I saw an uptick over the weekend of brute force attacks against our asterisk boxes. Go fail2ban. Joseph On Mon, Nov 1, 2010 at 2:58 PM, Richard Barnes <richard.barnes at gmail.com> wrote:
So, going back to your original question, the answer might not be "VoIP based botnet", but rather "VoIP targeted botnet" -- a botnet that's trying to brute-force passwords for access into a VoIP system.
On Mon, Nov 1, 2010 at 1:02 PM, J. Oquendo <sil at infiltrated.net> wrote:
Richard Barnes wrote:
Could you say a little more about what this weird traffic was? ?Were these SIP messages? --Richard
Sorry, should have been more clear. These were SIP registrations + bruteforce attacks.
--
=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ J. Oquendo SGFA, SGFE, C|EH, CNDA, CHFI, OSCP, CPT
"It takes 20 years to build a reputation and five minutes to ruin it. If you think about that, you'll do things differently." - Warren Buffett
227C 5D35 7DCB 0893 95AA ?4771 1DCE 1FD1 5CCD 6B5E http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x5CCD6B5E
_______________________________________________ VoiceOps mailing list VoiceOps at voiceops.org https://puck.nether.net/mailman/listinfo/voiceops