This guy is one of them. Hammering me every few seconds. https://www.abuseipdb.com/check/185.53.88.41?page=7 …
Show this thread
Lol, so I only set up this (insecure, but with a basic password) SIP server a couple days ago, but I'm already getting about 1 attempt per second to make calls through it, from multiple clients. I guess attackers trying to call through any open SIP server are a thing?
-
-
-
Fun: since this is UDP it isn't subject to TCP handshakes... so removing the firewall rules forwarding 5060 is not enough. You need to kill the conntrack entries, or else everyone who *already* is hammering you will continue to be able to do so, forever (via established rules).
Show this thread
End of conversation
New conversation -
-
-
Same for SSH, same for FTP, same for HTTP (automated WordPress attacks). Welcome to the Internet of 2020! Enjoy.
-
I know about all of those, but I'm impressed they found me so fast and are doing this for SIP.
- Show replies
New conversation -
-
-
The fastest I've ever seen was abotu 10 seconds after installing OpenSSH server, I got pounded.
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
It's been a thing for the past 10 years at least
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
Finding an open SIP server that can call phone numbers is a very direct way of making money by calling expensive numbers (in some other country where attempts to reverse the charges won't reach you), so there's a clear motivation for criminals to do it.
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
What’s current eta for shodan scans over the full ipv4 range nowadays? A couple of hours?
-
This Tweet is unavailable.
- Show replies
New conversation -
-
-
Yep, they'll try to dial Premium-rate/0900 numbers and will generate ten-thousand dollar phone bills in under a day.
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.