Probably more a question for asterisk-users. However, any Asterisk box on the internet will be attached constantly. I?d recommend some sort of fail to ban script to cut down on the re-attempts. Norman Franke Answering Service for Directors, Inc. www.myasd.com <http://www.myasd.com/> > On Oct 1, 2015, at 4:15 AM, Markus Kovanen <markus.kovanen at nettitieto.fi> wrote: > > Hi, > > Could anyone give me some specifics why i am seeing a lot of these kind of attack attemps on my asterisk log and what kind of attack this is? Should i be worried? > > -- end of packet. > [2015-10-01 02:27:53] ERROR[2562] pjsip: sip_transport. Error processing 429 bytes packet from UDP 146.0.73.14:57944 : PJSIP syntax error exception when parsing 'Co > ntact' header on line 4 col 11: > REGISTER sip:xxx.xxx.xxx.xxx:5060 SIP/2.0 > Via: SIP/2.0/UDP 146.0.73.14:57944;branch=z9hG4bK610f49168c4f609be09b7cdba3060815eb0bb516e23d1a0d3165409d761b78 > Call-id: 206dbbcc476ab1413b663659b5e63d00 > Contact: *C*# <sip:*C*#@146.0.73.14:57944> > Cseq: 1 REGISTER > Expires: 1800 > From: *C*# <sip:*C*#@xxx.xxx.xxx.xxx:5060>;tag=52545f9b5db4f92d6eb52d4217d92bce > Max-forwards: 70 > To: *C*# <sip:*C*#@xxx.xxx.xxx.xxx:5060> > Content-length: 0 > > > -Markus Kovanen > > _______________________________________________ > Visit our blog: http://blog.pjsip.org > > pjsip mailing list > pjsip at lists.pjsip.org > http://lists.pjsip.org/mailman/listinfo/pjsip_lists.pjsip.org -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.pjsip.org/pipermail/pjsip_lists.pjsip.org/attachments/20151001/78b64ce4/attachment.html>
