Re: [asterisk-users] Hacking

2019-06-18 Thread Jeff LaCoursiere
Our provisioning servers listen on a high numbered port.  We generally don't have any issues with scanning... Cheers, j On 6/18/19 7:18 AM, John Runyon wrote: Just to jump in on this, this just started happening to our system a couple days ago. (To the tune of 3GB of webserver access logs y

Re: [asterisk-users] Hacking

2019-06-18 Thread John Runyon
Just to jump in on this, this just started happening to our system a couple days ago. (To the tune of 3GB of webserver access logs yesterday) Our server gives them a 403 for /yealink/ (and a 404 for everything else) - given that they're still trying to bruteforce it, it looks like I'm gonna be chan

Re: [asterisk-users] Hacking

2019-06-17 Thread John Kiniston
On Sun, Jun 16, 2019 at 3:37 PM John T. Bittner wrote: > Anyone know how someone can hack an asterisk box and register with every > single account on the box. > > This box only has 3 accounts, with very complex passwords. Have VoIP > blacklist setup and fail2ban… > I've seen this happen when web

Re: [asterisk-users] Hacking

2019-06-16 Thread John T. Bittner
To: Asterisk Users Mailing List - Non-Commercial Discussion Subject: Re: [asterisk-users] Hacking John, There are a lot of factors at play for instance are you using a gui that has a known vlun? Is there mysql running on the box with a simple password? Perhaps they didnt hack your PBX but

Re: [asterisk-users] Hacking

2019-06-16 Thread Dovid Bender
: asterisk-users@lists.digium.comReply-to: asterisk-users@lists.digium.comSubject: [asterisk-users] Hacking Anyone know how someone can hack an asterisk box and register with every single account on the box. This box only has 3 accounts, with very complex passwords. Have VoIP blacklist setup and fail2ban

[asterisk-users] Hacking

2019-06-16 Thread John T. Bittner
Anyone know how someone can hack an asterisk box and register with every single account on the box. This box only has 3 accounts, with very complex passwords. Have VoIP blacklist setup and fail2ban... The hackers were able to make 2 calls to Cuba before my alerting system texted me. I am runni

Re: [asterisk-users] Hacking attempt, Asterisk 1.4

2014-02-20 Thread Gareth Blades
On 20/02/14 11:27, Brynjolfur Thorvardsson wrote: Hi all We have an Asterisk server that's been running for a few years now without problems. We have IPTables running, as well as fail2ban and have followed all the security recommendations we have found. Every few weeks we get an attack that

Re: [asterisk-users] Hacking attempt, Asterisk 1.4

2014-02-20 Thread A J Stiles
On Thursday 20 Feb 2014, Brynjolfur Thorvardsson wrote: > Every few weeks we get an attack that lasts about a minute or two, > resulting in our AGI script being overloaded. > > What happens is that somebody seems to be trying to connect from our server > – in my cdrs log I can see that they use a

[asterisk-users] Hacking attempt, Asterisk 1.4

2014-02-20 Thread Brynjolfur Thorvardsson
Hi all We have an Asterisk server that’s been running for a few years now without problems. We have IPTables running, as well as fail2ban and have followed all the security recommendations we have found. Every few weeks we get an attack that lasts about a minute or two, resulting in our AGI

[asterisk-users] Hacking the network

2009-10-04 Thread Vijay Gandhi
Wanted to update everyone, that IP 64.34.173.199 belong to a company Voxalot, they have hacked our system twice and they don't even care to reply to any emails sent to them, and they don't even respond over the phone, beware of them. Regards Vijay Gandhi GIPL(An ISO 9001:2000 Company) +