Friendly-Scanner

[Wanderer]

Hi
I am experiencing an on going problem at the moment, our system keeps getting attacked by various using "friendly-scanner", although they are not getting access they are maxing my adsl bandwidth to 100%. I no sooner get rid of one then another starts.

REGISTER sip:10.25.50.6 SIP/2.0
Via: SIP/2.0/UDP 67.222.24.40:5114;branch=z9hG4bK-3613954783;rport=5114
Max-Forwards: 70
Contact: <sip:[email protected]>
To: "015" <sip:[email protected]>
From: "015" <sip:[email protected]>
Call-ID: 3284308801
CSeq: 1 REGISTER
Accept: application/sdp
User-Agent: friendly-scanner
Content-Length: 0

If anybody has any ideas I would be grateful.

Tim

 

[SY]

You need to ask your ISP to block this traffic because even if you block it on your router/firewall it will still consume bandwidth of ADSL connection.

Thanks

 

[Wanderer]

Hi Stepan

Sorry to say, been there done that, and been told there is nothing they can do.

Tim

 

[SY]

Hi Stepan

Sorry to say, been there done that, and been told there is nothing they can do.

Tim

Hi Tim,

In this case I can suggest to restrict traffic on your NAT/firewall to allow only trusted networks (locations of the remote extensions/VoIP providers) to communicate with PBX.

Thanks

 

[sigma1]

Not knowing what router you have, you could set your firewall to DROP these packets (meaning no reply) to save some bandwidth and appear stealth. eventually that may stop.

 

[Wanderer]

Hi
Deployed firewalls and all okay now.

Thanks all