570 entries from-sip-external

@shampie wrote:

I am not sure which board to post this on.
Asterisk version: 13.12.1
Freeobx version: 13.0.190.11

I was getting quite some from-sip-external notifications in my logs (it has stopped since).
These entries appeared every 3-5minutes.
i thought this to be some sort of attack but I am not quite understanding how I should read this. If it was an attack, how can I mitigate it in the future? (I've seen nothing else like this in the logs)

asterisk/cdr-csv/Master.csv

   line:42777:"","2324","s","from-sip-external","""2324"" <2324>","SIP/IPADDRESSHIDDEN-00000051","","Congestion" ,"5","2017-05-11 16:37:30","2017-05-11 16:37:30","2017-05-11 16:37:43",12,12,"ANSWERED","DOCUMENTATION","1494520650.545",""
    ....>
    568 entries later:
    <----
    line:43682:"","2324","s","from-sip-external","""2324"" <2324>","SIP/IPADDRESSHIDDEN-000003f6","","Congestion"   ,"5","2017-05-12 22:45:48","2017-05-12 22:45:48","2017-05-12 22:46:00",12,12,"ANSWERED","DOCUMENTATION","1494629148.7071",""

Thank you for your time and expertise!

Posts: 2

Participants: 2

Read full topic