On 10/30/2010 11:25 PM, Warren Selby wrote: > To me it seems the real question is "What is going on today?". I normally get > eight to ten asterisk-related fail2ban alerts a day between a few client > sites - today I've received at least 10 times that many attacks on just one > site. These are all coming in from different ip addresses, a new one every > few minutes. These addresses are located all across the globe. This seems > like some kind of coordinated assault - maybe someone is activating a > 'bot-net' for sip attacks? > >
Certainly looks like it to me, I am seeing the same thing. > Thanks, > --Warren Selby > > On Oct 30, 2010, at 9:02 PM, Andrew Latham<lath...@gmail.com> wrote: > > >> They have agreements for termination to locations with high rates. >> These types of attacks happen on servers that fit a digital signature. >> With certain ports or certain versions of software on those ports. >> Yes the Art of War is required reading for todays systems >> administration professionals... Change your signature, change your >> ports. >> >> >>> What are they after, anyway? Merely cheap international calls? >>> >>> -- >>> Tzafrir Cohen >>> >> -- >> _____________________________________________________________________ >> -- Bandwidth and Colocation Provided by http://www.api-digital.com -- >> New to Asterisk? Join us for a live introductory webinar every Thurs: >> http://www.asterisk.org/hello >> >> asterisk-users mailing list >> To UNSUBSCRIBE or update options visit: >> http://lists.digium.com/mailman/listinfo/asterisk-users >> > -- _____________________________________________________________________ -- Bandwidth and Colocation Provided by http://www.api-digital.com -- New to Asterisk? Join us for a live introductory webinar every Thurs: http://www.asterisk.org/hello asterisk-users mailing list To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users