]: chan_sip.c:28347 handle_request_register: Registration from '162 <sip:162@x.x.x.x>' failed for '89.163.135.201:34599' - Wrong password
[2016-08-05 14:09:57] NOTICE[13184]: chan_sip.c:28347 handle_request_register: Registration from '999 <sip:999@x.x.x.x>' failed for '89.163.135.201:58738' - Wrong password
[2016-08-05 14:10:46] NOTICE[13184]: chan_sip.c:28347 handle_request_register: Registration from '221 <sip:221@x.x.x.x:5060>' failed for '89.163.135.201:52741' - Wrong password
Posts: 3
Participants: 2