Fail2Ban; Figure 27: Configure Dynamic Defense - Grandstream Networks UCM6510 User Manual

Figure 27: Configure Dynamic Defense

Fail2ban

Fail2Ban feature on the UCM6510 provides intrusion detection and prevention for authentication errors in
SIP REGISTER, INVITE and SUBSCRIBE and prevents SIP brute force attacks on the PBX system. Once
an IP address exceeds the allowed number of login or SIP authentication attempts within the configured
"Max Retry Duration" period, all SIP and HTTP requests from that IP address will be dropped, forbidding
web access and blocking further authentication attempts.
P a g e | 81
UCM6510 IP PBX User Manual
Version 1.0.20.31