Error [CM102001] In activity log multiple times a day

Status
Not open for further replies.

NATVoip

Bronze Partner
Joined
Aug 26, 2022
Messages
8
Reaction score
1
Hello, im getting these errors in the activity log often from an instance that is hosted in AWS.
Also, i noticed it looks like the log in coming from an Avaya phone, but we dont use any Avaya phones. I just thought that was interesting.
Any thoughts on this? (The IPs are examples)

01/11/2023 6:51:24 AM - [CM102001]: Authentication failed for AuthFail Recv Req REGISTER from 188.134.42.102:58266 tid=623309300 Call-ID=1871775836-872662277-1767064110: REGISTER sip:3.101.15.102 SIP/2.0 Via: SIP/2.0/UDP 10.120.204.25:58266;branch=z9hG4bK623309300;received=188.134.42.102 Max-Forwards: 70 Contact: <sip:[email protected]:58266> To: <sip:[email protected]> From: <sip:[email protected]>;tag=416932384 Call-ID: 1871775836-872662277-1767064110 CSeq: 2 REGISTER Proxy-Authorization: Digest username="805",uri="sip:3.101.24.102",algorithm=MD5,realm="3CXPhoneSystem",nonce="414d535963beccec14:a19f074adbac8f5eb7e6e470033d5973",response="07193d0f7f8a05be52d6d3998c9bc3a3" User-Agent: Avaya IP Phone 1120E Content-Length: 0 ; Reason: Credentials don't match, check that authorization-ID and password match the ones in extension settings
 
An Avaya phone was used in an attempt to register against your 3CX but failed.

Reason: Credentials don't match, check that authorization-ID and password match the ones in extension settings
Basically, anything on the internet is susceptible to bruce force attacks.
 
  • Like
Reactions: TheodorosG_3CX
Status
Not open for further replies.

Forum statistics

Threads
111,974
Messages
590,081
Members
164,899
Latest member
mazet