Dismiss Notice
We would like to remind you that we’re updating our login process for all 3CX forums whereby you will be able to login with the same credentials you use for the Partner or Customer Portal. Click here to read more.

IP Scaners and Failed login attempts

Discussion in '3CX Phone System - General' started by fonebox, Apr 4, 2018.

Thread Status:
Not open for further replies.
  1. fonebox

    Joined:
    Dec 22, 2015
    Messages:
    12
    Likes Received:
    2
    Hi all
    This is more of an FYI. Seems to be alot of IP/Port scanners at present.

    One's to note are:

    185.212.202.146
    185.51.228.245
    195.154.42.164
    212.32.250.134
    5.62.43.11
    94.75.249.3

    212.32.250.134 seems to omly be active from the 1st April 2018. And some other feedback from other 3CX systems at

    https://www.abuseipdb.com/check/212.32.250.134

    Recommend adding IP address to Blacklist of your 3CX platforms!!

    Regards
    Phil
     
  2. jofer

    Joined:
    Dec 5, 2012
    Messages:
    66
    Likes Received:
    4
    Thank you, I also have attempts from some of them.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    fonebox likes this.
  3. jimbo59

    jimbo59 Member

    Joined:
    Nov 17, 2017
    Messages:
    358
    Likes Received:
    77
    On Linux with IP tables just drop those before they hit 3CX
    They won't even see it as a viable host.

    iptables -A INPUT -s xxx.xxx.xxx.xxx -j DROP
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
Thread Status:
Not open for further replies.