Thank you for your prompt reply, but I think there is no bot because signaling on sip ports is firwalled and whitelisted only by ip. I think it’s related to our own customers…can it be possible?
Yes, that’s a common UTF8 problem in Yeti-Switch CdrWriter. Even if you only allow certain IPs, strange characters in SIP headers or customer IDs can still set it off. This includes smart quotes, letters from languages other than Latin, or tags that aren’t formatted correctly. A restart clears the loop for a short time, but the long-term solution is either to upgrade to the latest version of sems/Yeti that handles invalid UTF8 well or to filter and normalize incoming strings before they reach the database. If it keeps happening, adding a logging hook to find out which headers or fields are causing the invalid bytes usually helps find the person responsible.