What are these in my tracker-server.log?

HendriXXX9 years ago

Hello from Finland!

First, Thank you for your awesome software! I have been using it couple of months now and it's working great.
I have the server installed on my vps server, my gps tracker is xexun xt-009 and I'm using Litvak's UI mod.

Today I noticed some strange things in my traccar server logs..

There are unknown IP's, ports and LONG hex strings, I checked couple of IPs in http://whatismyipaddress.com site and it says locations to Germany, France, Netherlands, Russia etc..

I know that my tracker is using port 5006, but in those IPs ports are very different like 5082, 5084, 5085 etc..

And last, very strange HEX strings, I decoded one with your site's decoder.. and I get this result.

OPTIONS sip:100@91.239.64.126 SIP/2.0
Via: SIP/2.0/UDP 127.0.1.1:5107;branch=z9hG4bK-2788896971;rport
Content-Length: 0
From: "sipvicious"<sip:100@1.1.1.1>;tag=3562656634303765313364320134323337383331333239
Accept: application/sdp
User-Agent: friendly-scanner
To: "sipvicious"<sip:100@1.1.1.1>
Contact: sip:100@127.0.1.1:5107
CSeq: 1 OPTIONS
Call-ID: 1099572618165430920716788
Max-Forwards: 70

Is somebody hacking my server or what is that?

Best Regards!

Anton Tananaev9 years ago

Someone is probably using port-scanning tools to search for vulnerabilities. I don't think it's targeted specifically your server. You can just disable port that those messages are coming to if you are not using it.

HendriXXX9 years ago

Ok, thanks! I'll do just that. :)