Can anyone advise me please - I have a 3CX SIP VoiP system and constantly through today, Wednesday 6th May 20 I have had attempts to access the 3CX system from 3 x IP addresses which, ipabusedb.com, advises belong to Avast.
The 3 IP addresses are 5.62.61.1 London 5.62.63.21 Czechia and 52.62.62.233 London
Is there any need to be worried?
Thank you
Duncan
As from 21:12 GMT 5.62.62.233 joined the attempts, as quoted below
QUOTE
06/05/2020 21:12:09 - [CM102001]: Authentication failed for AuthFail Recv Req REGISTER from 5.62.63.37:1441 tid=a549a5bc-3e90-46fc-9859-b57ac9afdf94 Call-ID=cmykuhmirvqvxpnrwrqxjlruqnjixujwiteysbodkfodgllonc:
REGISTER sip:84.92.225.238 SIP/2.0
Via: SIP/2.0/UDP 100.120.132.134:5669;branch=z9hG4bKa549a5bc-3e90-46fc-9859-b57ac9afdf94;rport=1441;received=5.62.63.37
Max-Forwards: 70
Contact: sip:124@100.120.132.134:5669;rinstance=89b6688538cbf549
To: "124"sip:124@84.92.225.238
From: "124"sip:124@84.92.225.238;tag=gflolptd
Call-ID: cmykuhmirvqvxpnrwrqxjlruqnjixujwiteysbodkfodgllonc
CSeq: 2 REGISTER
Expires: 3600
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, SUBSCRIBE, NOTIFY, REFER, INFO, MESSAGE
Proxy-Authorization: Digest username=“124”,realm=“3CXPhoneSystem”,nonce=“414d535c14c3ab1955:2566b090d240bb5a381581b5d1512b68”,response=“7be681790fec1051b82d5ca556be0932”,uri=“sip:84.92.225.238”,algorithm=MD5
Supported: 100rel
User-Agent: Avaya
Content-Length: 0
END OF QUOTE