Solved V20 - An IP address has been blocked.

[nicholas.talisma]

We have frequently encountered an issue where access to the administration interface is compromised specifically for web clients and mobile app users, while IP phones continue to function without interruption. This issue has proven to be recurrent, affecting the accessibility of the interface for these devices.
It is important to note that my access attempt is taking place within the local network, with no attempt at external access. Nevertheless, I am unable to access the administration interface.
To provide further clarity on the issue, I am attaching a screenshot of the login screen that appears when I try to access the administration interface during these periods of interruption.

 

[SteveITS]

All of them are local providers in my city

Interesting, I guess we really are running out of IPv4 addresses. Sounds like they are all using private IPs but not using the CGNAT IP range that is allocated for that.

 

[nicholas.talisma]

I was in contact with my provider and it turns out this is an IP from their internal network where a routerboard of theirs is located. They are still investigating why I am able to access this routerboard. However, I believe it is a NAT failure on this routerboard that put me in the wrong location, since in this central area there are only 8 clients connected to this tower at the moment.

 

[OlegR_3CX]

@nicholas.talisma
You are almost there. Thank you for the feedback and if any other findings, kindly share with us.

 

[nicholas.talisma]

Good morning everyone, after a long conversation with the provider I understood the whole situation, they dedicated this routerboard exclusively for my company, so they released everything for local control here, via my firewall, so practically everything is open for us here with the exception of the remote access control port of their routerboard.

Therefore, everything that arrives through the IP 192.168.2.254 is being redirected from the external fixed IP that I use,in the case of any attack attempt will hit directly on the server.I don't know what the reason was for them to do this, but now I know that I can reinforce the protection using my firewall to prevent this situation from happening again.

 

[OlegR_3CX]

Glad to hear you now know what was the issue there and can control it too.
Let me know if we can close this thread too.

 

[nicholas.talisma]

@OlegR_3CX @SteveITS @bitn2

A huge thank you to all of you for your amazing help with my issue! I'm so grateful for your time, patience, and expertise.

Thanks to your help, I now have full control over that routerboard through my firewall and I feel much more secure about my server's safety. I know I can always count on you guys if I need any more help in the future.

Before we close this thread, I just wanted to say again how much I appreciate everything you've done. You're an amazing group of people!

Thanks again for everything!

 

[OlegR_3CX]

@SteveITS
@bitn2
I will say on behalf of the guys here that your kind words and appreciation mean a lot!
Have a great day