[AsteriskBrasil] Ataque via manager

[Ulisses Féres - Abratel Telecom]

Lembrem de trancar o manager e adiciona-lo no fail2ban!!
Hoje peguei as novas tentativas de ataque! Agora via manager!

Atenção pois o espertinho esta tentando os usuários/senhas padrões de
softwares como flashpanel, a2billing, ippbx, voipoperator...


[2013-08-19 10:42:24] NOTICE[17463]: manager.c:1111 authenticate:
217.13.50.73 tried to authenticate with nonexistent user 'voipoperator'
[2013-08-19 10:42:24] NOTICE[17463]: manager.c:1139 authenticate:
217.13.50.73 failed to authenticate as 'voipoperator'
    -- <SIP/547369598386954-000054a7>AGI Script a2billing.php completed,
returning -1
  == Connect attempt from '217.13.50.73' unable to authenticate
[2013-08-19 10:42:26] NOTICE[17464]: manager.c:1111 authenticate:
217.13.50.73 tried to authenticate with nonexistent user 'a2billing'
[2013-08-19 10:42:26] NOTICE[17464]: manager.c:1139 authenticate:
217.13.50.73 failed to authenticate as 'a2billing'
  == Connect attempt from '217.13.50.73' unable to authenticate
[2013-08-19 10:42:28] NOTICE[17465]: manager.c:1111 authenticate:
217.13.50.73 tried to authenticate with nonexistent user 'ippbx'
[2013-08-19 10:42:28] NOTICE[17465]: manager.c:1139 authenticate:
217.13.50.73 failed to authenticate as 'ippbx'
  == Connect attempt from '217.13.50.73' unable to authenticate
[2013-08-19 10:42:29] NOTICE[17466]: manager.c:1111 authenticate:
217.13.50.73 tried to authenticate with nonexistent user 'speeddial'
[2013-08-19 10:42:29] NOTICE[17466]: manager.c:1139 authenticate:
217.13.50.73 failed to authenticate as 'speeddial'
  == Connect attempt from '217.13.50.73' unable to authenticate
[2013-08-19 10:42:31] NOTICE[17467]: manager.c:1111 authenticate:
217.13.50.73 tried to authenticate with nonexistent user 'outlook'
[2013-08-19 10:42:31] NOTICE[17467]: manager.c:1139 authenticate:
217.13.50.73 failed to authenticate as 'outlook'
  == Connect attempt from '217.13.50.73' unable to authenticate
[2013-08-19 10:42:33] NOTICE[17468]: manager.c:1111 authenticate:
217.13.50.73 tried to authenticate with nonexistent user 'mohviewer'
[2013-08-19 10:42:33] NOTICE[17468]: manager.c:1139 authenticate:
217.13.50.73 failed to authenticate as 'mohviewer'
    == Connect attempt from '217.13.50.73' unable to authenticate
[2013-08-19 10:42:34] NOTICE[17469]: manager.c:1111 authenticate:
217.13.50.73 tried to authenticate with nonexistent user 'FlashPanel'
[2013-08-19 10:42:34] NOTICE[17469]: manager.c:1139 authenticate:
217.13.50.73 failed to authenticate as 'FlashPanel'
  == Connect attempt from '217.13.50.73' unable to authenticate
[2013-08-19 10:42:36] NOTICE[17470]: manager.c:1111 authenticate:
217.13.50.73 tried to authenticate with nonexistent user 'flashpanel'
[2013-08-19 10:42:36] NOTICE[17470]: manager.c:1139 authenticate:
217.13.50.73 failed to authenticate as 'flashpanel'
  == Connect attempt from '217.13.50.73' unable to authenticate
[2013-08-19 10:42:38] NOTICE[17471]: manager.c:1111 authenticate:
217.13.50.73 tried to authenticate with nonexistent user 'webviewer'
[2013-08-19 10:42:38] NOTICE[17471]: manager.c:1139 authenticate:
217.13.50.73 failed to authenticate as 'webviewer'
  == Connect attempt from '217.13.50.73' unable to authenticate
[2013-08-19 10:42:40] NOTICE[17472]: manager.c:1111 authenticate:
217.13.50.73 tried to authenticate with nonexistent user 'administrator'
[2013-08-19 10:42:40] NOTICE[17472]: manager.c:1139 authenticate:
217.13.50.73 failed to authenticate as 'administrator'
  == Connect attempt from '217.13.50.73' unable to authenticate
[2013-08-19 10:42:41] NOTICE[17473]: manager.c:1111 authenticate:
217.13.50.73 tried to authenticate with nonexistent user 'administrator'
[2013-08-19 10:42:41] NOTICE[17473]: manager.c:1139 authenticate:
217.13.50.73 failed to authenticate as 'administrator'
  == Connect attempt from '217.13.50.73' unable to authenticate
[2013-08-19 10:42:43] NOTICE[17474]: manager.c:1111 authenticate:
217.13.50.73 tried to authenticate with nonexistent user 'queuemanager'
[2013-08-19 10:42:43] NOTICE[17474]: manager.c:1139 authenticate:
217.13.50.73 failed to authenticate as 'queuemanager'
  == Connect attempt from '217.13.50.73' unable to authenticate
[2013-08-19 10:42:45] NOTICE[17475]: manager.c:1111 authenticate:
217.13.50.73 tried to authenticate with nonexistent user 'dialer'
[2013-08-19 10:42:45] NOTICE[17475]: manager.c:1139 authenticate:
217.13.50.73 failed to authenticate as 'dialer'



Ulisses Féres Cerqueira
Infraestrutura e Projeto
55 32 3722-4004 ramal 928
55 21 6833-0589
uferes em abratel.com.br
www.abratel.com.br

 [image: http://www.digavoip.com.br/assinatura/logo.png]
-------------- Próxima Parte ----------
Um anexo em HTML foi limpo...
URL: http://listas.asteriskbrasil.org/pipermail/asteriskbrasil/attachments/20130819/e37c9933/attachment-0001.htm