[asterisk-users] Under heavy attack

[jon pounder]

On 10/30/2010 11:25 PM, Warren Selby wrote:
> To me it seems the real question is "What is going on today?". I normally get eight to ten asterisk-related fail2ban alerts a day between a few client sites - today I've received at least 10 times that many attacks on just one site. These are all coming in from different ip addresses, a new one every few minutes. These addresses are located all across the globe. This seems like some kind of coordinated assault - maybe someone is activating a 'bot-net' for sip attacks?
>
>    

Certainly looks like it to me, I am seeing the same thing.




> Thanks,
> --Warren Selby
>
> On Oct 30, 2010, at 9:02 PM, Andrew Latham<lathama at gmail.com>  wrote:
>
>    
>> They have agreements for termination to locations with high rates.
>> These types of attacks happen on servers that fit a digital signature.
>> With certain ports or certain versions of software on those ports.
>> Yes the Art of War is required reading for todays systems
>> administration professionals...  Change your signature, change your
>> ports.
>>
>>      
>>> What are they after, anyway? Merely cheap international calls?
>>>
>>> --
>>>                Tzafrir Cohen
>>>        
>> -- 
>> _____________________________________________________________________
>> -- Bandwidth and Colocation Provided by http://www.api-digital.com --
>> New to Asterisk? Join us for a live introductory webinar every Thurs:
>>                http://www.asterisk.org/hello
>>
>> asterisk-users mailing list
>> To UNSUBSCRIBE or update options visit:
>>    http://lists.digium.com/mailman/listinfo/asterisk-users
>>      
>