SIP Attack : 23.95.128.74 / 198.23.190.58 / 5.135.0.16 / 198.12.68.114

[FredR]

# grep "rejected because extension not found in context 'anonymous'" /var/log/asterisk/full |awk '{print $8}' | sed 's/:/ /g' |awk '{print $2}' | sort -n | uniq -c
    224 23.95.128.74
      6 185.243.5.63
      1 192.3.140.22
   1118 198.23.190.58
      1 199.188.103.10

[FredR]

firewall-cmd --add-rich-rule=“rule family=ipv4 source address=23.95.128.74 reject” --permanent
firewall-cmd --add-rich-rule=“rule family=ipv4 source address=198.23.190.58 reject” --permanent
firewall-cmd --add-rich-rule=“rule family=ipv4 source address=5.135.0.16 reject” --permanent
firewall-cmd --reload