[asterisk-users] Under heavy attack

[Warren Selby]

To me it seems the real question is "What is going on today?". I normally get eight to ten asterisk-related fail2ban alerts a day between a few client sites - today I've received at least 10 times that many attacks on just one site. These are all coming in from different ip addresses, a new one every few minutes. These addresses are located all across the globe. This seems like some kind of coordinated assault - maybe someone is activating a 'bot-net' for sip attacks?

Thanks,
--Warren Selby

On Oct 30, 2010, at 9:02 PM, Andrew Latham <lathama at gmail.com> wrote:

> They have agreements for termination to locations with high rates.
> These types of attacks happen on servers that fit a digital signature.
> With certain ports or certain versions of software on those ports.
> Yes the Art of War is required reading for todays systems
> administration professionals...  Change your signature, change your
> ports.
> 
>> What are they after, anyway? Merely cheap international calls?
>> 
>> --
>>               Tzafrir Cohen
> 
> -- 
> _____________________________________________________________________
> -- Bandwidth and Colocation Provided by http://www.api-digital.com --
> New to Asterisk? Join us for a live introductory webinar every Thurs:
>               http://www.asterisk.org/hello
> 
> asterisk-users mailing list
> To UNSUBSCRIBE or update options visit:
>   http://lists.digium.com/mailman/listinfo/asterisk-users