Unknown connection attempts to 207.246.119.209 UDP-Port 3478 (STUN)


#1

Some (perhaps 20) of our (not all, with different firmware) GXP2130 (100+) attempts to register on an STUN-Server @207.246.119.209.
But nowhere in the config-dump i found this server. What’s going on?


#2

Look in the phones or PBX for a stun server like stun.ipvideotalk.com. These should not be registration attempts, but rather queries to determine the public IP of the router they sit behind.


#3

We habe dumped the config file. No entry for a stun server. Out PBX is located in our internal lan, so we do not neerd any stun server.


#4

Where your PBX/Phone is located is not necessarily a factor. It is a question of whether the PBX has a need to know what the public IP is so it can communicate correctly with remote phones or providers and tell them how to reach back to the PBX/phone for SIP messaging. So, it is a question of where or if any external needs and if there is a static public IP or FQDN populated in the NAT settings of the PBX/
phone.

Not knowing more of the situation, it’s all i can offer.


#5

Saw a ton of these recently. GrandStream phones are phoning home.