IP Scaners and Failed login attempts

[fonebox]

Hi all
This is more of an FYI. Seems to be alot of IP/Port scanners at present.

One's to note are:

185.212.202.146
185.51.228.245
195.154.42.164
212.32.250.134
5.62.43.11
94.75.249.3

212.32.250.134 seems to omly be active from the 1st April 2018. And some other feedback from other 3CX systems at

https://www.abuseipdb.com/check/212.32.250.134

Recommend adding IP address to Blacklist of your 3CX platforms!!

Regards
Phil

 

[jofer]

Thank you, I also have attempts from some of them.

 

[jimbo59]

On Linux with IP tables just drop those before they hit 3CX
They won't even see it as a viable host.

iptables -A INPUT -s xxx.xxx.xxx.xxx -j DROP