🇬🇧
TelcoSwitch NOC
2023-02-17 03:57:38
(3 years ago)
31.6.19.99 is a port scanner attempting to scan a server
Port Scan
🇸🇬
Aidar Kamalov
2023-02-16 00:41:06
(3 years ago)
Feb 16 00:35:58 sgp /usr/sbin/kamailio[827650]: NOTICE: {REGISTER 1 3 REGISTER e5f4a783843818e4f7a20 ...
show more
Feb 16 00:35:58 sgp /usr/sbin/kamailio[827650]: NOTICE: {REGISTER 1 3 REGISTER e5f4a783843818e4f7a203} <script>: AUTH: REGISTER FAILED from 31.6.19.99 (code: -3) fd=47.241.222.225, adu=sip:47.241.222.225:5060, aa=MD5, ar=47.241.222.225, au=203, ad=, aU=203, [email protected]
Feb 16 00:41:05 sgp /usr/sbin/kamailio[827656]: NOTICE: {REGISTER 1 1 REGISTER e5f4a722293070e4f7a205} <script>: AUTH: REGISTER FAILED from 31.6.19.99 (code: -5) fd=47.241.222.225, adu=<null>, aa=<null>, ar=<null>, au=<null>, ad=<null>, aU=<null>, [email protected]
Feb 16 00:41:05 sgp /usr/sbin/kamailio[827656]: NOTICE: {REGISTER 1 1 REGISTER e5f4a722293070e4f7a205} <script>: AUTH: REGISTER FAILED from 31.6.19.99 (code: -5) fd=47.241.222.225, adu=<null>, aa=<null>, ar=<null>, au=<null>, ad=<null>, aU=<null>, [email protected]
Feb 16 00:41:06 sgp /usr/sbin/kamailio[827657]: NOTICE: {REGISTER 1 2 REGISTER e5f4a722293070e4f7a205} <script>: AUTH: REGISTER FAILED from 31.6.19.99 (code: -3) fd=47.241.222.225,
...
show less
Fraud VoIP
🇺🇸
kuj
2023-02-15 23:26:49
(3 years ago)
VoIP Brute Force Attack
Fraud VoIP
Brute-Force
🇨🇭
Inaxas AG
2023-02-15 23:26:00
(3 years ago)
Inaxas Security for Asterisk banned IP after port scan/brute force register on Port 5060.
Ilegitim ...
show more
Inaxas Security for Asterisk banned IP after port scan/brute force register on Port 5060.
Ilegitimate register attempt: 2 times between: 16/02/2023 - 00:19 and 16/02/2023 - 00:25.
Unauthorized dial attempt: 1 times between: 16/02/2023 - 00:20 and 16/02/2023 - 00:20.
show less
Fraud VoIP
Port Scan
Brute-Force
🇦🇹
FightAgainstAssholes!
2023-02-15 23:24:55
(3 years ago)
Bruteforce on SIP UDP 5060
Brute-Force
🇷🇺
webserfer
2023-02-15 23:21:43
(3 years ago)
[f2b] asterisk scan/brute [W1:2:90d]
Fraud VoIP
Brute-Force
🇫🇮
MindSolve
2023-02-15 23:20:25
(3 years ago)
2023-02-16 00:20:24.668829 [WARNING] sofia_reg.c:1798 SIP auth challenge (REGISTER) on sofia profile ...
show more
2023-02-16 00:20:24.668829 [WARNING] sofia_reg.c:1798 SIP auth challenge (REGISTER) on sofia profile 'internal' for [[email protected] ] from ip 31.6.19.99
show less
Fraud VoIP
Hacking
Brute-Force
🇺🇸
Teknikal_Domain
2023-02-15 23:19:00
(3 years ago)
[Feb 15 18:18:58] NOTICE[1655104] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:201@7 ...
show more
[Feb 15 18:18:58] NOTICE[1655104] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected] >' failed for '31.6.19.99:54009' (callid: e5f4a173264503e4f7a20) - No matching endpoint found
[Feb 15 18:18:59] NOTICE[1655104] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected] >' failed for '31.6.19.99:54009' (callid: e5f4a173264503e4f7a20) - No matching endpoint found
[Feb 15 18:18:59] NOTICE[1655104] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected] >' failed for '31.6.19.99:54009' (callid: e5f4a173264503e4f7a20) - Failed to authenticate
[Feb 15 18:18:59] NOTICE[1655104] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected] >' failed for '31.6.19.99:54009' (callid: e5f4a173264503e4f7a20) - No matching endpoint found
[Feb 15 18:18:59] NOTICE[1655104] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected] >' failed for '31.6.19.99:54009' (callid: e5f4a173264503e4f7a20) - Failed
...
show less
Fraud VoIP
Brute-Force
🇫🇷
0xNath
2023-02-15 23:17:58
(3 years ago)
[Feb 16 00:17:57] SECURITY[320062] res_security_log.c: SecurityEvent="InvalidAccountID",EventTV="202 ...
show more
[Feb 16 00:17:57] SECURITY[320062] res_security_log.c: SecurityEvent="InvalidAccountID",EventTV="2023-02-16T00:17:57.768+0100",Severity="Error",Service="PJSIP",EventVersion="1",AccountID="201",SessionID="e5f4a508106667e4f7a20",LocalAddress="IPV4/UDP/192.168.1.253/5060",RemoteAddress="IPV4/UDP/31.6.19.99/60646"
[Feb 16 00:17:57] SECURITY[320062] res_security_log.c: SecurityEvent="InvalidAccountID",EventTV="2023-02-16T00:17:57.927+0100",Severity="Error",Service="PJSIP",EventVersion="1",AccountID="201",SessionID="e5f4a508106667e4f7a20",LocalAddress="IPV4/UDP/192.168.1.253/5060",RemoteAddress="IPV4/UDP/31.6.19.99/60646"
[Feb 16 00:17:57] SECURITY[320062] res_security_log.c: SecurityEvent="ChallengeResponseFailed",EventTV="2023-02-16T00:17:57.927+0100",Severity="Error",Service="PJSIP",EventVersion="1",AccountID="<unknown>",SessionID="e5f4a508106667e4f7a20",LocalAddress="IPV4/UDP/192.168.1.253/5060",RemoteAddress="IPV4/UDP/31.6.19.99/60646",Challenge="1676503077/069a7621fc3728412252559ac5da9
...
show less
Fraud VoIP
Brute-Force
🇩🇪
Sandro
2023-01-24 13:47:01
(3 years ago)
[2023-01-24 13:47:01] NOTICE[1967978] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:7 ...
show more
[2023-01-24 13:47:01] NOTICE[1967978] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected] >' failed for '31.6.19.99:57515' (callid: e5f4a127796398e4f7a7007) - No matching endpoint found
[2023-01-24 13:47:01] SECURITY[1075298] res_security_log.c: SecurityEvent="InvalidAccountID",EventTV="2023-01-24T13:47:01.196+0000",Severity="Error",Service="PJSIP",EventVersion="1",AccountID="7007",SessionID="e5f4a127796398e4f7a7007",LocalAddress="IPV4/UDP/94.130.148.43/5060",RemoteAddress="IPV4/UDP/31.6.19.99/57515"
[2023-01-24 13:47:01] NOTICE[1961266] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected] >' failed for '31.6.19.99:57515' (callid: e5f4a127796398e4f7a7007) - No matching endpoint found
[2023-01-24 13:47:01] NOTICE[1961266] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected] >' failed for '31.6.19.99:57515' (callid: e5f4a127796398e4f7a7007) - Failed to authenticate
[2023-01-24 13:47:01] SECURITY[1075298] res_s
...
show less
Brute-Force
🇵🇱
6GNet.pl
2023-01-24 13:09:59
(3 years ago)
[2023-01-24 13:50:04] SECURITY[6702] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="20 ...
show more
[2023-01-24 13:50:04] SECURITY[6702] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2023-01-24T13:50:04.358+0100",Severity="Error",Service="SIP",EventVersion="2",AccountID="6009",SessionID="0x7fb49c81c320",LocalAddress="IPV4/UDP/64.18.129.55/5060",RemoteAddress="IPV4/UDP/31.6.19.99/57295",Challenge="6f02f92b",ReceivedChallenge="6f02f92b",ReceivedHash="d0b624dd452b1fa047e05b1c73dd2cde"
[2023-01-24 13:56:32] SECURITY[6702] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2023-01-24T13:56:32.189+0100",Severity="Error",Service="SIP",EventVersion="2",AccountID="7000",SessionID="0x7fb49c81c320",LocalAddress="IPV4/UDP/64.18.129.55/5060",RemoteAddress="IPV4/UDP/31.6.19.99/60137",Challenge="774744bf",ReceivedChallenge="774744bf",ReceivedHash="10a1595bd09b3a9fca6103dbf9d7b865"
[2023-01-24 14:03:08] SECURITY[6702] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2023-01-24T14:03:08.132+0100",Severity="Error",Service="SIP",EventVersion="2",AccountID="7001",Ses
...
show less
Fraud VoIP
Brute-Force
🇪🇸
www.rentelwifi.com
2023-01-24 13:04:00
(3 years ago)
VoIP Brute Force Attack
Fraud VoIP
Brute-Force
🇺🇸
kuj
2023-01-24 12:57:22
(3 years ago)
VoIP Brute Force Attack
Fraud VoIP
Brute-Force
🇨🇭
Inaxas AG
2023-01-24 12:56:38
(3 years ago)
Inaxas Security for Asterisk banned IP after port scan/brute force register on Port 5060.
Ilegitim ...
show more
Inaxas Security for Asterisk banned IP after port scan/brute force register on Port 5060.
Ilegitimate register attempt: 2 times between: 24/01/2023 - 13:49 and 24/01/2023 - 13:56.
Unauthorized dial attempt: 1 times between: 24/01/2023 - 13:50 and 24/01/2023 - 13:50.
show less
Fraud VoIP
Port Scan
Brute-Force
🇷🇺
webserfer
2023-01-24 12:53:37
(3 years ago)
[f2b] asterisk scan/brute [W1:2:30d]
Fraud VoIP
Brute-Force