VoIP Users Conference » accountable http://www.voipusersconference.org Live every Friday at 12 Noon Eastern time Sat, 04 Feb 2012 06:43:49 +0000 en hourly 1 http://wordpress.org/?v=3.3.1 http://www.voipusersconference.org/feed/podcast/ This is a weekly live meeting of people all over the world who are interested in sharing knowledge and experiences about telephony over the Internet. Guests include authors, innovators, programmers and Internet personalities. The conference is reached by phoning in using SIP, Skype or a web page widget shown on the main web site http://vuc.me @voipusers clean @voipusers itunes@voipusersconference.org itunes@voipusersconference.org (@voipusers) VOIP allows you to do almost anything with incoming and outgoing telephone lines. telephony,communications,international,asterisk,freeswitch,freepbx,skype VoIP Users Conference » accountable http://www.voipusersconference.org/wp-content/uploads/powerpress/_vuc144.jpg http://www.voipusersconference.org Amazon EC2 Flood Attacks from the Cloud http://www.voipusersconference.org/2010/amazon-ec2-flood-attacks/ http://www.voipusersconference.org/2010/amazon-ec2-flood-attacks/#comments Wed, 14 Apr 2010 23:00:57 +0000 VUC http://www.voipusersconference.org/?p=1946


Part of this article is an edited summary of material from VoipTechChat.com

Complaints of rampant SIP Brute Force Attacks coming from servers with Amazon EC2 IP Addresses cause many admins to simply drop all such traffic. Generally, SIP brute force attacks attempt to register various peer names to a system and/or attempt to guess passwords of known/guesses peers or endpoints. The object is theft of resources.

The complaints mentioned this weekend show an excessive amount of traffic; with some providers claiming 6GB of traffic dedicated to such attacks. Since we ourselves received an attack from an Amazon hosted server, we also reported and complained to the Amazon NOC/Abuse depts.

There are various techniques to assist with minimizing DDoS and Brute Force attacks, such as limiting access via the public internet, using strong passwords, not mapping extension name to peer/endpoint name, limiting simultaneous calls, and aggressively monitoring usage. Automatic blocking of abusive IP’s (fail2ban, blockhosts, etc.) can also assist with minimizing damage.

References: EC2 Abuse Report Form

VOIPSA

VUC official position: EC2 abuse costs victims time and money. Amazon is 100% accountable for what their customers do with their resources and must react swiftly to complaints.

VUC 60 second rant: This week saw a new feature rolled out, the Voipusers One Minute Issue Talk (VOMIT) where all listeners are encouraged to phone in their VoIP-related rants. Call and leave yours at (518) VUC VOIP or (518) 882-8647.

Follow  @voipusers on Twitter.

]]> http://www.voipusersconference.org/2010/amazon-ec2-flood-attacks/feed/ 3 @voipusers,abuse,accountable,Amazon,amazon elastic compute cloud,amazon.com,attack,attacks,blockhosts,brute force,cloud,cloud infrastructure Part of this article is an edited summary of material from VoipTechChat.com - Complaints of rampant SIP Brute Force Attacks coming from servers with Amazon EC2 IP Addresses cause many admins to simply drop all such traffic. Generally, (http://www.voipusersconference.org/wp-content/uploads/2010/04/cloud.jpg) Part of this article is an edited summary of material from VoipTechChat.com (http://www.voiptechchat.com/voip/457/amazon-ec2-sip-brute-force-attacks-on-rise/) Complaints of rampant SIP Brute Force Attacks coming from servers with Amazon EC2 IP Addresses cause many admins to simply drop all such traffic. Generally, SIP brute force attacks attempt to register various peer names to a system and/or attempt to guess passwords of known/guesses peers or endpoints. The object is theft of resources. The complaints mentioned this weekend show an excessive amount of traffic; with some providers claiming 6GB of traffic dedicated to such attacks. Since we ourselves received an attack from an Amazon hosted server, we also reported and complained to the Amazon NOC/Abuse depts. There are various techniques to assist with minimizing DDoS and Brute Force attacks, such as limiting access via the public internet, using strong passwords, not mapping extension name to peer/endpoint name, limiting simultaneous calls, and aggressively monitoring usage. Automatic blocking of abusive IP’s (fail2ban, blockhosts, etc.) can also assist with minimizing damage. References: EC2 Abuse Report Form (https://www.amazon.com/gp/html-forms-controller/AWSAbuse/) VOIPSA (http://www.voipsa.org/) VUC official position: EC2 abuse costs victims time and money. Amazon is 100% accountable for what their customers do with their resources and must react swiftly to complaints. VUC 60 second rant: This week saw a new feature rolled out, the Voipusers One Minute Issue Talk (VOMIT) where all listeners are encouraged to phone in their VoIP-related rants. Call and leave yours at (518) VUC VOIP or (518) 882-8647. Follow  @voipusers (http://twitter.com/voipusers) on Twitter. @voipusers clean 1:48:26