alot of messae from audity logo someone try to access my 3cx??

[tspjoker]

i have a bunch of this message lately at my audity logo, even i removed sip trunk and still kept getting this?
anybody have problem with this?? any of ip address i dont recozined so???

07/19/2022 11:49:24 AM - [CM102001]: Authentication failed for AuthFail Recv Req REGISTER from 128.90.189.241:54894 tid=429231590 Call-ID=577406968-1145948267-128288388: REGISTER sip: SIP/2.0 Via: SIP/2.0/UDP 10.4.1.41:54894;branch=z9hG4bK429231590;received=128.90.189.241 Max-Forwards: 70 Contact: <sip:[email protected]:54894> To: <sip:> From: <sip:????????>;tag=734602946 Call-ID: 577406968-1145948267-128288388 CSeq: 2 REGISTER Proxy-Authorization: Digest username="816",uri="sip ",algorithm=MD5,realm="3CXPhoneSystem",nonce="414d535962d6eea397:adb126c26878addbdd41babf4c33370a",response="192f7f120d3af5ad492b03c1a9f41180" User-Agent: PolycomVVX-VVX_300-UA/4.1.6.4835 Content-Length: 0 ; Reason: Credentials don't match, check that authorization-ID and password match the ones in extension settings

07/19/2022 11:49:17 AM - [CM102001]: Authentication failed for AuthFail Recv Req REGISTER from 128.90.189.241:53793 tid=1158928759 Call-ID=279398219-325168245-1192382752: REGISTER sip: SIP/2.0 Via: SIP/2.0/UDP 10.4.1.41:53793;branch=z9hG4bK1158928759;received=128.90.189.241 Max-Forwards: 70 Contact: <sip:[email protected]:53793> To: <sip> From: <sip:>;tag=118571023 Call-ID: 279398219-325168245-1192382752 CSeq: 2 REGISTER Proxy-Authorization: Digest username="716",uri="sip:",algorithm=MD5,realm="3CXPhoneSystem",nonce="414d535962d6ee9c24:61ca63574d98c540777b35056be205b3",response="7bb951ca3dd9005a0cb3323f07bcb6ff" User-Agent: PolycomVVX-VVX_300-UA/4.1.6.4835 Content-Length: 0 ; Reason: Credentials don't match, check that authorization-ID and password match the ones in extension settings

 

[Charles_3CX]

Regarding the issue you mentioned, these are actual attempts to register to an extension from the Ip addresses mentioned (128.90.189.241), but are being blocked due to the 'Credentials don't match; check that authorization-ID and password match the ones in the extension settings.

These attempts are regular occurrences, and the 3cx system is equipped to deal with them, providing the configuration is secure by first making sure that all the extensions have strong passwords and following these simple steps from the excellent blog posts from our CISO, to ensure that the system is safe and secure.

https://www.3cx.com/blog/unified-communications/dont-be-that-guy-vol-1/
https://www.3cx.com/blog/unified-communications/dont-be-that-guy-vol-2/
https://www.3cx.com/blog/unified-communications/dont-be-that-guy-vol-3/
https://www.3cx.com/blog/unified-communications/dont-be-that-guy-vol-4/