<div dir="ltr">Hi<div><br></div><div>Probably somebody is trying to hack your system, you should block that ip on your firewall.</div><div><br></div><div>Regards</div></div><div class="gmail_extra"><br><div class="gmail_quote">On Wed, Aug 29, 2018 at 9:34 AM, sean darcy <span dir="ltr"><<a href="mailto:seandarcy2@gmail.com" target="_blank">seandarcy2@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">I'm getting invites to very high ports every 30 seconds from a particular ip address:<br>
<br>
Retransmitting #10 (NAT) to <a href="http://5.199.133.128:52734" rel="noreferrer" target="_blank">5.199.133.128:52734</a>:<br>
SIP/2.0 401 Unauthorized<br>
Via: SIP/2.0/UDP 0.0.0.0:52734;branch=z9hG4bK12<wbr>07255353;received=5.199.133.<wbr>128;rport=52734<br>
From: <<a href="mailto:sip%3A37120116780191250@67.80.191.250" target="_blank">sip:37120116780191250@67.80.1<wbr>91.250</a>>;tag=1872048972<br>
To: <<a href="mailto:sip%3A3712011972592181418@67.80.191.250" target="_blank">sip:3712011972592181418@67.80<wbr>.191.250</a>>;tag=as3a52e748<br>
Call-ID: 1504207870-295758084-609228182<br>
CSeq: 1 INVITE<br>
.......<br>
WARNING[150318]: chan_sip.c:4127 retrans_pkt: Timeout on 1504207870-295758084-609228182<wbr>...<br>
<br>
I thought invites had to go to port 5060 or so. I don't understand why somebody (let's assume a bad guy) is trying ports above 50000.<br>
<br>
sean<br>
<br>
<br>
-- <br>
______________________________<wbr>______________________________<wbr>_________<br>
-- Bandwidth and Colocation Provided by <a href="http://www.api-digital.com" rel="noreferrer" target="_blank">http://www.api-digital.com</a> --<br>
<br>
Astricon is coming up October 9-11!  Signup is available at: <a href="https://www.asterisk.org/community/astricon-user-conference" rel="noreferrer" target="_blank">https://www.asterisk.org/commu<wbr>nity/astricon-user-conference</a><br>
<br>
Check out the new Asterisk community forum at: <a href="https://community.asterisk.org/" rel="noreferrer" target="_blank">https://community.asterisk.org<wbr>/</a><br>
<br>
New to Asterisk? Start here:<br>
     <a href="https://wiki.asterisk.org/wiki/display/AST/Getting+Started" rel="noreferrer" target="_blank">https://wiki.asterisk.org/wik<wbr>i/display/AST/Getting+Started</a><br>
<br>
asterisk-users mailing list<br>
To UNSUBSCRIBE or update options visit:<br>
  <a href="http://lists.digium.com/mailman/listinfo/asterisk-users" rel="noreferrer" target="_blank">http://lists.digium.com/mailma<wbr>n/listinfo/asterisk-users</a></blockquote></div><br></div>