What Are You Doing Right Now
-
@travisdh1 said in What Are You Doing Right Now:
Submitting my first abuse report to Amazon AWS. Uck.
What happened?
-
@wirestyle22 said in What Are You Doing Right Now:
@travisdh1 said in What Are You Doing Right Now:
Submitting my first abuse report to Amazon AWS. Uck.
What happened?
Abuse, presumably.
-
@scottalanmiller said in What Are You Doing Right Now:
@wirestyle22 said in What Are You Doing Right Now:
@travisdh1 said in What Are You Doing Right Now:
Submitting my first abuse report to Amazon AWS. Uck.
What happened?
Abuse, presumably.
-
@wirestyle22 said in What Are You Doing Right Now:
@travisdh1 said in What Are You Doing Right Now:
Submitting my first abuse report to Amazon AWS. Uck.
What happened?
Enough login attempts to actually notify me about it. Most of the time I'd just block the IP or subnet it originated from, but AWS is kinda a big enough deal that I'll take the time to go through the official process to get the proper people notified.
-
I submit reports randomly to places when I see things in the logs and have a minute.
I just sent one to a hosting company out of Florida (according to arin.net).
I do not make them complicated or detailed, because there is low likelihood of anything happening more than the offending server being shut down, but every little bit helps.
-
@JaredBusch I also pick my battles, because if it is some random RIPE or APNIC address, there is little chance of anything being done. I just blacklist those IP blocks entirely.
I need to look into automating that a bit in FreePBX.
-
here is one from a google server. been hitting my client's PBX for days.
[root@fpbx ~]# grep 104.19 /var/log/asterisk/full* /var/log/asterisk/full:[2017-04-03 08:14:19] NOTICE[20776] res_pjsip/pjsip_distributor.c: Request 'INVITE' from '"1" <sip:[email protected]>' failed for '104.196.253.239:5073' (callid: 08db862a33efaf0032c3fd68ff3eb16c) - No matching endpoint found /var/log/asterisk/full:[2017-04-03 08:56:42] NOTICE[11512] res_pjsip/pjsip_distributor.c: Request 'INVITE' from '"1" <sip:[email protected]>' failed for '104.196.253.239:5071' (callid: 46c01da1ca1611ec019383d180e003c4) - No matching endpoint found /var/log/asterisk/full:[2017-04-03 09:38:14] NOTICE[20776] res_pjsip/pjsip_distributor.c: Request 'INVITE' from '"1" <sip:[email protected]>' failed for '104.196.253.239:5073' (callid: 0a52bf5cf4303474f85f213e6b704b47) - No matching endpoint found /var/log/asterisk/full:[2017-04-03 10:19:15] NOTICE[20776] res_pjsip/pjsip_distributor.c: Request 'INVITE' from '"1" <sip:[email protected]>' failed for '104.196.253.239:5079' (callid: 9d2974ab6d6c3dc94c8026cd5d39bc4b) - No matching endpoint found /var/log/asterisk/full:[2017-04-03 10:59:32] NOTICE[20776] res_pjsip/pjsip_distributor.c: Request 'INVITE' from '"1" <sip:[email protected]>' failed for '104.196.253.239:5074' (callid: 539e0646b69c33e3960a09faea909ded) - No matching endpoint found /var/log/asterisk/full:[2017-04-03 11:38:57] NOTICE[28844] res_pjsip/pjsip_distributor.c: Request 'INVITE' from '"1" <sip:[email protected]>' failed for '104.196.253.239:5074' (callid: 710e18fc87c59e012db0c1d23c428089) - No matching endpoint found /var/log/asterisk/full:[2017-04-03 12:17:39] NOTICE[20776] res_pjsip/pjsip_distributor.c: Request 'INVITE' from '"1" <sip:[email protected]>' failed for '104.196.253.239:5070' (callid: 858faeeb36628dd42f13ab7e449685dc) - No matching endpoint found /var/log/asterisk/full:[2017-04-03 12:56:15] NOTICE[28844] res_pjsip/pjsip_distributor.c: Request 'INVITE' from '"1" <sip:[email protected]>' failed for '104.196.253.239:5075' (callid: b97e15f1fce94e7bc0450c083e099963) - No matching endpoint found /var/log/asterisk/full:[2017-04-03 13:34:41] NOTICE[28844] res_pjsip/pjsip_distributor.c: Request 'INVITE' from '"1" <sip:[email protected]>' failed for '104.196.253.239:5074' (callid: d7f2f87e21ca8844ed2515b2565be677) - No matching endpoint found /var/log/asterisk/full:[2017-04-03 14:13:14] NOTICE[20776] res_pjsip/pjsip_distributor.c: Request 'INVITE' from '"1" <sip:[email protected]>' failed for '104.196.253.239:5080' (callid: 7ae3510220e20c858a96316db8dc76cd) - No matching endpoint found /var/log/asterisk/full:[2017-04-03 14:51:48] NOTICE[11512] res_pjsip/pjsip_distributor.c: Request 'INVITE' from '"1" <sip:[email protected]>' failed for '104.196.253.239:5071' (callid: f3a359f24a62fe898a6c4b43c008b2dc) - No matching endpoint found /var/log/asterisk/full-20170328:[2017-03-27 19:33:38] NOTICE[13777] res_pjsip/pjsip_distributor.c: Request 'INVITE' from '"1" <sip:[email protected]>' failed for '104.199.214.194:5070' (callid: dc4c8de1dfb76143e29d7db8d16c1131) - No matching endpoint found /var/log/asterisk/full-20170328:[2017-03-27 21:44:27] NOTICE[25257] res_pjsip/pjsip_distributor.c: Request 'INVITE' from '"1" <sip:[email protected]>' failed for '104.199.214.194:5070' (callid: 077e583661ec445d4dfec71b6f5d522e) - No matching endpoint found /var/log/asterisk/full-20170329:[2017-03-28 18:30:48] NOTICE[25257] res_pjsip/pjsip_distributor.c: Request 'INVITE' from '"1" <sip:[email protected]>' failed for '104.196.253.239:5071' (callid: 860c163adad86e7f32b014795534977d) - No matching endpoint found /var/log/asterisk/full-20170329:[2017-03-28 19:25:02] NOTICE[25257] res_pjsip/pjsip_distributor.c: Request 'INVITE' from '"1" <sip:[email protected]>' failed for '104.196.253.239:5070' (callid: 0f72ab6e365c2dbf19e3e74ae200878f) - No matching endpoint found /var/log/asterisk/full-20170329:[2017-03-28 20:19:21] NOTICE[16260] res_pjsip/pjsip_distributor.c: Request 'INVITE' from '"1" <sip:[email protected]>' failed for '104.196.253.239:5070' (callid: 4511281be1b72536c16eedc0bcf59f0a) - No matching endpoint found /var/log/asterisk/full-20170329:[2017-03-28 21:13:04] NOTICE[13777] res_pjsip/pjsip_distributor.c: Request 'INVITE' from '"1" <sip:[email protected]>' failed for '104.196.253.239:5074' (callid: a870b4a5eff5dfce528fe3fa852dac17) - No matching endpoint found /var/log/asterisk/full-20170329:[2017-03-28 22:07:38] NOTICE[26239] res_pjsip/pjsip_distributor.c: Request 'INVITE' from '"1" <sip:[email protected]>' failed for '104.196.253.239:5070' (callid: 0651872125745d476c15d95464bc8d78) - No matching endpoint found /var/log/asterisk/full-20170329:[2017-03-28 23:03:21] NOTICE[26239] res_pjsip/pjsip_distributor.c: Request 'INVITE' from '"1" <sip:[email protected]>' failed for '104.196.253.239:5076' (callid: 36d0cba98a89bfca84a151741b98074b) - No matching endpoint found /var/log/asterisk/full-20170329:[2017-03-28 23:58:09] NOTICE[13777] res_pjsip/pjsip_distributor.c: Request 'INVITE' from '"1" <sip:[email protected]>' failed for '104.196.253.239:5074' (callid: eed90f74ec1c8c8cb62aa63d515d61a4) - No matching endpoint found /var/log/asterisk/full-20170329:[2017-03-29 00:51:59] NOTICE[25257] res_pjsip/pjsip_distributor.c: Request 'INVITE' from '"1" <sip:[email protected]>' failed for '104.196.253.239:5074' (callid: e38ffaa88b98807c827e88dc4e9d27cf) - No matching endpoint found /var/log/asterisk/full-20170329:[2017-03-29 01:45:09] NOTICE[26239] res_pjsip/pjsip_distributor.c: Request 'INVITE' from '"1" <sip:[email protected]>' failed for '104.196.253.239:5078' (callid: 93df1ab4caf4a402f14364514458eb0c) - No matching endpoint found /var/log/asterisk/full-20170329:[2017-03-29 02:38:47] NOTICE[25257] res_pjsip/pjsip_distributor.c: Request 'INVITE' from '"1" <sip:[email protected]>' failed for '104.196.253.239:5078' (callid: fab6d1654289a6ccfd2a2b5567b27253) - No matching endpoint found /var/log/asterisk/full-20170330:[2017-03-29 03:31:59] NOTICE[26239] res_pjsip/pjsip_distributor.c: Request 'INVITE' from '"1" <sip:[email protected]>' failed for '104.196.253.239:5074' (callid: 3f031d304776299947aa56194d88a11a) - No matching endpoint found /var/log/asterisk/full-20170330:[2017-03-29 04:25:13] NOTICE[5450] res_pjsip/pjsip_distributor.c: Request 'INVITE' from '"1" <sip:[email protected]>' failed for '104.196.253.239:5076' (callid: efcbf1ea60433b0f3f148896142ae79b) - No matching endpoint found /var/log/asterisk/full-20170330:[2017-03-29 05:19:01] NOTICE[26239] res_pjsip/pjsip_distributor.c: Request 'INVITE' from '"1" <sip:[email protected]>' failed for '104.196.253.239:5071' (callid: c12e5824b1eeaf2399842b13bcf085fe) - No matching endpoint found /var/log/asterisk/full-20170330:[2017-03-29 06:12:33] NOTICE[26239] res_pjsip/pjsip_distributor.c: Request 'INVITE' from '"1" <sip:[email protected]>' failed for '104.196.253.239:5074' (callid: f48b22f7379aa7e2d01105e6e528e1da) - No matching endpoint found /var/log/asterisk/full-20170330:[2017-03-29 07:06:47] NOTICE[16260] res_pjsip/pjsip_distributor.c: Request 'INVITE' from '"1" <sip:[email protected]>' failed for '104.196.253.239:5076' (callid: 7c6cbe050e8230627262e14a2f70e0ba) - No matching endpoint found /var/log/asterisk/full-20170330:[2017-03-29 08:01:10] NOTICE[5450] res_pjsip/pjsip_distributor.c: Request 'INVITE' from '"1" <sip:[email protected]>' failed for '104.196.253.239:5070' (callid: 3a18f5c897d3e4c03b9b9f018bec9bb7) - No matching endpoint found /var/log/asterisk/full-20170330:[2017-03-29 08:55:53] NOTICE[13777] res_pjsip/pjsip_distributor.c: Request 'INVITE' from '"1" <sip:[email protected]>' failed for '104.196.253.239:5074' (callid: 58cf5e131fea93ba500b727ba2342418) - No matching endpoint found /var/log/asterisk/full-20170330:[2017-03-29 09:51:13] NOTICE[16260] res_pjsip/pjsip_distributor.c: Request 'INVITE' from '"1" <sip:[email protected]>' failed for '104.196.253.239:5070' (callid: 3febbae1627f5e300c064bedb4066166) - No matching endpoint found /var/log/asterisk/full-20170330:[2017-03-29 10:45:28] NOTICE[16260] res_pjsip/pjsip_distributor.c: Request 'INVITE' from '"1" <sip:[email protected]>' failed for '104.196.253.239:5071' (callid: f51e130a22c1946930bc6f8c13798641) - No matching endpoint found /var/log/asterisk/full-20170330:[2017-03-29 11:39:46] NOTICE[13777] res_pjsip/pjsip_distributor.c: Request 'INVITE' from '"1" <sip:[email protected]>' failed for '104.196.253.239:5074' (callid: f9324da61da2a80f25a8c1d34d056843) - No matching endpoint found /var/log/asterisk/full-20170330:[2017-03-29 12:33:11] NOTICE[16260] res_pjsip/pjsip_distributor.c: Request 'INVITE' from '"1" <sip:[email protected]>' failed for '104.196.253.239:5071' (callid: 5aef92f5bcd7877abba7792efc7bf935) - No matching endpoint found /var/log/asterisk/full-20170330:[2017-03-29 13:26:30] NOTICE[13777] res_pjsip/pjsip_distributor.c: Request 'INVITE' from '"1" <sip:[email protected]>' failed for '104.196.253.239:5078' (callid: 814e986dc076f8d510354312e99c3409) - No matching endpoint found /var/log/asterisk/full-20170330:[2017-03-29 14:21:20] NOTICE[25257] res_pjsip/pjsip_distributor.c: Request 'INVITE' from '"1" <sip:[email protected]>' failed for '104.196.253.239:5070' (callid: ff4a976ee08856b11f2a7250df984fe9) - No matching endpoint found /var/log/asterisk/full-20170330:[2017-03-29 15:39:01] NOTICE[8222] res_pjsip/pjsip_distributor.c: Request 'INVITE' from '"1" <sip:[email protected]>' failed for '104.196.253.239:5074' (callid: 7f9efa3dcdf7c35fc476756f5a01b405) - No matching endpoint found /var/log/asterisk/full-20170330:[2017-03-29 16:30:54] NOTICE[5450] res_pjsip/pjsip_distributor.c: Request 'INVITE' from '"1" <sip:[email protected]>' failed for '104.196.253.239:5076' (callid: 45fcf4afe90c35cc2c14a9f5d7bf692d) - No matching endpoint found /var/log/asterisk/full-20170330:[2017-03-29 17:23:06] NOTICE[8222] res_pjsip/pjsip_distributor.c: Request 'INVITE' from '"1" <sip:[email protected]>' failed for '104.196.253.239:5070' (callid: 5e2a2f60c07711bf9db374a4c61968ea) - No matching endpoint found /var/log/asterisk/full-20170330:[2017-03-29 18:17:09] NOTICE[25257] res_pjsip/pjsip_distributor.c: Request 'INVITE' from '"1" <sip:[email protected]>' failed for '104.196.253.239:5070' (callid: 5d14cdab378725e0e65bef9f1e99cde5) - No matching endpoint found /var/log/asterisk/full-20170330:[2017-03-29 19:10:10] NOTICE[25257] res_pjsip/pjsip_distributor.c: Request 'INVITE' from '"1" <sip:[email protected]>' failed for '104.196.253.239:5076' (callid: 97e142e7db073c6c8c85494bd7abff2f) - No matching endpoint found /var/log/asterisk/full-20170330:[2017-03-29 20:02:47] NOTICE[5450] res_pjsip/pjsip_distributor.c: Request 'INVITE' from '"1" <sip:[email protected]>' failed for '104.196.253.239:5082' (callid: f73b359109c0ff45e0312100fd0efbf2) - No matching endpoint found /var/log/asterisk/full-20170330:[2017-03-29 20:56:03] NOTICE[8222] res_pjsip/pjsip_distributor.c: Request 'INVITE' from '"1" <sip:[email protected]>' failed for '104.196.253.239:5071' (callid: 8ea9919ead264ba85161f5a53e1102b2) - No matching endpoint found /var/log/asterisk/full-20170330:[2017-03-29 21:49:42] NOTICE[16260] res_pjsip/pjsip_distributor.c: Request 'INVITE' from '"1" <sip:[email protected]>' failed for '104.196.253.239:5071' (callid: f731d9272134ba719152d92ad0a63e1b) - No matching endpoint found [root@fpbx ~]#
-
Google requires you to fill out a web form.
-
The bots are smart though, as you can see. They do not slam the servers because they bot makers know that
fail2ban
exists. -
@JaredBusch Yeah, the AWS abuse report is quite similar.
https://aws.amazon.com/forms/report-abuseJust submitted mine, so I don't know if I'll get a reply before I leave for the day.
-
@travisdh1 said in What Are You Doing Right Now:
@JaredBusch Yeah, the AWS abuse report is quite similar.
https://aws.amazon.com/forms/report-abuseJust submitted mine, so I don't know if I'll get a reply before I leave for the day.
I almost never get a reply.
-
@JaredBusch said in What Are You Doing Right Now:
@travisdh1 said in What Are You Doing Right Now:
@JaredBusch Yeah, the AWS abuse report is quite similar.
https://aws.amazon.com/forms/report-abuseJust submitted mine, so I don't know if I'll get a reply before I leave for the day.
I almost never get a reply.
I don't do this often, but I normally at least get one of those auto-response looking things.
-
Cursing the people who make CRM Dynamics, all day, every day.
-
@momurda said in What Are You Doing Right Now:
Cursing the people who make CRM Dynamics, all day, every day.
Don't we all.
-
Yay! We've survived a power outage.
-
@EddieJennings said in What Are You Doing Right Now:
Yay! We've survived a power outage.
So... Did all your servers come back on... Or did your UPSes keep everything up for a few minutes? lol.
-
@dafyre Much to my delight and surprise our little UPSes kept stuff up for the duration (about 15 minutes).
-
@EddieJennings said in What Are You Doing Right Now:
@dafyre Much to my delight and surprise our little UPSes kept stuff up for the duration (about 15 minutes).
Win!
-
@EddieJennings said in What Are You Doing Right Now:
@dafyre Much to my delight and surprise our little UPSes kept stuff up for the duration (about 15 minutes).
Not so bad.
-
@scottalanmiller I agree. And only one workstation UPS didn't last long enough for the users to save / shutdown (luckily, nothing critical was lost).