Skip to content

Phones dead, PBX unreachable, looks like a network attack

DDoS on SIP port happens, especially with open 5060 on a static IP.

Try this first

  1. 1Firewall: only allow provider IPs on ports 5060/5061
  2. 2fail2ban on PBX, ban IP after X failed REGISTERs
  3. 3Use TLS on 5061 instead of UDP 5060, fewer scan attacks
  4. 4DDoS protection at ISP or via cloud SBC

When to bring us in

Persistent DDoS? Temporarily fall back to mobile, then SBC behind anycast DDoS.

See also

None of the above fits?

Describe your situation below. We pass your input plus the steps you already saw to our AI and return tailored next-step advice. If it's too risky to DIY, we'll say so.

Who are you?

For the AI question we need your email and company, so we can follow up if the AI gets stuck, and to prevent abuse.

Limited to 2 questions per hour and 5 per day, kept lean so the AI stays useful. For more, contacting us directly works better for you and us.

Or skip the DIY entirely

Our Managed IT clients do not look these things up. One point of contact, a fixed monthly price, resolved within working hours.