AWS2P, all of our PBXs have 5060 closed other than our SIP Providers, as previously mentioned if you are hosting in the cloud the IP ranges of these providers are known and are actively targeted.
We have seen a fresh PBX attached within 24 hours. You should probably look into alternate methods...