[VoiceOps] Strange attacks over the weekend

[Joseph Jackson]

I saw an uptick over the weekend of brute force attacks against our
asterisk boxes.  Go fail2ban.

Joseph


On Mon, Nov 1, 2010 at 2:58 PM, Richard Barnes <richard.barnes at gmail.com> wrote:
> So, going back to your original question, the answer might not be
> "VoIP based botnet", but rather "VoIP targeted botnet" -- a botnet
> that's trying to brute-force passwords for access into a VoIP system.
>
> On Mon, Nov 1, 2010 at 1:02 PM, J. Oquendo <sil at infiltrated.net> wrote:
>> Richard Barnes wrote:
>>> Could you say a little more about what this weird traffic was?  Were
>>> these SIP messages?
>>> --Richard
>>>
>>
>> Sorry, should have been more clear. These were SIP registrations +
>> bruteforce attacks.
>>
>> --
>>
>> =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
>> J. Oquendo
>> SGFA, SGFE, C|EH, CNDA, CHFI, OSCP, CPT
>>
>> "It takes 20 years to build a reputation and five minutes to
>> ruin it. If you think about that, you'll do things
>> differently." - Warren Buffett
>>
>> 227C 5D35 7DCB 0893 95AA  4771 1DCE 1FD1 5CCD 6B5E
>> http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x5CCD6B5E
>>
>>
>
> _______________________________________________
> VoiceOps mailing list
> VoiceOps at voiceops.org
> https://puck.nether.net/mailman/listinfo/voiceops
>