FOOD FOR THOUGHT Oracle Cloud Incredible PBX PUBLIC

[dallas]

Has anyone given their Oracle Cloud Incredible PBX 2021 a public FQDN?

 

[wardmundy]

Really not recommended. If someone breaks in, you'll have a HUGE bill to pay for not only phone service but also cloud fees.

 

[wardmundy]

@dallas: Here's what you're up against. Now compute the daily cost of bandwidth...

Google Fends Off Record-Breaking DDoS Attack

The attack was 76% more powerful than the HTTPS DDoS attack that hit Cloudflare back in June.

www.pcmag.com

 

[KNERD]

In my experience, I have never seen a DDOS attack against. Instead it is always scans trying to guess passwords for SSH, password scans on SIP ports, or potential exploits on SIP ports.

I think fail2ban and Sangoma responsive firewall has done a pretty good job in securing those. Though I have seen some breaches because fail2ban tolerances set too low, and simple passwords in extensions.