Hello,
Sorry for creating a new topic but I thought this topic was seperate enough. I created an Asterisk server on Centos at work on a local server. I need to recreate this on AWS. Is there any way to speed this up or would I have to do everything again to create it on an EC2 instance?
Thank you
The latter, you need to do the work unless you have some way to export a snapshot of your VM/system and AWS offers a way to import said snapshot.
Hello,
thank you for the reply. So I did all the work on an EC2 instance and set it up. Although I feel it may be possible I got hacked now. When I ssh into the terminal and use telnet to connect to the local server AMI, it connects and constantly keeps sending either ChallengeSent events or ChallengeResponseFailed events, both are followed by InvalidAccountID events and this is happening non stop. When I start the Asterisk server or log into the Asterisk console from the same terminal (the EC2 server) it seems to be a different instance of asterisk, any changes I make to the config files there don’t seem to affect the one I’m connecting to from the AMI. Anyone know why that may be happening? Have I been hacked?
Event: ChallengeSent
Privilege: security,all
EventTV: 2021-03-11T15:28:24.027+0000
Severity: Informational
Service: PJSIP
EventVersion: 1
AccountID:
SessionID: 1639254334-160420732-97787595
LocalAddress: IPV4/UDP/172.31.2.215/5060
RemoteAddress: IPV4/UDP/45.134.144.3/52957
Challenge:
Event: InvalidAccountID
Privilege: security,all
EventTV: 2021-03-11T15:28:24.717+0000
Severity: Error
Service: PJSIP
EventVersion: 1
AccountID: xdadea
SessionID: 805192747-1443079263-496402683
LocalAddress: IPV4/UDP/172.31.2.215/5060
RemoteAddress: IPV4/UDP/45.134.144.3/57073
this is what the AMI shows
Thank you
The logs show attempted hacking, not successful hacking, and, in this case, the solution is to block all Palestinian networks in your firewall, as they are one of the main sources of IP telephony fraud. Better still, only permit from addresses you will actually use.
This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.