Link to home
Start Free TrialLog in
Avatar of tahasip
tahasip

asked on

urgent help neede my system hacked ??

Dear All ,
today may system  has been hacked and we lost more than 60000 $
1st if some one has user name and domain name can he got the passsword and how ?
how he made bulk calls?
now i want to do block the ip address that send many requests to register or any kind of requests but many from the same ip how to do this through the firewall   linux iptables
 pbx symintic end point
please help me as this is urgent
ASKER CERTIFIED SOLUTION
Avatar of upanwar
upanwar
Flag of India image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of tahasip
tahasip

ASKER

thanks for ur replay
many responces that could help me direct i will be gratfull
Avatar of tahasip

ASKER

Plase if u have some thing for windowes that do the same ??
I am good in Linux only. dont have so much idea about windows. Could you tell me which box has been hacked. It is a Linux box or its a mass attack.

Could you please tell in details.

Avatar of tahasip

ASKER

look my sip server is berkeke and runs on windowes server 2003 under symantic
Take a look at the VoIP Blacklist Project:

http://www.infiltrated.net/voipabuse/
Avatar of tahasip

ASKER

ok , but how i block certain ip which send many traffic to me and if it is not included at the list ?
Avatar of tahasip

ASKER

thanks for replay

As i see may be iam wrong from ur link that i choose certan ip and block it now , if certain ip hacking me now i want the block happen directly to this ip as it send so many trafiic to me how we can do this
??
can you provide some detail info. Like your provider, web browser, OS, etc
Avatar of tahasip

ASKER

iam using  http://www.brekeke.com/ as sip server running on windowes 2003
ans i also use symantic as firewall or antivirus
i'm a little confused, you want to block a specific IP address or anyone that tries to hack your system???
Avatar of tahasip

ASKER

no not spesific ip address , i want to block any ip that try to hack my server by sending many traffice
A good firewall and anti-virus should already being do this for you. I know my software notifies me when someone is attempting to get into my system. Here's a link yo some good security practices for VOIP users. Sorry I couldn't be more helpful:

http://docs.google.com/viewer?a=v&q=cache:bMS0EuEqdlsJ:www.teledynamic.com/support/Security/VOIP.doc+best+voip+security&hl=en&gl=us&pid=bl&srcid=ADGEESheCWnF34Qg70o110petwne2GUw33zl8g5ebvL1G7E7336El2RJTAfAC0LEFKRxQEqOqfWAih8xf6LkuL_S-hMsY3H4ICJkGciWXNed_qADuJlPoyUTbz0UDdvo9GmJ9ezDgUR7&sig=AHIEtbS3dimyRbnEznSJ-GqkY6hulwO26g
Avatar of tahasip

ASKER

is there any other sugestions for my situation ??
I am sorry but know one is going to be able to suggest a solution to do what you want. There is not a simple program you can install that will guaranty the security of your system. I wish it were that easy.

You need to hire someone to secure your system, that is able to do a through evaluation of the risk and can suggest solutions to match.

Your system can be secured you just do not have the knowledge to do it.
Avatar of tahasip

ASKER

ok from where i can get some one trusted ?
I would check to see if there is anyone in your area that is listed as a certified security expert in your local area.

Google or your phone book should give you a good start, I would then check to see if they are certified GIAC provides listings at their site http://www.giac.org.