電訊茶室's Archiver

hklkf 發表於 2013-11-23 04:05

Elastix hack

today check elastix logs :'( other ip hack to my elastix

[attach]2960[/attach]

alang 發表於 2013-11-23 15:16

Don't expose any ports on your Asterisk server to the Internet.

電腦超人 發表於 2013-11-23 16:00

又是巴基斯坦那邊......

最近那邊好像有不少入侵人家的VoIP Server跡象......
我的log中有不少也是那邊的......

浮雲1965 發表於 2013-12-2 12:10

有沒有裝fail2ban?

浮雲1965 發表於 2013-12-2 12:37

我看了我的log, 是不是也是有人想試我的呢?
                
[2013-12-02 04:54:01] NOTICE[3425][C-00000e54] chan_sip.c: Failed to authenticate device test<sip:test@xxx.xxx.xxx.xxx>;tag=4e5bffdf
                         
[2013-12-02 04:54:04] NOTICE[3425][C-00000e55] chan_sip.c: Failed to authenticate device test<sip:test@xxx.xxx.xxx.xxx>;tag=b0a863cb
                         
[2013-12-02 04:54:05] NOTICE[3425][C-00000e55] chan_sip.c: Failed to authenticate device test<sip:test@xxx.xxx.xxx.xxx>;tag=b0a863cb
                         
[2013-12-02 04:54:07] NOTICE[3425][C-00000e56] chan_sip.c: Failed to authenticate device test<sip:test@xxx.xxx.xxx.xxx>;tag=9f1bc731
                         
[2013-12-02 04:54:08] NOTICE[3425][C-00000e57] chan_sip.c: Failed to authenticate device test<sip:test@xxx.xxx.xxx.xxx>;tag=27a3cdef
                         
[2013-12-02 04:54:11] NOTICE[3425][C-00000e58] chan_sip.c: Failed to authenticate device test<sip:test@xxx.xxx.xxx.xxx>;tag=c2357353
                         
[2013-12-02 04:54:12] NOTICE[3425][C-00000e59] chan_sip.c: Failed to authenticate device test<sip:test@xxx.xxx.xxx.xxx>;tag=7de7ca06
                         
[2013-12-02 04:54:14] NOTICE[3425][C-00000e5a] chan_sip.c: Failed to authenticate device test<sip:test@xxx.xxx.xxx.xxx>;tag=18821cab
                         
[2013-12-02 04:54:17] NOTICE[3425][C-00000e5b] chan_sip.c: Failed to authenticate device test<sip:test@xxx.xxx.xxx.xxx>;tag=9975c9f2

上面的ip我×掉了,它是隔一段時間就出現一堆連續的5-6次。

Qnewbie 發表於 2013-12-2 17:28

[b]回復 [url=http://www.telecom-cafe.com/forum/redirect.php?goto=findpost&pid=36334&ptid=6003]5#[/url] [i]浮雲1965[/i] [/b]


    Yes, you are on the their target list. Block it!

hklkf 發表於 2013-12-2 23:37

[b]回復 [url=http://www.telecom-cafe.com/forum/redirect.php?goto=findpost&pid=36333&ptid=6003]4#[/url] [i]浮雲1965[/i] [/b]


    how to set fail2ban???:funk:

hklkf 發表於 2013-12-3 00:25

now
`i will disable elastix admin login :lol ,if hack my admin login will show[attach]2994[/attach]

浮雲1965 發表於 2013-12-3 13:23

我目前的admin login是有set ip table的,只能固定的某ip可以登入。
這樣安全了嗎?

七彩小生 發表於 2013-12-15 17:51

唔想死的話, dont expose your http or https port to outside.

hklkf 發表於 2013-12-18 19:10

i blocked  some function for elastix now is ok

頁: [1]

Powered by Discuz! Archiver 7.2  © 2001-2009 Comsenz Inc.