| 00:02.15 | *** join/#asterisk jrabe (irc@janikrabe.com) |
| 00:43.47 | *** join/#asterisk luckman212 (~luckman21@unaffiliated/luckman212) |
| 01:18.52 | *** join/#asterisk SupaYoshi (~SupaYoshi@104.223.1.186) |
| 01:49.19 | *** join/#asterisk Pasha (~Cory@unaffiliated/cory) |
| 03:04.08 | *** join/#asterisk startledmarmot (~startledm@cpe-75-82-221-87.socal.res.rr.com) |
| 03:42.52 | *** join/#asterisk ttaylor (~ttaylor@vpn.duh.net) |
| 04:21.11 | *** join/#asterisk votality (~votality@59-102-82-2.tpgi.com.au) |
| 04:21.31 | votality | Hi |
| 04:21.53 | votality | Is this a dev channel or config help channel |
| 04:33.12 | *** join/#asterisk Pasha (~Cory@unaffiliated/cory) |
| 04:49.57 | kitsune | Yes |
| 04:50.16 | kitsune | #asterisk-dev for developers. |
| 04:51.09 | *** join/#asterisk Catatronic (~corrupt@unaffiliated/catatronic) |
| 05:17.58 | *** join/#asterisk retentiveboy (~retentive@c-73-82-30-193.hsd1.ga.comcast.net) |
| 06:06.29 | *** join/#asterisk gerhard7__ (~gerhard7@ip5657ee30.direct-adsl.nl) |
| 06:07.33 | *** join/#asterisk tripleslash (~triplesla@unaffiliated/imsaguy) |
| 07:13.23 | *** join/#asterisk shootbird (~quassel@beepbeep.serverpit.com) |
| 07:47.43 | *** join/#asterisk jamesaxl (~James_Axl@109.172.62.242) |
| 07:55.40 | *** join/#asterisk evil_gordita (robert@ip70-188-41-127.rn.hr.cox.net) |
| 08:14.24 | *** join/#asterisk DanB (~DanB@clt-195.192.202.215.ip-anschluss.net) |
| 08:21.54 | *** join/#asterisk Jesterboxboy (~Thunderbi@84-115-150-8.cable.dynamic.surfer.at) |
| 09:22.22 | *** join/#asterisk Jesterboxboy (~Thunderbi@84-115-150-8.cable.dynamic.surfer.at) |
| 09:29.02 | *** join/#asterisk SoBlindWolf (~SoBlindWo@go.pcshost.co) |
| 09:55.20 | *** join/#asterisk Jesterboxboy (~Thunderbi@84-115-150-8.cable.dynamic.surfer.at) |
| 09:55.33 | *** join/#asterisk DanB (~DanB@clt-195.192.202.215.ip-anschluss.net) |
| 10:32.53 | *** join/#asterisk xpheres (~xpheres@ip5b40d6ca.dynamic.kabel-deutschland.de) |
| 10:33.00 | xpheres | good morning |
| 10:33.39 | xpheres | I have several registration attempts always from the same ip, it changes user and password randomly I guess to attempt hacking and login, fail2ban is installed, what else can I do? |
| 10:47.16 | xpheres | can anyone tell me if this is a hack attempt? |
| 10:47.16 | xpheres | 2017-12-02 10:34:42] VERBOSE[6678] tcptls.c: == Problem setting up ssl connection: error:1407609C:SSL routines:SSL23_GET_CLIENT_HELLO:http request |
| 10:47.16 | xpheres | [2017-12-02 10:34:42] WARNING[6678] tcptls.c: FILE * open failed! |
| 10:48.15 | xpheres | whoever is attempting to log in is changing constantly users, passwords and ports, I think it is a bot using brute force |
| 10:48.25 | xpheres | fail2ban seems not to ban that ip and I don't know why |
| 10:49.06 | xpheres | Registration from '"334" <sip:334@[mi_ip:mi_port]>' failed for '212.129.10.173:5078' - Wrong password |
| 10:49.19 | xpheres | I receive that message all the time with different ports and passwords |
| 11:01.51 | *** join/#asterisk Worldexe (~Worldexe@95-107-33-134.dsl.orel.ru) |
| 11:28.48 | *** join/#asterisk lankanmon (~LKNnet@CPE64777dd7e053-CM64777dd7e050.cpe.net.cable.rogers.com) |
| 12:30.09 | *** join/#asterisk fstd (~fstd@unaffiliated/fisted) |
| 12:48.55 | *** join/#asterisk SoBlindWolf (~SoBlindWo@go.pcshost.co) |
| 12:54.43 | *** join/#asterisk davlefouAMD (~davlefouA@cantaron.reveyo.com) |
| 13:17.25 | *** join/#asterisk miralin (~Thunderbi@195.209.246.194) |
| 13:32.42 | *** join/#asterisk miralin1 (~Thunderbi@81.177.59.227) |
| 13:53.58 | *** join/#asterisk luckman212 (~luckman21@unaffiliated/luckman212) |
| 13:57.38 | xpheres | hello |
| 13:57.39 | xpheres | I have several registration attempts always from the same ip, it changes user and password randomly I guess to attempt hacking and login, fail2ban is installed, what else can I do? |
| 13:57.59 | xpheres | fail2ban seems not to ban that ip and I don't know why |
| 13:58.11 | xpheres | every two minutes I have a log like this: Registration from '"334" <sip:334@[mi_ip:mi_port]>' failed for '212.129.10.173:5078' - Wrong password |
| 13:58.51 | xpheres | anyone knows how can I ban that ip? |
| 14:23.33 | *** join/#asterisk [TK]D-Fender (~joe@64.235.216.2) |
| 14:34.18 | Samot | iptables? |
| 14:34.21 | Samot | You have FreePBX |
| 14:34.36 | Samot | And it sounds like just FreePBX 12... |
| 14:34.54 | Samot | So you have fail2ban which is totally crap or you need to make some iptables rules. |
| 14:41.26 | xpheres | Hi samot |
| 14:41.47 | xpheres | I will see if I can do that iptables rules |
| 15:01.57 | *** part/#asterisk xpheres (~xpheres@ip5b40d6ca.dynamic.kabel-deutschland.de) |
| 15:43.53 | *** join/#asterisk TandyUK (~admin@TandyUK/staff/James) |
| 16:06.18 | mmlj4 | great... I bought a Cisco SPA504 phone, but haven't provisioned it yet... it tells me today is Jan 1, 2003 :-/ |
| 16:08.45 | Samot | OK. |
| 16:09.03 | Samot | Program it |
| 16:21.38 | *** join/#asterisk cemotyz09 (~cemotyz09@cpe-70-121-157-202.satx.res.rr.com) |
| 16:44.01 | *** join/#asterisk tuxd00d (~tuxd00d@ip184-182-52-160.ph.ph.cox.net) |
| 17:01.35 | *** join/#asterisk jamesaxl (~James_Axl@109.172.62.242) |
| 17:06.15 | *** join/#asterisk Pasha (~Cory@unaffiliated/cory) |
| 18:13.29 | *** join/#asterisk DanB (~DanB@clt-195.192.202.215.ip-anschluss.net) |
| 18:33.06 | *** join/#asterisk AdrianoOliveira (~AdrianoOl@46.7.241.254) |
| 18:33.21 | *** join/#asterisk miralin (~Thunderbi@81.177.59.227) |
| 18:50.54 | *** join/#asterisk shootbird (~quassel@beepbeep.serverpit.com) |
| 18:54.38 | *** join/#asterisk jkroon__ (~jkroon@165.16.204.166) |
| 19:34.57 | *** join/#asterisk Jesterboxboy (~Thunderbi@84-115-150-8.cable.dynamic.surfer.at) |
| 19:51.53 | *** join/#asterisk startledmarmot (~startledm@cpe-75-82-221-87.socal.res.rr.com) |
| 20:49.23 | *** join/#asterisk startledmarmot (~startledm@cpe-75-82-221-87.socal.res.rr.com) |
| 20:56.25 | *** join/#asterisk tuxd00d (~tuxd00d@ip184-182-52-160.ph.ph.cox.net) |
| 21:05.55 | *** join/#asterisk cemotyz09 (~cemotyz09@cpe-70-121-157-202.satx.res.rr.com) |
| 21:48.41 | *** join/#asterisk SoBlindWolf (~SoBlindWo@go.pcshost.co) |
| 22:39.59 | *** join/#asterisk cemotyz09 (~cemotyz09@cpe-70-121-157-202.satx.res.rr.com) |
| 22:45.58 | *** join/#asterisk Yiota (~textual@2607:fea8:56df:fa6d:b1f0:f754:99dc:2107) |
| 22:50.55 | *** join/#asterisk Penguin (~xwQ5kwYl6@our.systems.are.full.of.penguins.at.penguinsystems.net) |
| 23:28.46 | *** join/#asterisk Penguin (~xwQ5kwYl6@our.systems.are.full.of.penguins.at.penguinsystems.net) |
| 23:28.58 | *** join/#asterisk Yiota (~textual@2607:fea8:56df:fa6d:f821:79be:acd0:1fb7) |