[YMCS/YDMP Free Trial Program]Yealink would like to offer Free Trial Program of Yealink device management service for our current eligible customers. You can see the details below.
https://www.yealink.com/ydmp-freetrial-2020


Post Reply 
 
Thread Rating:
  • 0 Votes - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
Hacked phones: IP access control / pubkey auth?
Author Message
jpoppenk Offline
Junior Member
**

Posts: 4
Joined: Feb 2016
Reputation: 0
Post: #4
RE: Hacked phones: IP access control / pubkey auth?
(02-25-2016 05:47 AM)Yealink_Karl Wrote:  I think the FAQ can help you, please try this.
FAQ: http://support.yealink.com/faq/faqInfo?id=181

Hi Yealink Karl,

Thanks for the link, but it doesn't help. As I mentioned, I have block IP calls enabled, and do not experience phantom ringing. The other feature, Accept SIP trust server only, is also already enabled.

Could you kindly respond directly to the questions I posed? I would also be grateful if you could help me spot the means of intrusion. I will post a dump of my level 6 syslog files in a separate reply.

Cheers,
Jordan

(02-25-2016 11:40 AM)elementpbx Wrote:  I think he already had one of those listed (Block IP Calls). I too am curious as to how they got through. Did you pull a syslog. If not I would enable it so when it happens you can probably see how they did it.

Thanks for suggesting the syslog. I had switched it to level 6 prior to the recent intrusion. I am posting the logs file here in case someone knows how to parse it. The intrusion would have taken place overnight, and the times shown seem to be 5 hours in advance of the real time. The REDACTED_IP and REDACTED_USERNAME were inserted by me.

FWIW, all of my phones with random 50 character passwords have now succumbed.


Attached File(s)
.zip  log.zip (Size: 72.86 KB / Downloads: 6)
(This post was last modified: 02-26-2016 01:40 AM by jpoppenk.)
02-26-2016 01:32 AM
Find all posts by this user    like0    dislike0 Quote this message in a reply
Post Reply 


Messages In This Thread
RE: Hacked phones: IP access control / pubkey auth? - jpoppenk - 02-26-2016 01:32 AM

Possibly Related Threads...
Thread: Author Replies: Views: Last Post
  Probem with Queues and ringing phones Saccara 0 1,093 11-30-2022 05:23 PM
Last Post: Saccara
  Phones crash using VM Impress1 1 2,675 03-29-2022 09:54 PM
Last Post: Yisroel_MongoTEL
  How to access web UI from different subnet? Jeremy17 0 2,231 03-02-2022 05:32 AM
Last Post: Jeremy17
  Need to completely reset phones Chris708 1 4,067 02-26-2021 03:58 AM
Last Post: Chris708
  T46S/T46G show green icon (blf) although phones disconnected (Asterisk) jobst 0 3,506 09-16-2020 04:29 AM
Last Post: jobst
  Cannot access from Chrome gaz8080 2 6,030 01-28-2020 01:24 PM
Last Post: gaz8080
  Root access to a T46S or T48S Alith7 0 3,830 10-28-2019 05:25 PM
Last Post: Alith7
  Using a shared phonebook managed bij phones johandezwaan 1 5,085 09-30-2019 01:32 PM
Last Post: mara
Bug T41G WiFi cannot access web gui ufo 1 5,791 09-01-2019 05:13 PM
Last Post: Babylonia
  Yealink Wireless IP Phones RyanL 2 6,767 08-19-2019 03:03 PM
Last Post: jolouis

Forum Jump:


User(s) browsing this thread: 1 Guest(s)

Contact Us   Yealink   Return to Top   Return to Content   Lite (Archive) Mode   RSS Syndication