[Freeswitch-users] Scanners and botnet vulnerability

[Brian West]

It would log it, unless you have it misconfigured.

On Mon, Feb 1, 2021 at 11:02 AM Marc Bernard <marcb at voicemeup.com> wrote:

> Hi Ken,
>
> >> Wouldn't it make more sense for this log to include the IP of sip
> client that abandoned the call (5.6.7.8) instead of only the IP of the sip
> profile
> (1.2.3.4) ?
>
> What about my suggestion though, which would allow us to block IPs when
> there is a lot of abandoned calls ?
>
> This could also be added to fail2ban by default with a more aggressive ban.
>
> Cheers,
>
>
> -----Original Message-----
>
> this is super common. this is more likely a recon attack than an actual
> brute force attempt. Eother that they are looking for something with auth
> turned off. we see tons of these things regularly. Fail to ban helps some
> but using a SIP RBL and  dropping traffic via prefixes associated with
> regions and bad actor hosts seems to be the best course of action these
> days.
>
> I wont name the company, but a mjor european hosting company i drop their
> entire AS as its not worth the hassle.
>
>
> _________________________________________________________________________
>
> The FreeSWITCH project is sponsored by SignalWire https://signalwire.com
> Enhance your FreeSWITCH install with disruptive priced SMS and PSTN
> services.
> Build your next product on our scalable cloud platform.
>
> Join our online community to chat in real time
> https://signalwire.community
>
> Professional FreeSWITCH Services
> sales at freeswitch.com
> https://freeswitch.com
>
> Official FreeSWITCH Sites
> https://freeswitch.com/oss
> https://freeswitch.org/confluence
> https://cluecon.com
>
> FreeSWITCH-users mailing list
> FreeSWITCH-users at lists.freeswitch.org
> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
> https://freeswitch.com



-- 

Brian West | Co-founder and Developer

Need Commercial support? email sales at freeswitch.com

FreeSWITCH Solutions | 17345 Civic Drive #2531 Brookfield, WI 53045
<https://maps.google.com/?q=17345+Civic+Drive+%232531+Brookfield,+WI+53045&entry=gmail&source=g>

Email: brian at freeswitch.com

Mobile: 918-424-9378

Website: https://www.FreeSWITCH.com <https://www.freeswitch.com/>

[image: https://www.facebook.com/signalwireinc?src=email]
<https://www.facebook.com/freeswitch> [image:
https://twitter.com/freeswitch] <https://twitter.com/freeswitch>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeswitch.org/pipermail/freeswitch-users/attachments/20210201/9cf00698/attachment.html>