SOLVED there are a lot of strange sip accounts, where are they coming from? how to prevent these intruders

[vuthy09]

 

[rabbidiesel]

Hi,

You don't have to worry about these registration attempts.
Because your system is open to the web, there are bots trying to get access. What Event Guard does is see that these attempts are illegitimate, and it block the IP. Now what you are seeing is the list of blocked IP’s.

The reason you need it (Event Guard Interface) is in case you put in the wrong info on a device, and it, the IP gets blocked.
You will be able to unblock from Event Guard.
Hope this helps.

If anyone has anything else to add, or any corrections, please don’t hesitate to post it.

Best Regards,

 

[mat1010]

To reduce the noise you could think about using https://voipbl.org/ to automatically block many of them on network level before they can even reach your PBX - but in general those requests are nothing to worry about.