-
Amazon Deals - ToS - Like us?
BSNL Broadband FUP Exhausted due to Botnet Attack
- Thread starter Kick933
- Start date
- Replies 32
- Views 3,245
abhinavmail1
I got banned!
I am facing same problem. I filed complaint on bsnl self care portel, at bsnl office and I filed complaint even of twitter by tagging bsnl corporate and bsnl up east handles but they don't even care to reply.
varkey
I got banned!
Yeah looks like many users are affected but I am curious as to how this could have happened exactly. 
Another related thread - Help! I feel cheated out of data by BSNL | BSNL FTTH Bharat Fiber Broadband
Another related thread - Help! I feel cheated out of data by BSNL | BSNL FTTH Bharat Fiber Broadband
PSA : Change Password and See if ONT NET Modem is on Latest Firmware | BSNL Bharat Fiber Broadband
Last few weks there has been drastic drop in speed and connection , My local service guy told that there has been a massive server issues (?malware attack ?) and they have been issuing security patches . So see to that you change the ADMIN password to more secure one and also check if you are...
broadband.forum
How?
It was easy to attack.
None of the LCO had changed default passwords. Most of the users never bother to change their router administration password.
What happened?
The speed is controlled from the Exchange end. The OLT of LCOs was open to connect http and telenet as well as remote management.
It was not hard to get remote management access as each OLT already had open http port.The culprit must have accessed that port and tried to login via loopback to administration portal. Then he injected botnet.
It all goes for our security usage by BSNL and unknowledgeable people handling complicated setup.
The OLTs have unrestricted access to the exchange server which ultimately goes to AS9829 for termination.
As soon as attack was triggered, the request terminating at AS9829 must have increased tremendously and the NIB team responded by limiting access for the moment. Immediately, Most affected OLTs were immediately attended and updated with latest firmware which had security protocols activated by default.
The process began from exchange level as they had most affect on AS9829.And is sprinkling to LCOs OLT even today.
IF ANYONE HAVE SLOW SPEED ISSUE, CONTACT EXCHANGE PERSON WHO HANDLES BROADBAND TECHNICALS AND GET YOUR DATA CAP RESET TO GET FULL SPEED AGAIN.
Wish you a good time.
Yours
None of the LCO had changed default passwords. Most of the users never bother to change their router administration password.
What happened?
The speed is controlled from the Exchange end. The OLT of LCOs was open to connect http and telenet as well as remote management.
It was not hard to get remote management access as each OLT already had open http port.The culprit must have accessed that port and tried to login via loopback to administration portal. Then he injected botnet.
It all goes for our security usage by BSNL and unknowledgeable people handling complicated setup.
The OLTs have unrestricted access to the exchange server which ultimately goes to AS9829 for termination.
As soon as attack was triggered, the request terminating at AS9829 must have increased tremendously and the NIB team responded by limiting access for the moment. Immediately, Most affected OLTs were immediately attended and updated with latest firmware which had security protocols activated by default.
The process began from exchange level as they had most affect on AS9829.And is sprinkling to LCOs OLT even today.
IF ANYONE HAVE SLOW SPEED ISSUE, CONTACT EXCHANGE PERSON WHO HANDLES BROADBAND TECHNICALS AND GET YOUR DATA CAP RESET TO GET FULL SPEED AGAIN.
Wish you a good time.
Yours
YEp my data cap is reseted too, albeit connection was very unstable and just now got stability
For local servers speed was great(even reaching 200 UL ), for international servers it was hit and miss <100KB/sec for some and 100 Mbps for other, altho speeds to google's server was constantly good, just now it got stabilized
and pings are erratic too Singapore pings are 80ms but chennai pings are 550+ ms?, google dns is fine but clouydfare usedd to be 40 ms is now 200+ ms
bwt ho do you get OLT's IP, isn't it transparent?
For local servers speed was great(even reaching 200 UL ), for international servers it was hit and miss <100KB/sec for some and 100 Mbps for other, altho speeds to google's server was constantly good, just now it got stabilized
and pings are erratic too Singapore pings are 80ms but chennai pings are 550+ ms?, google dns is fine but clouydfare usedd to be 40 ms is now 200+ ms
bwt ho do you get OLT's IP, isn't it transparent?
abhinavmail1
I got banned!
