Solved PBX has dropped a message with 'User-Agent:

[TierList123]

Hi There,

I have the following error in the logs pop up often:

26-Jun-2020 13:50:37.451 PBX has dropped a message with 'User-Agent: friendly-scanner' from IP 104.238.222.52 because it is on blocked UAs list

26-Jun-2020 12:03:20.306 PBX has dropped a message with 'User-Agent: friendly-scanner' from IP 104.238.222.52 because it is on blocked UAs list

What will be the cause of this?

 

[AWS2P]

If this is not an IP coming from your connected devices then it's a hack attempt stopped from 3cx security features

 

[cobaltit]

I'd recommend going through the 3CX training as this is one of the topics covered.

 

[TierList123]

I'd recommend going through the 3CX training as this is one of the topics covered.

Gone through that all a year or so ago. Can't remember this specific thing being covered.

 

[kent3]

Use 3CX's IP blacklist feature to stop any known baddies from entering:

 

[TierList123]

Use 3CX's IP blacklist feature to stop any known baddies from entering:

View attachment 16724

Hi @kent3 thanks a lot for this heads up! Appreciate it!

 

[AWS2P]

this is not what 3CX ask to do in first step but you can also set your firewall rule for 5060 to be able to connect only with your sip provider IP , like this no more attempt, but of course if you run firewall checker it'll be red but with a known reason.

 

[TierList123]

this is not what 3CX ask to do in first step but you can also set your firewall rule for 5060 to be able to connect only with your sip provider IP , like this no more attempt, but of course if you run firewall checker it'll be red but with a known reason.

Thanks a lot will definitely check this out!

 

[JohnS_3CX]

Hi There,

I have the following error in the logs pop up often:

26-Jun-2020 13:50:37.451 PBX has dropped a message with 'User-Agent: friendly-scanner' from IP 104.238.222.52 because it is on blocked UAs list

26-Jun-2020 12:03:20.306 PBX has dropped a message with 'User-Agent: friendly-scanner' from IP 104.238.222.52 because it is on blocked UAs list

What will be the cause of this?

Hi,

There are some known user agents that the system rejects automatically by user agent, and in this case the log entry informs you that this happened.

This is nothing to worry about, it's just your PBX doing its job of keeping you safe and this is one of many measures used to block unwanted traffic.

 

[TierList123]

Hi,

There are some known user agents that the system rejects automatically by user agent, and in this case the log entry informs you that this happened.

This is nothing to worry about, it's just your PBX doing its job of keeping you safe and this is one of many measures used to block unwanted traffic.

Thanks a lot for the response, appreciate it!