Fail2Ban; Figure 37: Configure Dynamic Defense - Grandstream Networks UCM6510 User Manual

Hide thumbs Also See for UCM6510:

Table of Contents

Since IP range 192.168.5.100-192.168.5.200 is in whitelist, if a host initiates more than 20 TCP

connections to the UCM6510 within 1 minute, it will not be added into UCM6510 blacklist. It can still

establish TCP connection with the UCM6510.

Fail2ban

Fail2Ban feature on the UCM6510 provides intrusion detection and prevention for authentication errors in

SIP REGISTER, INVITE and SUBSCRIBE. Once the entry is detected within "Max Retry Duration", the

UCM6510 will take action to forbid the host for certain period as defined in "Banned Duration". This feature

helps prevent SIP brute force attacks to the PBX system.

UCM6510 IP PBX User Manual