Block hackers attack - Asterisk - VoIP 研究室 - 電訊茶室

Rank: 1

16^# 跳轉到 »

發表於 2010-10-4 21:59 | 只看該作者

A new attack from 64.156.192.26

Rank: 9 Rank: 9 Rank: 9

17^#

發表於 2010-10-4 23:14 | 只看該作者

再來一個...
119.70.40.102

inetnum:    119.64.0.0 - 119.71.255.255
netname:    Xpeed
descr:       LG Powercomm
descr:       537-18,Bangbaedong,Seochogu, Seoul
descr:       *******************************************
descr:       Allocated to KRNIC Member.
descr:       If you would like to find assignment
descr:       information in detail please refer to
descr:       the KRNIC Whois Database at:
descr:       http://whois.nic.or.kr/english/index.htm
descr:       *******************************************

Rank: 9 Rank: 9 Rank: 9

18^#

發表於 2010-10-5 03:13 | 只看該作者

再來...
119.188.7.146

inetnum:       119.176.0.0 - 119.191.255.255
netname:       UNICOM-SD
descr:          China Unicom Shandong Province Network
descr:       China Unicom
country:       CN
admin-c:       CH1302-AP
tech-c:          XZ14-AP
remarks:       service provider
status:       ALLOCATED PORTABLE
mnt-by:       APNIC-HM
mnt-lower:    MAINT-CNCGROUP
mnt-lower:    MAINT-CNCGROUP-SD
mnt-routes:    MAINT-CNCGROUP-RR
remarks:       -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks:       This object can only be updated by APNIC hostmasters.
remarks:       To update this object, please contact APNIC
remarks:       hostmasters and include your organisation's account
remarks:       name in the subject line.
remarks:       -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed:       hm-changed@apnic.net 20080225
changed:       hm-changed@apnic.net 20090508
changed:       hm-changed@apnic.net 20100927
source:       APNIC

route:       119.176.0.0/12
descr:       CNC Group CHINA169 Shandong Province Network
country:    CN
origin:    AS4837
mnt-by:    MAINT-CNCGROUP-RR
changed:    abuse@cnc-noc.net 20080225
source:    APNIC

Qnewbie

Rank: 1

19^#

發表於 2010-10-5 04:08 | 只看該作者

Korean:
211.215.19.242

Hostname: 211.215.19.242
ISP: Hanaro Telecom, Inc.
Organization: Hanaro Telecom, Inc.
Proxy: None detected
Type: Broadband
Assignment: Static IP

Rank: 1

20^#

發表於 2010-10-6 06:36 | 只看該作者

本帖最後由 ckleea 於 2010-10-6 06:47 編輯

another IP 79.114.199.69
Already in my asterisk and try 2 numbers.

IP : 79.114.199.69 Neighborhood
Host : 79-114-199-69.dynamic.brasov.rdsnet.ro Not OK
Country : Romania

Address information
Please wait...
Related IP addresses
Please wait...
IP owner info (Whois)
Please wait...
Domain owner info (Whois / Abuse)
Please wait...
Conversions (IPv4 / IPv6)
Please wait...
Ping
Please wait...

Rank: 1

21^#

發表於 2010-10-6 06:50 | 只看該作者

They to dial 900185099930593 and 001263912797847

角色

註冊會員

Rank: 2

22^#

發表於 2010-10-6 07:50 | 只看該作者

自从我用了
sip.conf

alwaysauthreject=yes

和不能从外面用port 22进入我的Asterisk系统后，整个系统都没有被attacked 过，大家可以考虑。

角色

Rank: 1

23^#

發表於 2010-10-6 09:00 | 只看該作者

I have this already alwaysauthreject=yes

Rank: 9 Rank: 9 Rank: 9

24^#

發表於 2010-10-7 18:42 | 只看該作者

經過3天多後...來自山東的那位也放棄了...

因為我在Firewall block了它的IP...

莫說是asterisk...請先過了Linux Firewall那一關吧(總好過沒有吧~

)

角色

註冊會員

Rank: 2

25^#

發表於 2010-10-7 18:58 | 只看該作者

如果有Firewall会更加好，如果没有Asterisk server settings也要注意。

角色

Rank: 9 Rank: 9 Rank: 9

26^#

發表於 2010-10-7 20:54 | 只看該作者

當然Asterisk要先設定好...
因為Firewall可以block的只可以在事發後......

Rank: 9 Rank: 9 Rank: 9

27^#

發表於 2010-10-20 01:09 | 只看該作者

今天我的asterisk又有人企圖入侵了...
這次是德國...
(而且還看到host是這個...srv-bg07.sicor.net)

IP Address 86.110.67.42
Host srv-bg07.sicor.net
Location DE DE, Germany
City Grönenbach, 02 -
Organization SICOR GmbH
ISP Trusted Network
AS Number AS21385 Trusted Network GmbH
Latitude 47°88'33" North
Longitude 10°21'67" East
Distance 1174.47 km (729.78 miles)