Solved Malformed SIP request received: - unknown in logs

[Null]

Hello,
i have this message, is this some kind of brute force? Installation is new, latest version with Debian 9. This log bugs me, because I didn't see this error before...

04/17/2021 10:00:54 PM - Malformed SIP request received:
BadSip Recv Req REGISTER from 51.15.146.184:5062 tid=-1056892118 Call-ID=492043356138489514641592:
REGISTER sip:MY IP EDITED SIP/2.0
Via: SIP/2.0/UDP 51.15.146.184:5062;branch=EDITEDrport=5062
Max-Forwards: 70
Contact: None
To: "sipvicious"<sip:[email protected]>
From: "sipvicious"<sip:[email protected]>;tag=3563323464643465313363340131373733383835303530
Call-ID: 492043356138489514641592
CSeq: 1 REGISTER
Accept: application/sdp
User-Agent: pbxzaeem
Content-Length: 0

EDIT: just closed 5060 port only to my ISP, maybe this will help.

 

[VasilisV_3CX]

Hi @Null,

Yes this does look like a SIP scan by sipvicious. It's missing a contact which may be why it's appearing malformed.

 

[Null]

Ok, thanks @VasilisV_3CX. By looking to this request, do I need to make any changes right now?

 

[VasilisV_3CX]

Hi @Null,

The PBX will automatically block requests sent in rapid succession as apart of its security protocol. If you find the same request coming through periodically, you can blacklist the IP its coming from if it's the same IP address being used.

 

[Null]

Awesome! Thank you for your help in this case!

 

[VasilisV_3CX]

No problem Null, feel free to open a new thread if you run into any other problems!