IP Scaners and Failed login attempts

Discussion in '3CX Phone System - General' started by fonebox, Apr 4, 2018.

Thread Status:
Not open for further replies.
  1. fonebox

    Joined:
    Dec 22, 2015
    Messages:
    12
    Likes Received:
    2
    Hi all
    This is more of an FYI. Seems to be alot of IP/Port scanners at present.

    One's to note are:

    185.212.202.146
    185.51.228.245
    195.154.42.164
    212.32.250.134
    5.62.43.11
    94.75.249.3

    212.32.250.134 seems to omly be active from the 1st April 2018. And some other feedback from other 3CX systems at

    https://www.abuseipdb.com/check/212.32.250.134

    Recommend adding IP address to Blacklist of your 3CX platforms!!

    Regards
    Phil
     
  2. jofer

    Joined:
    Dec 5, 2012
    Messages:
    46
    Likes Received:
    3
    Thank you, I also have attempts from some of them.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    fonebox likes this.
  3. jimbo59

    jimbo59 Member

    Joined:
    Nov 17, 2017
    Messages:
    358
    Likes Received:
    77
    On Linux with IP tables just drop those before they hit 3CX
    They won't even see it as a viable host.

    iptables -A INPUT -s xxx.xxx.xxx.xxx -j DROP
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
Thread Status:
Not open for further replies.