How to stop hack attempts, and or fake calls

General Help
1

I’m getting some calls showing up on my fpbx cdr that are ficticious/hack attempts. I thought these would get stopped by fail 2 ban or the responsive firewall & the fact that I have turned off allow anonymous inbound sip calls, but yet it is still happening. How do I stop these?

Here’s my pbx info:
freepbx 13.0.197

Here’s the fake calls from the cdr:
2019-07-23 06:23:08 1563880988.82578 100 Congestion s [from-sip-external] ANSWERED 00:12
2019-07-23 06:18:25 1563880705.82577 666669521540 Congestion s [from-sip-external] ANSWERED 00:12
2019-07-23 05:23:34 1563877414.82576 666669521540 Congestion s [from-sip-external] ANSWERED 00:12
2019-07-23 04:38:09 1563874689.82575 666669521540 Congestion s [from-sip-external] ANSWERED 00:12
2019-07-23 03:52:45 1563871965.82574 666669521540 Congestion s [from-sip-external] ANSWERED 00:12
2019-07-23 02:59:49 1563868789.82573 666669521540 Congestion s [from-sip-external] ANSWERED 00:12
2019-07-23 01:54:52 1563864892.82572 1611 Congestion s [from-sip-external] ANSWERED 00:12
2019-07-23 01:42:16 1563864136.82571 1611 Answer s [from-sip-external] ANSWERED 00:00
2019-07-23 01:29:14 1563863354.82570 601 Answer s [from-sip-external] ANSWERED 00:00
2019-07-23 01:16:19 1563862579.82569 601 Congestion s [from-sip-external] ANSWERED 00:12
Call Date Recording System CallerID Outbound CallerID DID App Destination Disposition Duration Userfield Account CDR Table CDR Graph
2019-07-23 01:13:06 1563862386.82568 a’or’3=3-- Congestion s [from-sip-external] ANSWERED 00:12
2019-07-23 01:06:53 1563862013.82567 a’or’3=3-- Congestion s [from-sip-external] ANSWERED 00:12
2019-07-23 01:03:44 1563861824.82566 601 Answer s [from-sip-external] ANSWERED 00:00
2019-07-23 01:01:28 1563861688.82565 a’or’3=3-- Congestion s [from-sip-external] ANSWERED 00:12
2019-07-23 00:56:34 1563861394.82564 a’or’3=3-- Congestion s [from-sip-external] ANSWERED 00:12
2019-07-23 00:50:34 1563861034.82563 601 Answer s [from-sip-external] ANSWERED 00:00
2019-07-23 00:50:15 1563861015.82562 a’or’3=3-- Congestion s [from-sip-external] ANSWERED 00:12
2019-07-23 00:44:27 1563860667.82561 a’or’3=3-- Congestion s [from-sip-external] ANSWERED 00:12
2019-07-23 00:38:10 1563860290.82560 a’or’3=3-- Congestion s [from-sip-external] ANSWERED 00:12
2019-07-23 00:37:43 1563860263.82559 601 Answer s [from-sip-external] ANSWERED 00:00

2

These are not hack attempts, any more than someone ringing your doorbell is a break-in attempt. But you can disable it by disabling Anon calls and SIP Guests in Asterisk SIP settings, and then ensuring your Firewall is as tight as it can be.

3

Thank you for your wisdom Lorne, I just hadn’t disabled SIP Guests yet. I have turned it off now and will see if that does it.

4

That did it, no more Guest calls. Thanks

5

This topic was automatically closed 7 days after the last reply. New replies are no longer allowed.