chris_c_
Active Member
- Joined
- Aug 19, 2010
- Messages
- 509
- Reaction score
- 67
Persistent robo-hack attempts from germany and the baltic states.
On reboot, isn't the iptables firewall supposed to automatically activate ?
On reboot, isn't the iptables firewall supposed to automatically activate ?
Code:
[2016-09-01 19:42:05] NOTICE[9284] res_pjsip/pjsip_distributor.c: Request 'INVITE' from '"111" <sip:111@(ipbx server public ipv4 address)>' failed for '217.172.189.5:5104' (callid: b9c526e62df6564ad5fd6062b9f86d7e) - No matching endpoint found
[2016-09-01 19:42:05] NOTICE[9284] res_pjsip/pjsip_distributor.c: Request 'INVITE' from '"111" <sip:111@(ipbx server public ipv4 address)>' failed for '217.172.189.5:5104' (callid: b9c526e62df6564ad5fd6062b9f86d7e) - Failed to authenticate
[2016-09-01 19:48:57] VERBOSE[13578][C-00000074] pbx.c: Executing [011442032390179@from-sip-external:1] NoOp("SIP/(incrediblepbx ipv4)-00000055", "Received incoming SIP connection from unknown peer to 011442032390179") in new stack
[2016-09-01 19:48:57] VERBOSE[13578][C-00000074] pbx.c: Executing [011442032390179@from-sip-external:2] Set("SIP/(incrediblepbx ipv4)-00000055", "DID=011442032390179") in new stack
[2016-09-01 19:48:57] VERBOSE[13578][C-00000074] pbx.c: Executing [011442032390179@from-sip-external:3] Goto("SIP/(incrediblepbx ipv4)-00000055", "s,1") in new stack
[2016-09-01 19:48:57] VERBOSE[13578][C-00000074] pbx_builtins.c: Goto (from-sip-external,s,1)
[2016-09-01 19:48:57] VERBOSE[13578][C-00000074] pbx.c: Executing [s@from-sip-external:1] GotoIf("SIP/(incrediblepbx ipv4)-00000055", "0?checklang:noanonymous") in new stack
[2016-09-01 19:48:57] VERBOSE[13578][C-00000074] pbx_builtins.c: Goto (from-sip-external,s,5)
[2016-09-01 19:48:57] VERBOSE[13578][C-00000074] pbx.c: Executing [s@from-sip-external:5] Set("SIP/(incrediblepbx ipv4)-00000055", "TIMEOUT(absolute)=15") in new stack
[2016-09-01 19:48:57] VERBOSE[13578][C-00000074] func_timeout.c: Channel will hangup at 2016-09-01 19:49:12.726 EDT.
[2016-09-01 19:48:57] VERBOSE[13578][C-00000074] pbx.c: Executing [s@from-sip-external:6] Log("SIP/(incrediblepbx ipv4)-00000055", "WARNING,"Rejecting unknown SIP connection from 178.238.230.63"") in new stack
[2016-09-01 19:48:57] WARNING[13578][C-00000074] Ext. s: "Rejecting unknown SIP connection from 178.238.230.63"
[2016-09-01 19:48:57] VERBOSE[13578][C-00000074] pbx.c: Executing [s@from-sip-external:7] Answer("SIP/(incrediblepbx ipv4)-00000055", "") in new stack
[2016-09-01 19:48:58] VERBOSE[13578][C-00000074] pbx.c: Executing [s@from-sip-external:8] Wait("SIP/(incrediblepbx ipv4)-00000055", "2") in new stack
[2016-09-01 19:49:00] VERBOSE[13578][C-00000074] file.c: <SIP/(incrediblepbx ipv4)-00000055> Playing 'ss-noservice.gsm' (language 'en')
[2016-09-01 19:49:05] VERBOSE[13578][C-00000074] pbx.c: Executing [s@from-sip-external:10] PlayTones("SIP/(incrediblepbx ipv4)-00000055", "congestion") in new stack
[2016-09-01 19:49:05] VERBOSE[13578][C-00000074] pbx.c: Executing [s@from-sip-external:11] Congestion("SIP/(incrediblepbx ipv4)-00000055", "5") in new stack
[2016-09-01 19:49:10] VERBOSE[13578][C-00000074] pbx.c: Spawn extension (from-sip-external, s, 11) exited non-zero on 'SIP/(incrediblepbx ipv4)-00000055'
[2016-09-01 19:49:10] VERBOSE[13578][C-00000074] pbx.c: Executing [h@from-sip-external:1] Hangup("SIP/(incrediblepbx ipv4)-00000055", "") in new stack
[2016-09-01 19:49:10] VERBOSE[13578][C-00000074] pbx.c: Spawn extension (from-sip-external, h, 1) exited non-zero on 'SIP/(incrediblepbx ipv4)-00000055'
[2016-09-01 19:49:29] WARNING[18658] chan_sip.c: Retransmission timeout reached on transmission 87fbf9f2d5bcdb8c52185c8737d04112 for seqno 1 (Critical Response) -- See https://wiki.asterisk.org/wiki/display/AST/SIP+Retransmissions
Packet timed out after 32000ms with no response
[2016-09-01 19:53:01] NOTICE[10836] res_pjsip/pjsip_distributor.c: Request 'INVITE' from '"1001" <sip:1001@(incrediblepbx ipv4)>' failed for '217.172.189.5:5082' (callid: ab6ff91911077c4520d0b8bbee7951c6) - No matching endpoint found
[2016-09-01 19:53:01] NOTICE[10836] res_pjsip/pjsip_distributor.c: Request 'INVITE' from '"1001" <sip:1001@(incrediblepbx ipv4)>' failed for '217.172.189.5:5082' (callid: ab6ff91911077c4520d0b8bbee7951c6) - Failed to authenticate
[2016-09-01 19:53:01] NOTICE[8478] res_pjsip/pjsip_distributor.c: Request 'INVITE' from '"1001" <sip:1001@(incrediblepbx ipv4)>' failed for '217.172.189.5:5082' (callid: ab6ff91911077c4520d0b8bbee7951c6) - Failed to authenticate
[2016-09-01 20:13:55] ERROR[18610] pjproject: sip_transport. Error processing 4000 bytes packet from UDP 188.214.128.126:43602 : PJSIP syntax error exception when parsing 'C' header on line 25 col 2:
REGISTER sip:(incrediblepbx ipv4) SIP/2.0
Via: SIP/2.0/UDP 188.214.128.126:43602;branch=z9hG4bKcf07e88f09458acd83820582f5701c7c41d8006eeb836bcc11ab783597a3c4
Call-id: eb6e6e5e675ea0de6d016974aa3a5635
Contact: 193 <sip:[email protected]:43602>
Expires: 1800
From: 193 <sip:193@(incrediblepbx ipv4)>;tag=75d3e5b785a0bb0fd0baf219edd6edba
Max-forwards: 70
To: 193 <sip:193@(incrediblepbx ipv4)>
Authorization: Digest username="193",realm="asterisk",nonce="1472775233/b4f6659e46453eb056669eb9c79659bf",uri="sip:(incrediblepbx ipv4)",response="b7a54d87114b91c4f8064ffb048adc34",opaque="6c407cd52e80d68f",cnonce="30ca983a",qop=auth,nc=00000001
Authorization: Digest username="193",realm="asterisk",nonce="1472775234/db2b75368fec70c83186d9ded12d22a8",uri="sip:(incrediblepbx ipv4)",response="ae98ebe86f49092e8d837ff8c1921b88",opaque="408377f4573e99fb",cnonce="c2afdbf2",qop=auth,nc=00000001
Authorization: Digest username="193",realm="asterisk",nonce="1472775235/e1ef77fe5be6f8ec1dc819d706545359",uri="sip:(incrediblepbx ipv4)",response="0b7ec6d19554f0f33848e6211762a48d",opaque="2f066a46728dfed8",cnonce="64c19cb2",qop=auth,nc=00000001
Authorization: Digest username="193",realm="asterisk",nonce="1472775235/e1ef77fe5be6f8ec1dc819d706545359"
[2016-09-01 20:13:56] ERROR[18610] pjproject: sip_transport. Error processing 4000 bytes packet from UDP 188.214.128.126:43602 : PJSIP syntax error exception when parsing 'C' header on line 25 col 2:
REGISTER sip:(incrediblepbx ipv4) SIP/2.0
Via: SIP/2.0/UDP 188.214.128.126:43602;branch=z9hG4bKcf07e88f09458acd83820582f5701c7c41d8006eeb836bcc11ab783597a3c4
Call-id: eb6e6e5e675ea0de6d016974aa3a5635
Contact: 193 <sip:[email protected]:43602>
Expires: 1800
From: 193 <sip:193@(incrediblepbx ipv4)>;tag=75d3e5b785a0bb0fd0baf219edd6edba
Max-forwards: 70
To: 193 <sip:193@(incrediblepbx ipv4)>
Authorization: Digest username="193",realm="asterisk",nonce="1472775233/b4f6659e46453eb056669eb9c79659bf",uri="sip:(incrediblepbx ipv4)",response="0c879a6ab7eacfab673328ce4141ec0c",opaque="4bbce2f02cb6d38e",cnonce="47dddf50",qop=auth,nc=00000001
Authorization: Digest username="193",realm="asterisk",nonce="1472775234/db2b75368fec70c83186d9ded12d22a8",uri="sip:(incrediblepbx ipv4)",response="9477c496da98b43480e3d1f5c1deec00",opaque="0cd89f765670d2a0",cnonce="2867ee16",qop=auth,nc=00000001
Authorization: Digest username="193",realm="asterisk",nonce="1472775235/e1ef77fe5be6f8ec1dc819d706545359",uri="sip:(incrediblepbx ipv4)",response="0b7ec6d19554f0f33848e6211762a48d",opaque="2f066a46728dfed8",cnonce="64c19cb2",qop=auth,nc=00000001
Authorization: Digest username="193",realm="asterisk",nonce="1472775235/e1ef77fe5be6f8ec1dc819d706545359"
[2016-09-01 20:13:57] WARNING[18658] chan_sip.c: Retransmission timeout reached on transmission 8c6edcf233b6ca114578f3fdc70a252b for seqno 1 (Critical Response) -- See https://wiki.asterisk.org/wiki/display/AST/SIP+Retransmissions
Packet timed out after 32000ms with no response
[2016-09-01 20:13:58] ERROR[18610] pjproject: sip_transport. Error processing 4000 bytes packet from UDP 188.214.128.126:43602 : PJSIP syntax error exception when parsing 'C' header on line 25 col 2:
REGISTER sip:(incrediblepbx ipv4) SIP/2.0
Via: SIP/2.0/UDP 188.214.128.126:43602;branch=z9hG4bKcf07e88f09458acd83820582f5701c7c41d8006eeb836bcc11ab783597a3c4
Call-id: eb6e6e5e675ea0de6d016974aa3a5635
Contact: 193 <sip:[email protected]:43602>
Expires: 1800
From: 193 <sip:193@(incrediblepbx ipv4)>;tag=75d3e5b785a0bb0fd0baf219edd6edba
Max-forwards: 70
To: 193 <sip:193@(incrediblepbx ipv4)>
Authorization: Digest username="193",realm="asterisk",nonce="1472775233/b4f6659e46453eb056669eb9c79659bf",uri="sip:(incrediblepbx ipv4)",response="0c879a6ab7eacfab673328ce4141ec0c",opaque="4bbce2f02cb6d38e",cnonce="47dddf50",qop=auth,nc=00000001
Authorization: Digest username="193",realm="asterisk",nonce="1472775233/b4f6659e46453eb056669eb9c79659bf",uri="sip:(incrediblepbx ipv4)",response="e2e2d894b54726650fd127f5be7fb94e",opaque="7f04076728757215",cnonce="16a478b4",qop=auth,nc=00000001
Authorization: Digest username="193",realm="asterisk",nonce="1472775234/db2b75368fec70c83186d9ded12d22a8",uri="sip:(incrediblepbx ipv4)",response="ae98ebe86f49092e8d837ff8c1921b88",opaque="408377f4573e99fb",cnonce="c2afdbf2",qop=auth,nc=00000001
Authorization: Digest username="193",realm="asterisk",nonce="1472775234/db2b75368fec70c83186d9ded12d22a8",uri="sip:(incrediblepbx ipv4)",response="31f3140264cccb2eb01d67b2d0596344",opaque="426f5c21222cf5f4",cnonce="f17e1fdb",qop=auth,nc=00000001
[2016-09-01 20:22:12] NOTICE[17339] chan_skinny.c: Starting Skinny session from 213.202.233.58
[2016-09-01 20:22:12] WARNING[17339] chan_skinny.c: Skinny packet too large (542393675 bytes), max length(2000 bytes)
[2016-09-01 20:22:12] NOTICE[17339] chan_skinny.c: Skinny Session returned: Success
[2016-09-01 20:22:12] NOTICE[17339] chan_skinny.c: Ending Skinny session from unknown at 213.202.233.58