[Freeswitch-users] Question about SIP security

[Hristo Benev]

I also see a lot of attempts to connect to 5060, but it looks like a botnet since I never have more than 1 form 1 IP - Here fail2ban is helpless since attempts per IP limit is never reached.


 >-------- Оригинално писмо --------
 >От:  Patrick Lists 
 >Относно: Re: [Freeswitch-users] Question about SIP security
 >До: FreeSWITCH Users Help 
 >Изпратено на: Петък, 2010, Юли 30 20:54:49 EEST

 >On 07/30/2010 05:56 PM, Mike van Lammeren wrote:
 >[snip]
 >> This is probably not the forum for it, but anyone reading this might
 >> want to check their traffic for this IP: 61.164.41.144
 >
 >Hi Mike,
 >
 >I see something similar although not from the same IP address. For weeks 
 >now I get a lot of SIP connections all from China. The easiest solution 
 >(for me) was to install fail2ban, configure, fire and forget. Kinda fun 
 >to watch them get blocked if y're bored :)
 >
 >Regards,
 >Patrick
 >
 >_______________________________________________
 >FreeSWITCH-users mailing list
 >FreeSWITCH-users at lists.freeswitch.org
 >http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
 >UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
 >http://www.freeswitch.org
 >