Spam (I think)

Asterisk Asterisk Support
1

The below looks to me like someone spamming looking for an extension - maybe a hack attempt. Am I correct?

[Mar 18 19:53:31] NOTICE[2686] chan_sip.c: Call from '' (178.255.225.129:5060) to extension '9810441212791845' rejected because extension not found in context 'incoming'. [Mar 18 19:53:32] NOTICE[2686] chan_sip.c: Call from '' (178.255.225.129:5060) to extension '+9810441212791825' rejected because extension not found in context 'incoming'. [Mar 18 19:53:34] NOTICE[2686] chan_sip.c: Call from '' (178.255.225.129:5060) to extension '999441212791835' rejected because extension not found in context 'incoming'. [Mar 18 19:53:35] NOTICE[2686] chan_sip.c: Call from '' (178.255.225.129:5060) to extension '999900441212791845' rejected because extension not found in context 'incoming'. [Mar 18 19:53:37] NOTICE[2686] chan_sip.c: Call from '' (178.255.225.129:5060) to extension '9999011441212791825' rejected because extension not found in context 'incoming'. [Mar 18 19:53:39] NOTICE[2686] chan_sip.c: Call from '' (178.255.225.129:5060) to extension '1#441212791835' rejected because extension not found in context 'incoming'. [Mar 18 19:53:40] NOTICE[2686] chan_sip.c: Call from '' (178.255.225.129:5060) to extension '2#441212791845' rejected because extension not found in context 'incoming'. [Mar 18 19:53:42] NOTICE[2686] chan_sip.c: Call from '' (178.255.225.129:5060) to extension '3#441212791825' rejected because extension not found in context 'incoming'. [Mar 18 19:53:43] NOTICE[2686] chan_sip.c: Call from '' (178.255.225.129:5060) to extension '4#441212791835' rejected because extension not found in context 'incoming'. [Mar 18 19:53:45] NOTICE[2686] chan_sip.c: Call from '' (178.255.225.129:5060) to extension '1#011441212791845' rejected because extension not found in context 'incoming'. [Mar 18 19:53:47] NOTICE[2686] chan_sip.c: Call from '' (178.255.225.129:5060) to extension '2#011441212791825' rejected because extension not found in context 'incoming'. [Mar 18 19:53:48] NOTICE[2686] chan_sip.c: Call from '' (178.255.225.129:5060) to extension '441212791835' rejected because extension not found in context 'incoming'.

2

Looks like someone’s probing your system.

3

you can use fail2ban to automatically deny this attacks .

4

But you shouldn’t have allowguest enabled, in the first place.

Also, this is not spam, by any normal definition of the term on the internet.

5

Ok thanks. I’ve turned off allowguest.

That just affects anyone with no ID (Call from ‘’) does it?

6

Anyone with no match in sip.conf (etc.).