[asterisk-users] Interesting attack tonight & fail2ban them

Jeroen Eeuwes jeroeneeuwes at gmail.com
Wed Dec 28 23:29:28 CST 2011


Hi Michelle,

> I just realized there is no IP (host) in the message line, so no way for fail2ban to catch it.

Probably my understanding is limited, but it seems to me that they
have already 'access' to your Asterisk for them to be able to try to
make outgoing calls. Wouldn't it be better to make sure they get the
"usual" errors like "Registration from failed - no matching peer
found"?

In other words, how did they get this far in the first place?

Best regards,
Jeroen Eeuwes



More information about the asterisk-users mailing list