[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[ale] SIP attack
- Subject: [ale] SIP attack
- From: ale at pcartwright.com (Paul Cartwright)
- Date: Thu, 14 Oct 2010 16:10:34 -0400
- In-reply-to: <1287086085.32135.121.camel@cfowler-desktop>
- References: <[email protected]> <1287086085.32135.121.camel@cfowler-desktop>
On Thu October 14 2010, Chris Fowler wrote:
> Our PBX was attacked and hacked. ?Lost about $72 in SIP charges. ?I've
> implemented fail2ban and have changed our passwords. ?Looking at other
> things to do as well.
>
> I know fail2ban works because there was an attempt today and fail2ban
> did exactly what it should.
# dpkg --list|grep fail
ii fail2ban 0.8.4-2
bans IPs that cause multiple authentication errors
implemented fail2ban a while back.. just because I CAN :)
seems to me I get an email every so often with updates on how many entries I
have..
--
Paul Cartwright
Registered Linux user # 367800
Registered Ubuntu User #12459
http://usdebtclock.org/