To me it seems the real question is "What is going on today?". I normally get eight to ten asterisk-related fail2ban alerts a day between a few client sites - today I've received at least 10 times that many attacks on just one site. These are all coming in from different ip addresses, a new one every few minutes. These addresses are located all across the globe. This seems like some kind of coordinated assault - maybe someone is activating a 'bot-net' for sip attacks?
Thanks, --Warren Selby On Oct 30, 2010, at 9:02 PM, Andrew Latham <lath...@gmail.com> wrote: > They have agreements for termination to locations with high rates. > These types of attacks happen on servers that fit a digital signature. > With certain ports or certain versions of software on those ports. > Yes the Art of War is required reading for todays systems > administration professionals... Change your signature, change your > ports. > >> What are they after, anyway? Merely cheap international calls? >> >> -- >> Tzafrir Cohen > > -- > _____________________________________________________________________ > -- Bandwidth and Colocation Provided by http://www.api-digital.com -- > New to Asterisk? Join us for a live introductory webinar every Thurs: > http://www.asterisk.org/hello > > asterisk-users mailing list > To UNSUBSCRIBE or update options visit: > http://lists.digium.com/mailman/listinfo/asterisk-users -- _____________________________________________________________________ -- Bandwidth and Colocation Provided by http://www.api-digital.com -- New to Asterisk? Join us for a live introductory webinar every Thurs: http://www.asterisk.org/hello asterisk-users mailing list To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users
