Oh fuck, I was mistaken — it was a real attack, not LLM bots
— someone, using machines from French hosting, was trying to connect to my Asterisk box, using various SIP endpoints.
The attack was started at Monday's night and was found only because monit reported about too much memory eaten by fail2ban 
Interesting, why fail2ban didn't banned attacker's IP, because it should do that right after failed attempt to login?
Tine to revisit fail2ban jails configs…
Then, I logged into my box and found that fail2ban, Asterisk and PostgreSQL aren't feeling well. The system load and the traffic amounts was unusual — the parameters are completely differs from which I used to see since server installation.
I checked fail2ban logs and found that it is still parses the data from Asterisk log which were happen at near 5 hours ago
And there were total mess in the Asterisk security.log (see screenshot) — some dumb (as it programmers
) LLM-bots were constantly trying to connect to my Asterisk server with HTTP protocol, evaluating it as a web-server, I dunno
And the Asterisk logs became enormously big — while newsyslogd wasn't invoked — they eat at near 4 GB
. I didn't specify the maximal size of Asterisk logfiles in the /etc/newsyslog.conf, because I wasn't expected a lot of lines in the PBX logs, which is in use only for my relatives.
UPD: It wasn't LLM bots, it was a real attack — attempt to hack my Asterisk: https://mastodon.bsd.cafe/@evgandr/116721410691985788
Successfully migrated my rotary phones over from a FRITZ!Box 7490 to a Grandstream HT802 and an Asterisk server on my #NixOS server.
Finally I’m able to assign any internal numbers I want and don’t have to go with the Fritzbox’s stupid defaults.
My dial plan now also automatically distinguishes between internal and external numbers. Everything with 3 digits or more is treated as external and routed through Telekom.
What a relief!
☎️ Od trumny do trunku – Strowger, Asterisk i telefonia po godzinach
Krzysztof Strug, krótkofalowiec z @sp9fld, opowie o historii telefonii – od centrali Strowgera po współczesne rozwiązania #VoIP oparte na #Asterisk i #FreePBX. Nie zabraknie praktycznych przykładów i demo działającego środowiska.
📍 Gdzie? Wydział Matematyki i Informatyki UAM w Poznaniu
📅 Kiedy? sobota, 30 maja 2026
👉 Sprawdź agendę: https://piwo.sh/
🎟️ ODBIERZ DARMOWY BILET: https://app.evenea.pl/event/piwo2026/
Dear Fedi,
I would like to have a simple SIP Client, connected to EPVPN, that plays a simple Audio-File.
Other than https://docs.asterisk.org/Getting-Started/Hello-World, I didn't find any good Resources. The Asterisk Documentation just talks about it being an SIP Server.
Do any of you know, how to do it?
Any Help would be appreciated
Back in 2007/2008, when I was doing my civilian service driving for the Göttinger Tafel, I sometimes had a coworker who would tell me about his #Asterisk setup nonstop, down to the tiniest details.
Now, 19 years later, I’m finally setting up my own Asterisk installation. So far, I have it running in a #NixOS container, and I can call it from a SIP client on my iPhone to get a spoken “Hello World” reply.