Lembrem de trancar o manager e adiciona-lo no fail2ban!!
Hoje peguei as novas tentativas de ataque! Agora via manager!
Atenção pois o espertinho esta tentando os usuários/senhas padrões de
softwares como flashpanel, a2billing, ippbx, voipoperator...
[2013-08-19 10:42:24] NOTICE[17463]: manager.c:1111 authenticate:
217.13.50.73 tried to authenticate with nonexistent user 'voipoperator'
[2013-08-19 10:42:24] NOTICE[17463]: manager.c:1139 authenticate:
217.13.50.73 failed to authenticate as 'voipoperator'
-- <SIP/547369598386954-000054a7>AGI Script a2billing.php completed,
returning -1
== Connect attempt from '217.13.50.73' unable to authenticate
[2013-08-19 10:42:26] NOTICE[17464]: manager.c:1111 authenticate:
217.13.50.73 tried to authenticate with nonexistent user 'a2billing'
[2013-08-19 10:42:26] NOTICE[17464]: manager.c:1139 authenticate:
217.13.50.73 failed to authenticate as 'a2billing'
== Connect attempt from '217.13.50.73' unable to authenticate
[2013-08-19 10:42:28] NOTICE[17465]: manager.c:1111 authenticate:
217.13.50.73 tried to authenticate with nonexistent user 'ippbx'
[2013-08-19 10:42:28] NOTICE[17465]: manager.c:1139 authenticate:
217.13.50.73 failed to authenticate as 'ippbx'
== Connect attempt from '217.13.50.73' unable to authenticate
[2013-08-19 10:42:29] NOTICE[17466]: manager.c:1111 authenticate:
217.13.50.73 tried to authenticate with nonexistent user 'speeddial'
[2013-08-19 10:42:29] NOTICE[17466]: manager.c:1139 authenticate:
217.13.50.73 failed to authenticate as 'speeddial'
== Connect attempt from '217.13.50.73' unable to authenticate
[2013-08-19 10:42:31] NOTICE[17467]: manager.c:1111 authenticate:
217.13.50.73 tried to authenticate with nonexistent user 'outlook'
[2013-08-19 10:42:31] NOTICE[17467]: manager.c:1139 authenticate:
217.13.50.73 failed to authenticate as 'outlook'
== Connect attempt from '217.13.50.73' unable to authenticate
[2013-08-19 10:42:33] NOTICE[17468]: manager.c:1111 authenticate:
217.13.50.73 tried to authenticate with nonexistent user 'mohviewer'
[2013-08-19 10:42:33] NOTICE[17468]: manager.c:1139 authenticate:
217.13.50.73 failed to authenticate as 'mohviewer'
== Connect attempt from '217.13.50.73' unable to authenticate
[2013-08-19 10:42:34] NOTICE[17469]: manager.c:1111 authenticate:
217.13.50.73 tried to authenticate with nonexistent user 'FlashPanel'
[2013-08-19 10:42:34] NOTICE[17469]: manager.c:1139 authenticate:
217.13.50.73 failed to authenticate as 'FlashPanel'
== Connect attempt from '217.13.50.73' unable to authenticate
[2013-08-19 10:42:36] NOTICE[17470]: manager.c:1111 authenticate:
217.13.50.73 tried to authenticate with nonexistent user 'flashpanel'
[2013-08-19 10:42:36] NOTICE[17470]: manager.c:1139 authenticate:
217.13.50.73 failed to authenticate as 'flashpanel'
== Connect attempt from '217.13.50.73' unable to authenticate
[2013-08-19 10:42:38] NOTICE[17471]: manager.c:1111 authenticate:
217.13.50.73 tried to authenticate with nonexistent user 'webviewer'
[2013-08-19 10:42:38] NOTICE[17471]: manager.c:1139 authenticate:
217.13.50.73 failed to authenticate as 'webviewer'
== Connect attempt from '217.13.50.73' unable to authenticate
[2013-08-19 10:42:40] NOTICE[17472]: manager.c:1111 authenticate:
217.13.50.73 tried to authenticate with nonexistent user 'administrator'
[2013-08-19 10:42:40] NOTICE[17472]: manager.c:1139 authenticate:
217.13.50.73 failed to authenticate as 'administrator'
== Connect attempt from '217.13.50.73' unable to authenticate
[2013-08-19 10:42:41] NOTICE[17473]: manager.c:1111 authenticate:
217.13.50.73 tried to authenticate with nonexistent user 'administrator'
[2013-08-19 10:42:41] NOTICE[17473]: manager.c:1139 authenticate:
217.13.50.73 failed to authenticate as 'administrator'
== Connect attempt from '217.13.50.73' unable to authenticate
[2013-08-19 10:42:43] NOTICE[17474]: manager.c:1111 authenticate:
217.13.50.73 tried to authenticate with nonexistent user 'queuemanager'
[2013-08-19 10:42:43] NOTICE[17474]: manager.c:1139 authenticate:
217.13.50.73 failed to authenticate as 'queuemanager'
== Connect attempt from '217.13.50.73' unable to authenticate
[2013-08-19 10:42:45] NOTICE[17475]: manager.c:1111 authenticate:
217.13.50.73 tried to authenticate with nonexistent user 'dialer'
[2013-08-19 10:42:45] NOTICE[17475]: manager.c:1139 authenticate:
217.13.50.73 failed to authenticate as 'dialer'
Ulisses Féres Cerqueira
Infraestrutura e Projeto
55 32 3722-4004 ramal 928
55 21 6833-0589
ufe...@abratel.com.br
www.abratel.com.br
[image: http://www.digavoip.com.br/assinatura/logo.png]
_______________________________________________
KHOMP: completa linha de placas externas FXO, FXS, GSM e E1;
Media Gateways de 1 a 64 E1s para SIP com R2, ISDN e SS7;
Intercomunicadores para acesso remoto via rede IP. Conheça em www.Khomp.com.
_______________________________________________
ALIGERA Fabricante nacional de Gateways SIP-E1 para R2, ISDN e SS7.
Placas de 1E1, 2E1, 4E1 e 8E1 para PCI ou PCI Express.
Channel Bank Appliance Asterisk - Acesse www.aligera.com.br.
_______________________________________________
Para remover seu email desta lista, basta enviar um email em branco para
asteriskbrasil-unsubscr...@listas.asteriskbrasil.org
