Sure looks like it
Why I don't use SIP at all except on the LAN
I have two ( non AstLinux ) telephone customers with systems that have
SIP gateways for remote phones, and we had to change to non standard
ports to keep out the sipvicious scripts. One was so bad that the
provider had to change the customers IP address because the damn script
was so stupid it kept banging away even when there was never a response
Others have blocked whole ranges of IP addresses, especially from China,
Russia and Romania because of the attempts.
You may or may not have that option.
for PSTN VOIP access I select providers that support IAX. Perhaps not a
forever solution, but SIP is just to widespread and an easy target
Strong passwords and non numeric extensions also help
I don't believe you have the option, but fail2ban also is another tool
For remote AstLinux boxes I support, I have had to change the SSH port
as well because of these attempts
John Novack
David Kerr wrote:
Found in my log this evening...
Mar 3 19:39:39 pbx local0.notice asterisk[3257]: NOTICE[3324]: chan_sip.c:22461 in
handle_request_invite: Call from '' (95.130.23.40:5060
<http://95.130.23.40:5060>) to extension '94637683556325' rejected because
extension not found in context 'default'.
Mar 3 19:39:40 pbx local0.notice asterisk[3257]: NOTICE[3324]: chan_sip.c:22461 in
handle_request_invite: Call from '' (95.130.23.40:5060
<http://95.130.23.40:5060>) to extension '0442032989450' rejected because
extension not found in context 'default'.
Mar 3 19:39:43 pbx local0.notice asterisk[3257]: NOTICE[3324]: chan_sip.c:22461 in
handle_request_invite: Call from '' (95.130.23.40:5060
<http://95.130.23.40:5060>) to extension '00442032989450' rejected because
extension not found in context 'default'.
Mar 3 19:39:46 pbx local0.notice asterisk[3257]: NOTICE[3324]: chan_sip.c:22461 in
handle_request_invite: Call from '' (95.130.23.40:5060
<http://95.130.23.40:5060>) to extension '000442032989432' rejected because
extension not found in context 'default'.
Mar 3 19:39:49 pbx local0.notice asterisk[3257]: NOTICE[3324]: chan_sip.c:22461 in
handle_request_invite: Call from '' (95.130.23.40:5060
<http://95.130.23.40:5060>) to extension '0001442032989434' rejected because
extension not found in context 'default'.
Mar 3 19:39:52 pbx local0.notice asterisk[3257]: NOTICE[3324]: chan_sip.c:22461 in
handle_request_invite: Call from '' (95.130.23.40:5060
<http://95.130.23.40:5060>) to extension '001442032989432' rejected because
extension not found in context 'default'.
Mar 3 19:39:55 pbx local0.notice asterisk[3257]: NOTICE[3324]: chan_sip.c:22461 in
handle_request_invite: Call from '' (95.130.23.40:5060
<http://95.130.23.40:5060>) to extension '9442032989438' rejected because
extension not found in context 'default'.
Mar 3 19:39:58 pbx local0.notice asterisk[3257]: NOTICE[3324]: chan_sip.c:22461 in
handle_request_invite: Call from '' (95.130.23.40:5060
<http://95.130.23.40:5060>) to extension '900442032989438' rejected because
extension not found in context 'default'.
Mar 3 19:40:01 pbx local0.notice asterisk[3257]: NOTICE[3324]: chan_sip.c:22461 in
handle_request_invite: Call from '' (95.130.23.40:5060
<http://95.130.23.40:5060>) to extension '9011442032989450' rejected because
extension not found in context 'default'.
Mar 3 19:40:04 pbx local0.notice asterisk[3257]: NOTICE[3324]: chan_sip.c:22461 in
handle_request_invite: Call from '' (95.130.23.40:5060
<http://95.130.23.40:5060>) to extension '90442032989438' rejected because
extension not found in context 'default'.
Mar 3 19:40:07 pbx local0.notice asterisk[3257]: NOTICE[3324]: chan_sip.c:22461 in
handle_request_invite: Call from '' (95.130.23.40:5060
<http://95.130.23.40:5060>) to extension '011442032989438' rejected because
extension not found in context 'default'.
Mar 3 19:40:10 pbx local0.notice asterisk[3257]: NOTICE[3324]: chan_sip.c:22461 in
handle_request_invite: Call from '' (95.130.23.40:5060
<http://95.130.23.40:5060>) to extension '+00442032989452' rejected because
extension not found in context 'default'.
Mar 3 19:40:13 pbx local0.notice asterisk[3257]: NOTICE[3324]: chan_sip.c:22461 in
handle_request_invite: Call from '' (95.130.23.40:5060
<http://95.130.23.40:5060>) to extension '+011442032989450' rejected because
extension not found in context 'default'.
Mar 3 19:40:16 pbx local0.notice asterisk[3257]: NOTICE[3324]: chan_sip.c:22461 in
handle_request_invite: Call from '' (95.130.23.40:5060
<http://95.130.23.40:5060>) to extension '+0442032989431' rejected because
extension not found in context 'default'.
Mar 3 19:40:19 pbx local0.notice asterisk[3257]: NOTICE[3324]: chan_sip.c:22461 in
handle_request_invite: Call from '' (95.130.23.40:5060
<http://95.130.23.40:5060>) to extension '+900442032989453' rejected because
extension not found in context 'default'.
Mar 3 19:40:22 pbx local0.notice asterisk[3257]: NOTICE[3324]: chan_sip.c:22461 in
handle_request_invite: Call from '' (95.130.23.40:5060
<http://95.130.23.40:5060>) to extension '+9011442032989436' rejected because
extension not found in context 'default'.
Mar 3 19:40:25 pbx local0.notice asterisk[3257]: NOTICE[3324]: chan_sip.c:22461 in
handle_request_invite: Call from '' (95.130.23.40:5060
<http://95.130.23.40:5060>) to extension '+442032989438' rejected because
extension not found in context 'default'.
Mar 3 19:40:28 pbx local0.notice asterisk[3257]: NOTICE[3324]: chan_sip.c:22461 in
handle_request_invite: Call from '' (95.130.23.40:5060
<http://95.130.23.40:5060>) to extension '442032989436' rejected because
extension not found in context 'default'.
Someone is fishing for an asterisk server that will route
international calls. Make sure you are buttoned up tight. Should the
adaptive-ban firewall plugin have detected this? Doesn't appear to
have... maybe because the firewall let it through and it is asterisk
that rejected the request?
David
------------------------------------------------------------------------------
Virtualization& Cloud Management Using Capacity Planning
Cloud computing makes use of virtualization - but cloud computing
also focuses on allowing computing to be delivered as a service.
http://www.accelacomm.com/jaw/sfnl/114/51521223/
_______________________________________________
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users
Donations to support AstLinux are graciously accepted via PayPal to
pay...@krisk.org.
--
Dog is my Co-pilot
------------------------------------------------------------------------------
Virtualization & Cloud Management Using Capacity Planning
Cloud computing makes use of virtualization - but cloud computing
also focuses on allowing computing to be delivered as a service.
http://www.accelacomm.com/jaw/sfnl/114/51521223/
_______________________________________________
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users
Donations to support AstLinux are graciously accepted via PayPal to
pay...@krisk.org.
