Hello from Finland!
First, Thank you for your awesome software! I have been using it couple of months now and it's working great.
I have the server installed on my vps server, my gps tracker is xexun xt-009 and I'm using Litvak's UI mod.
Today I noticed some strange things in my traccar server logs..
There are unknown IP's, ports and LONG hex strings, I checked couple of IPs in http://whatismyipaddress.com site and it says locations to Germany, France, Netherlands, Russia etc..
I know that my tracker is using port 5006, but in those IPs ports are very different like 5082, 5084, 5085 etc..
And last, very strange HEX strings, I decoded one with your site's decoder.. and I get this result.
OPTIONS sip:100@91.239.64.126 SIP/2.0
Via: SIP/2.0/UDP 127.0.1.1:5107;branch=z9hG4bK-2788896971;rport
Content-Length: 0
From: "sipvicious"<sip:100@1.1.1.1>;tag=3562656634303765313364320134323337383331333239
Accept: application/sdp
User-Agent: friendly-scanner
To: "sipvicious"<sip:100@1.1.1.1>
Contact: sip:100@127.0.1.1:5107
CSeq: 1 OPTIONS
Call-ID: 1099572618165430920716788
Max-Forwards: 70
Is somebody hacking my server or what is that?
Best Regards!
Someone is probably using port-scanning tools to search for vulnerabilities. I don't think it's targeted specifically your server. You can just disable port that those messages are coming to if you are not using it.
Ok, thanks! I'll do just that. :)
Hello from Finland!
First, Thank you for your awesome software! I have been using it couple of months now and it's working great.
I have the server installed on my vps server, my gps tracker is xexun xt-009 and I'm using Litvak's UI mod.
Today I noticed some strange things in my traccar server logs..
There are unknown IP's, ports and LONG hex strings, I checked couple of IPs in http://whatismyipaddress.com site and it says locations to Germany, France, Netherlands, Russia etc..
I know that my tracker is using port 5006, but in those IPs ports are very different like 5082, 5084, 5085 etc..
And last, very strange HEX strings, I decoded one with your site's decoder.. and I get this result.
Is somebody hacking my server or what is that?
Best Regards!