Page 1 of 1

SIP Attacks

PostPosted: Mon Jul 05, 2021 2:11 pm
by zenithbsolutions
Hi,

I have a server that gets SIP attacks continuously. How to block them ?

NOTICE[2397]: chan_sip.c:28751 handle_request_register: Registration from '"300" <sip:300@XX.XX.XX.XX>' failed for '193.107.216.217:5409' - Wrong password

Installation - Standalone server - Vicibox Express Installation - ViciBox_v9.x86_64-9.0.3.iso

SVN

VERSION: 2.14-817a
BUILD: 210702-0848
© 2021 ViciDial Group

Re: SIP Attacks

PostPosted: Mon Jul 05, 2021 2:52 pm
by carpenox
Use my article on my blog

Re: SIP Attacks

PostPosted: Mon Jul 05, 2021 3:01 pm
by zenithbsolutions
Kindly share me the URL

Re: SIP Attacks

PostPosted: Mon Jul 05, 2021 3:58 pm
by carpenox
its in my signature below but here is the direct URL: https://cyburityllc.com/?p=1977

Re: SIP Attacks

PostPosted: Tue Jul 06, 2021 2:35 pm
by covarrubiasgg
Are you using the VB-firewall script ??

You SIP port should completely closed unless whitelisted or logged from VB-Firewall