6GNet.pl
14 Feb 2023
[2023-02-14 08:39:05] SECURITY[6702] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="20 ... show more [2023-02-14 08:39:05] SECURITY[6702] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2023-02-14T08:39:05.742+0100",Severity="Error",Service="SIP",EventVersion="2",AccountID="343",SessionID="0x7fb49c0977d0",LocalAddress="IPV4/UDP/64.18.129.55/5060",RemoteAddress="IPV4/UDP/128.90.175.245/55992",Challenge="735e8efd",ReceivedChallenge="735e8efd",ReceivedHash="a832b7b9d64500cbd7d5a8cf48faefe7"
[2023-02-14 08:45:29] SECURITY[6702] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2023-02-14T08:45:29.385+0100",Severity="Error",Service="SIP",EventVersion="2",AccountID="344",SessionID="0x7fb49c2d1710",LocalAddress="IPV4/UDP/64.18.129.55/5060",RemoteAddress="IPV4/UDP/128.90.175.245/58519",Challenge="6fdfd9bb",ReceivedChallenge="6fdfd9bb",ReceivedHash="0460904aec248499d6d07b8f3cddd845"
[2023-02-14 08:51:56] SECURITY[6702] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2023-02-14T08:51:56.027+0100",Severity="Error",Service="SIP",EventVersion="2",AccountID="345
... show less
Fraud VoIP
Brute-Force
MindSolve
14 Feb 2023
2023-02-14 08:39:05.068820 [WARNING] sofia_reg.c:1798 SIP auth challenge (REGISTER) on sofia profile ... show more 2023-02-14 08:39:05.068820 [WARNING] sofia_reg.c:1798 SIP auth challenge (REGISTER) on sofia profile 'internal' for [[email protected] ] from ip 128.90.175.245 show less
Fraud VoIP
Hacking
Brute-Force
Teknikal_Domain
14 Feb 2023
[Feb 14 02:37:27] NOTICE[1655104] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from & ... show more [Feb 14 02:37:27] NOTICE[1655104] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected] >' failed for '128.90.175.245:51616' (callid: e5f4a403901214e4f7a343) - No matching endpoint found
[Feb 14 02:37:27] NOTICE[1655104] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected] >' failed for '128.90.175.245:51616' (callid: e5f4a403901214e4f7a343) - No matching endpoint found
[Feb 14 02:37:27] NOTICE[1655104] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected] >' failed for '128.90.175.245:51616' (callid: e5f4a403901214e4f7a343) - Failed to authenticate
[Feb 14 02:37:27] NOTICE[1655104] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected] >' failed for '128.90.175.245:51616' (callid: e5f4a403901214e4f7a343) - No matching endpoint found
... show less
Fraud VoIP
Brute-Force
0xNath
14 Feb 2023
[Feb 14 08:36:32] SECURITY[4420] res_security_log.c: SecurityEvent="InvalidAccountID",EventTV="2023- ... show more [Feb 14 08:36:32] SECURITY[4420] res_security_log.c: SecurityEvent="InvalidAccountID",EventTV="2023-02-14T08:36:32.089+0100",Severity="Error",Service="PJSIP",EventVersion="1",AccountID="343",SessionID="e5f4a708679938e4f7a343",LocalAddress="IPV4/UDP/192.168.1.253/5060",RemoteAddress="IPV4/UDP/128.90.175.245/51957"
[Feb 14 08:36:32] SECURITY[4420] res_security_log.c: SecurityEvent="InvalidAccountID",EventTV="2023-02-14T08:36:32.372+0100",Severity="Error",Service="PJSIP",EventVersion="1",AccountID="343",SessionID="e5f4a708679938e4f7a343",LocalAddress="IPV4/UDP/192.168.1.253/5060",RemoteAddress="IPV4/UDP/128.90.175.245/51957"
[Feb 14 08:36:32] SECURITY[4420] res_security_log.c: SecurityEvent="ChallengeResponseFailed",EventTV="2023-02-14T08:36:32.372+0100",Severity="Error",Service="PJSIP",EventVersion="1",AccountID="<unknown>",SessionID="e5f4a708679938e4f7a343",LocalAddress="IPV4/UDP/192.168.1.253/5060",RemoteAddress="IPV4/UDP/128.90.175.245/51957",Challenge="1676360192/62004a3b75eac57a9c45
... show less
Fraud VoIP
Brute-Force
alexanderzhirov
10 Feb 2023
FB2 blocked BF
Brute-Force
Aidar Kamalov
10 Feb 2023
Feb 10 20:47:38 ashburn-OLD /usr/sbin/kamailio[1725]: NOTICE: {REGISTER 1 1 REGISTER e5f4a10175716e4 ... show more Feb 10 20:47:38 ashburn-OLD /usr/sbin/kamailio[1725]: NOTICE: {REGISTER 1 1 REGISTER e5f4a10175716e4f7a605} <script>: AUTH: REGISTER FAILED from 128.90.175.245 (code: -5) fd=132.145.187.30, adu=<null>, aa=<null>, ar=<null>, au=<null>, ad=<null>, aU=<null>, [email protected]
Feb 10 20:47:38 ashburn-OLD /usr/sbin/kamailio[1726]: NOTICE: {REGISTER 1 2 REGISTER e5f4a10175716e4f7a605} <script>: AUTH: REGISTER FAILED from 128.90.175.245 (code: -3) fd=132.145.187.30, adu=sip:132.145.187.30:5060, aa=MD5, ar=132.145.187.30, au=6105, ad=, aU=6105, [email protected]
Feb 10 20:47:39 ashburn-OLD /usr/sbin/kamailio[1729]: NOTICE: {REGISTER 1 3 REGISTER e5f4a10175716e4f7a605} <script>: AUTH: REGISTER FAILED from 128.90.175.245 (code: -3) fd=132.145.187.30, adu=sip:132.145.187.30:5060, aa=MD5, ar=132.145.187.30, au=6105, ad=, aU=6105, [email protected]
Feb 10 20:53:46 ashburn-OLD /usr/sbin/kamailio[1733]: NOTICE: {REGISTER 1 1 REGISTER e5f4a569187539e4f7a607} <script>: AUTH: REGISTER FA
... show less
Fraud VoIP
Aidar Kamalov
10 Feb 2023
Feb 10 20:47:17 saopaulo-sip-ulap-net /usr/sbin/kamailio[1510]: NOTICE: {REGISTER 1 1 REGISTER e5f4a ... show more Feb 10 20:47:17 saopaulo-sip-ulap-net /usr/sbin/kamailio[1510]: NOTICE: {REGISTER 1 1 REGISTER e5f4a605777008e4f7a605} <script>: AUTH: REGISTER FAILED from 128.90.175.245 (code: -5) fd=144.22.157.91, adu=<null>, aa=<null>, ar=<null>, au=<null>, ad=<null>, aU=<null>, [email protected]
Feb 10 20:47:17 saopaulo-sip-ulap-net /usr/sbin/kamailio[1514]: NOTICE: {REGISTER 1 2 REGISTER e5f4a605777008e4f7a605} <script>: AUTH: REGISTER FAILED from 128.90.175.245 (code: -3) fd=144.22.157.91, adu=sip:144.22.157.91:5060, aa=MD5, ar=144.22.157.91, au=6105, ad=, aU=6105, [email protected]
Feb 10 20:47:18 saopaulo-sip-ulap-net /usr/sbin/kamailio[1507]: NOTICE: {REGISTER 1 3 REGISTER e5f4a605777008e4f7a605} <script>: AUTH: REGISTER FAILED from 128.90.175.245 (code: -3) fd=144.22.157.91, adu=sip:144.22.157.91:5060, aa=MD5, ar=144.22.157.91, au=6105, ad=, aU=6105, [email protected]
Feb 10 20:52:51 saopaulo-sip-ulap-net /usr/sbin/kamailio[1506]: NOTICE: {REGISTER 1 1 REGISTER e5f4a784364156e4f7
... show less
Fraud VoIP
Aidar Kamalov
10 Feb 2023
Feb 10 20:47:14 sjc-sip-ulap-net /usr/sbin/kamailio[747191]: NOTICE: {REGISTER 1 1 REGISTER e5f4a635 ... show more Feb 10 20:47:14 sjc-sip-ulap-net /usr/sbin/kamailio[747191]: NOTICE: {REGISTER 1 1 REGISTER e5f4a635995450e4f7a605} <script>: AUTH: REGISTER FAILED from 128.90.175.245 (code: -5) fd=155.248.212.156, adu=<null>, aa=<null>, ar=<null>, au=<null>, ad=<null>, aU=<null>, [email protected]
Feb 10 20:47:14 sjc-sip-ulap-net /usr/sbin/kamailio[747184]: NOTICE: {REGISTER 1 2 REGISTER e5f4a635995450e4f7a605} <script>: AUTH: REGISTER FAILED from 128.90.175.245 (code: -3) fd=155.248.212.156, adu=sip:155.248.212.156:5060, aa=MD5, ar=155.248.212.156, au=6105, ad=, aU=6105, [email protected]
Feb 10 20:47:14 sjc-sip-ulap-net /usr/sbin/kamailio[747187]: NOTICE: {REGISTER 1 3 REGISTER e5f4a635995450e4f7a605} <script>: AUTH: REGISTER FAILED from 128.90.175.245 (code: -3) fd=155.248.212.156, adu=sip:155.248.212.156:5060, aa=MD5, ar=155.248.212.156, au=6105, ad=, aU=6105, [email protected]
Feb 10 20:52:51 sjc-sip-ulap-net /usr/sbin/kamailio[747186]: NOTICE: {REGISTER 1 1 REGISTER e5f4a77033
... show less
Fraud VoIP
Aidar Kamalov
10 Feb 2023
Feb 10 20:46:25 melbourne-sip-ulap-net /usr/sbin/kamailio[661668]: NOTICE: {REGISTER 1 1 REGISTER e5 ... show more Feb 10 20:46:25 melbourne-sip-ulap-net /usr/sbin/kamailio[661668]: NOTICE: {REGISTER 1 1 REGISTER e5f4a900903873e4f7a605} <script>: AUTH: REGISTER FAILED from 128.90.175.245 (code: -5) fd=152.69.190.114, adu=<null>, aa=<null>, ar=<null>, au=<null>, ad=<null>, aU=<null>, [email protected]
Feb 10 20:46:25 melbourne-sip-ulap-net /usr/sbin/kamailio[661667]: NOTICE: {REGISTER 1 2 REGISTER e5f4a900903873e4f7a605} <script>: AUTH: REGISTER FAILED from 128.90.175.245 (code: -3) fd=152.69.190.114, adu=sip:152.69.190.114:5060, aa=MD5, ar=152.69.190.114, au=6105, ad=, aU=6105, [email protected]
Feb 10 20:46:26 melbourne-sip-ulap-net /usr/sbin/kamailio[661663]: NOTICE: {REGISTER 1 3 REGISTER e5f4a900903873e4f7a605} <script>: AUTH: REGISTER FAILED from 128.90.175.245 (code: -3) fd=152.69.190.114, adu=sip:152.69.190.114:5060, aa=MD5, ar=152.69.190.114, au=6105, ad=, aU=6105, [email protected]
Feb 10 20:52:33 melbourne-sip-ulap-net /usr/sbin/kamailio[661667]: NOTICE: {REGISTER 1 1 REGIS
... show less
Fraud VoIP
Aidar Kamalov
10 Feb 2023
Feb 10 20:47:10 siptest-ulap-net /usr/sbin/kamailio[2788356]: NOTICE: {REGISTER 1 1 REGISTER e5f4a76 ... show more Feb 10 20:47:10 siptest-ulap-net /usr/sbin/kamailio[2788356]: NOTICE: {REGISTER 1 1 REGISTER e5f4a769767177e4f7a605} <script>: AUTH: REGISTER FAILED from 128.90.175.245 (code: -5) fd=143.47.178.158, adu=<null>, aa=<null>, ar=<null>, au=<null>, ad=<null>, aU=<null>, [email protected]
Feb 10 20:47:10 siptest-ulap-net /usr/sbin/kamailio[2788359]: NOTICE: {REGISTER 1 2 REGISTER e5f4a769767177e4f7a605} <script>: AUTH: REGISTER FAILED from 128.90.175.245 (code: -3) fd=143.47.178.158, adu=sip:143.47.178.158:5060, aa=MD5, ar=143.47.178.158, au=6105, ad=, aU=6105, [email protected]
Feb 10 20:47:10 siptest-ulap-net /usr/sbin/kamailio[2788361]: NOTICE: {REGISTER 1 3 REGISTER e5f4a769767177e4f7a605} <script>: AUTH: REGISTER FAILED from 128.90.175.245 (code: -3) fd=143.47.178.158, adu=sip:143.47.178.158:5060, aa=MD5, ar=143.47.178.158, au=6105, ad=, aU=6105, [email protected]
Feb 10 20:53:09 siptest-ulap-net /usr/sbin/kamailio[2788355]: NOTICE: {REGISTER 1 1 REGISTER e5f4a443463007e4
... show less
Fraud VoIP
Aidar Kamalov
10 Feb 2023
Feb 10 20:47:17 hkbn-sip-ulap-net /usr/sbin/kamailio[3058350]: NOTICE: {REGISTER 1 1 REGISTER e5f4a8 ... show more Feb 10 20:47:17 hkbn-sip-ulap-net /usr/sbin/kamailio[3058350]: NOTICE: {REGISTER 1 1 REGISTER e5f4a802278853e4f7a605} <script>: AUTH: REGISTER FAILED from 128.90.175.245 (code: -5) fd=14.198.176.185, adu=<null>, aa=<null>, ar=<null>, au=<null>, ad=<null>, aU=<null>, [email protected]
Feb 10 20:47:17 hkbn-sip-ulap-net /usr/sbin/kamailio[3058349]: NOTICE: {REGISTER 1 2 REGISTER e5f4a802278853e4f7a605} <script>: AUTH: REGISTER FAILED from 128.90.175.245 (code: -3) fd=14.198.176.185, adu=sip:14.198.176.185:5060, aa=MD5, ar=14.198.176.185, au=6105, ad=, aU=6105, [email protected]
Feb 10 20:47:17 hkbn-sip-ulap-net /usr/sbin/kamailio[3058351]: NOTICE: {REGISTER 1 3 REGISTER e5f4a802278853e4f7a605} <script>: AUTH: REGISTER FAILED from 128.90.175.245 (code: -3) fd=14.198.176.185, adu=sip:14.198.176.185:5060, aa=MD5, ar=14.198.176.185, au=6105, ad=, aU=6105, [email protected]
Feb 10 20:52:52 hkbn-sip-ulap-net /usr/sbin/kamailio[3058352]: NOTICE: {REGISTER 1 1 REGISTER e5f4a5344112
... show less
Fraud VoIP
Aidar Kamalov
10 Feb 2023
Feb 10 20:47:10 hkg /usr/sbin/kamailio[404004]: NOTICE: {REGISTER 1 1 REGISTER e5f4a97197439e4f7a605 ... show more Feb 10 20:47:10 hkg /usr/sbin/kamailio[404004]: NOTICE: {REGISTER 1 1 REGISTER e5f4a97197439e4f7a605} <script>: AUTH: REGISTER FAILED from 128.90.175.245 (code: -5) fd=47.243.168.212, adu=<null>, aa=<null>, ar=<null>, au=<null>, ad=<null>, aU=<null>, [email protected]
Feb 10 20:47:11 hkg /usr/sbin/kamailio[404000]: NOTICE: {REGISTER 1 2 REGISTER e5f4a97197439e4f7a605} <script>: AUTH: REGISTER FAILED from 128.90.175.245 (code: -3) fd=47.243.168.212, adu=sip:47.243.168.212:5060, aa=MD5, ar=47.243.168.212, au=6105, ad=, aU=6105, [email protected]
Feb 10 20:47:11 hkg /usr/sbin/kamailio[404005]: NOTICE: {REGISTER 1 3 REGISTER e5f4a97197439e4f7a605} <script>: AUTH: REGISTER FAILED from 128.90.175.245 (code: -3) fd=47.243.168.212, adu=sip:47.243.168.212:5060, aa=MD5, ar=47.243.168.212, au=6105, ad=, aU=6105, [email protected]
Feb 10 20:52:45 hkg /usr/sbin/kamailio[404004]: NOTICE: {REGISTER 1 1 REGISTER e5f4a872780896e4f7a607} <script>: AUTH: REGISTER FAILED from 128.90.175.245
... show less
Fraud VoIP
Aidar Kamalov
10 Feb 2023
Feb 10 20:46:36 sanjose-sip-ulap-net /usr/sbin/kamailio[1014926]: NOTICE: {REGISTER 1 1 REGISTER e5f ... show more Feb 10 20:46:36 sanjose-sip-ulap-net /usr/sbin/kamailio[1014926]: NOTICE: {REGISTER 1 1 REGISTER e5f4a986338809e4f7a605} <script>: AUTH: REGISTER FAILED from 128.90.175.245 (code: -5) fd=155.248.209.56, adu=<null>, aa=<null>, ar=<null>, au=<null>, ad=<null>, aU=<null>, [email protected]
Feb 10 20:46:37 sanjose-sip-ulap-net /usr/sbin/kamailio[1014921]: NOTICE: {REGISTER 1 2 REGISTER e5f4a986338809e4f7a605} <script>: AUTH: REGISTER FAILED from 128.90.175.245 (code: -3) fd=155.248.209.56, adu=sip:155.248.209.56:5060, aa=MD5, ar=155.248.209.56, au=6105, ad=, aU=6105, [email protected]
Feb 10 20:46:37 sanjose-sip-ulap-net /usr/sbin/kamailio[1014919]: NOTICE: {REGISTER 1 3 REGISTER e5f4a986338809e4f7a605} <script>: AUTH: REGISTER FAILED from 128.90.175.245 (code: -3) fd=155.248.209.56, adu=sip:155.248.209.56:5060, aa=MD5, ar=155.248.209.56, au=6105, ad=, aU=6105, [email protected]
Feb 10 20:52:45 sanjose-sip-ulap-net /usr/sbin/kamailio[1014921]: NOTICE: {REGISTER 1 1 REGISTER
... show less
Fraud VoIP
FightAgainstAssholes!
10 Feb 2023
Bruteforce on SIP UDP 5060
Brute-Force
sgofferj
10 Feb 2023
Attack attempt on SIP server
Fraud VoIP
Hacking
Brute-Force