[ale] SIP attack

Paul Cartwright ale at pcartwright.com
Thu Oct 14 16:10:34 EDT 2010


On Thu October 14 2010, Chris Fowler wrote:
> Our PBX was attacked and hacked.  Lost about $72 in SIP charges.  I've
> implemented fail2ban and have changed our passwords.  Looking at other
> things to do as well.
>
> I know fail2ban works because there was an attempt today and fail2ban
> did exactly what it should.

# dpkg --list|grep fail      
ii  fail2ban                                                0.8.4-2                              
bans IPs that cause multiple authentication errors

implemented fail2ban a while back.. just because I CAN :)

seems to me I get an email every so often with updates on how many entries I 
have..
-- 
Paul Cartwright
Registered Linux user # 367800
Registered Ubuntu User #12459
http://usdebtclock.org/



More information about the Ale mailing list