[asterisk-users] Under heavy attack

[jon pounder]

On 10/30/2010 04:07 PM, Stuart Sheldon wrote:


any registry of abusers like for spam ?
any list of complete ip ranges for countries where abuse is rampant to 
block ?

I am getting sick of the one offs and ready to start blocking big chunks 
of address space.



> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA256
>
> We are also seeing an increase in attacks. And yes, there is a benefit
> to blocking them. They tend to go away if you have them restricted,
> where if you let them go at it, they will sit on your host for sometimes
> hours.
>
> Stu
>
>
> On 10/30/2010 12:43 PM, Joel Maslak wrote:
>    
>> Is there really any benefit to blocking these, if you use good passwords?
>>
>> On Sat, Oct 30, 2010 at 1:20 PM, Warren Selby<wcselby at selbytech.com
>> <mailto:wcselby at selbytech.com>>  wrote:
>>
>>      I'm experiencing this on one of my clients servers. The attack is
>>      ongoing.
>>
>>      Thanks,
>>      --Warren Selby
>>
>>      On Oct 30, 2010, at 2:28 PM, Zeeshan Zakaria<zishanov at gmail.com
>>      <mailto:zishanov at gmail.com>>  wrote:
>>
>>      
>>>      My main asterisk server is under unusual heavy attack, and so far
>>>      Fail2Ban has blocked about 30 IPs, from various different
>>>      countries. At this time it is blocking about 1 IP address every
>>>      few minutes.
>>>
>>>      Just wondering if anybody else is also experiencing unusually
>>>      increased hack attempts today?
>>>
>>>      Zeeshan A Zakaria
>>>
>>>      --
>>>      <http://www.ilovetovoip.com>www.ilovetovoip.com
>>>      <http://www.ilovetovoip.com>
>>>      <http://www.pbxforall.com>www.pbxforall.com
>>>      <http://www.pbxforall.com>  (beta)
>>>
>>>      --
>>>      _____________________________________________________________________
>>>      -- Bandwidth and Colocation Provided by http://www.api-digital.com --
>>>      New to Asterisk? Join us for a live introductory webinar every Thurs:
>>>
>>>      <http://www.asterisk.org/hello>http://www.asterisk.org/hello
>>>
>>>      asterisk-users mailing list
>>>      To UNSUBSCRIBE or update options visit:
>>>
>>>      <http://lists.digium.com/mailman/listinfo/asterisk-users>http://lists.digium.com/mailman/listinfo/asterisk-users
>>>        
>>      --
>>      _____________________________________________________________________
>>      -- Bandwidth and Colocation Provided by http://www.api-digital.com --
>>      New to Asterisk? Join us for a live introductory webinar every Thurs:
>>                    http://www.asterisk.org/hello
>>
>>      asterisk-users mailing list
>>      To UNSUBSCRIBE or update options visit:
>>        http://lists.digium.com/mailman/listinfo/asterisk-users
>>
>>
>>      
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.10 (GNU/Linux)
>
> iQIcBAEBCAAGBQJMzHsdAAoJEFKVLITDJSGS2fwP/j7/Jkcza71zoEMPMdegh+K5
> ASVOda6yPazRmY6LAjqrNTwMyASmmngr/LLZbBmqRNXdzjWqDJ5+CEmCK09/WlcB
> etoz09XTNd0mswMq8r2uVSdKE7PBTZRlNokIfwbwSvWFIL01qbdA3urHVIJuNDuI
> V2eN94K+lgX7m69TFHe4J209X7BXQS3HxDl0aQVcW+NnofWj9o6BXoLdQXrkS/sG
> C7npBqpUe1asoyl2Bo5qSpzzMGiebZOcMIjKAEEu0anESZKKuNIhcj4BX6uOCRk0
> 8//IlNmqMVKfJr8ttpqZVbbKI9AKjTWBHV77LzSNkPgcFjD6WeiOSnOMWW0UNAgE
> 3iaTCzXO9GwJLhRucdoezCI78qCkFdO8N0C6UZcrW/eP7bJdxa4Ab0of3EtG3V2U
> QjeKQYYpL7O0my3uwO4I1BY7qiDTqibTzQ6Gb7Y4No029R78cWff3xIueU5rNZeO
> Fr/2ODNFZE0Q1+KA7d29308jIKY0Ubz5s/QBKbAjWfQk80dQ4BE/6nqBUJmZWIAx
> CNL8dK+jv6uCIi5Ae2tMHGestkcy4Ol4fdKC6emVLgm4DbRYKAg259lkoAifT7qo
> 8/0LWfjuP8mXHaQ2x023wTKg+FyZCIwJmpr8UDaKwMdtFgwpLuZeQrYuRQiW8TCS
> xkBSL1xkLIoEy1b3NLDv
> =eqQ+
> -----END PGP SIGNATURE-----
>
>