[Spce-user] How do I block this hack attempt?

[Daniel Grotti]

Hi,
you can have a look at : 
https://www.linkedin.com/pulse/securing-your-ngcp-against-sip-attacks-daniel-grotti?trk=mp-reader-card
Quite old, but still valid.

In your case looks like users are trying to authenticate, failing more 
then 3 times, so they got banned.
I think you may find some answers in the link above.

Cheers,
Daniel

On 08/16/2016 02:04 PM, William Hilsum wrote:
>
> I didn’t get any confirmation yesterday, so, trying to resend…
>
> Hi,
>
> I have just looked at the security banks section and I notice that 
> there are no banned IPs, but, loads of entries for 
> “random-4-digits at PBX-IP”.
>
> For example, take a look here - http://imgur.com/a/hA9Uz 
> <http://imgur.com/a/hA9Uz>
>
> Can anyone advise on any security best practice I should set up?
>
> Thanks,
>
> William
>
>
>
> _______________________________________________
> Spce-user mailing list
> Spce-user at lists.sipwise.com
> https://lists.sipwise.com/listinfo/spce-user

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.sipwise.com/pipermail/spce-user_lists.sipwise.com/attachments/20160816/a836d66f/attachment-0001.html>