Sign in

APIBAN

@apiban.org
34 followers 56 following 20 posts

APIBAN helps prevent unwanted SIP and HTTP/s traffic by identifying addresses of known bad actors before they attack your system. #SIP #VoIP #RTC #webrtc www.apiban.org github.com/apiban

PostsRepliesMedia
Reposted by APIBAN
Fred Posner @fred.tel · 31/08/2026
Wow... this month's newsletter from @enablesecurity.bsky.social should not be ignored. I say it every month... There are those who read what @sandrogauci.bsky.social writes, and those who wish they had. #freeswitch #cisco #coturn #security #opensource www.enablesecurity.com/newsletter/2...
enablesecurity.com
August 2026: FreeSWITCH RCE in the wild, coturn advisories verified, Hacker Summer Camp
FreeSWITCH servers taken over in the wild through api-chat and fixed in 1.11.3, what we found reproducing coturn's August advisory batch, the RTC and telecom research from Hacker Summer Camp, voice AI...
021
Reposted by APIBAN
Fred Posner @fred.tel · 13/08/2026
I'll be talking later today at #ClueCon about What's New with @apiban.org . My slides: pgpx.io/cc2026/
pgpx.io
ClueCon 2026
021
Reposted by APIBAN
Fred Posner @fred.tel · 24/07/2026
Blogged: APIBAN now has ipset (again) www.fredposner.com/apiban-ipset/
fredposner.com
APIBAN Now Has IPset (again)
APIBAN helps prevent unwanted SIP traffic by identifying addresses of known bad actors before they attack your system. The iptables client for apiban now supports ipset.
011
APIBAN @apiban.org · 22/07/2026
Redid the APIBAN site in a simpler, faster format. apiban.org
apiban.org
APIBAN - Block Bad SIP Traffic
Simple REST API for blocking IP addresses that send unwanted SIP traffic. Powered by LOD.com.
011
APIBAN @apiban.org · 16/07/2026
The apiban iptables (original) client now supports ipset: github.com/apiban/apiba... This helps handle the amount of ip addresses being blocked. The client now also supports an "allowed" list (CIDR notated) that ensures desired ip's are never blocked.
github.com
GitHub - apiban/apiban-client-go: Go based apiban client
Go based apiban client. Contribute to apiban/apiban-client-go development by creating an account on GitHub.
021
Reposted by APIBAN
Fred Posner @fred.tel · 30/06/2026
There are those who read what @sandrogauci.bsky.social and @enablesecurity.bsky.social put out, and those **who wish they had.** www.enablesecurity.com/newsletter/2... #security #rtc #voip #opensource
enablesecurity.com
June 2026: DragonForce hides C2 in Teams TURN relays, FreeSWITCH and coturn advisory batches
DragonForce ransomware tunnels its C2 through Microsoft Teams TURN relays, SySS releases the TURNado attack toolkit, coturn ships hardening and new CVEs, FRAFOS catches a toll-fraud campaign through m...
021
Reposted by APIBAN
Lorenzo Miniero @lminiero.it · 25/06/2026
I know, I know... I literally shared a #MoQ and #WebRTC blog post just a few days ago! But I was on a roll, and I wanted to play more with MoQ and media (in a browser too), so this push-to-talk demo came out... feedback and reposts welcome! www.meetecho.com/blog/moq-ptt/
meetecho.com
POC time: a push-to-talk demo with MoQ | Meetecho Blog
We recently talked about the efforts we devoted on tinkering with real-time media in MoQ, and in particular on how to bridge that to WebRTC and back. That post focused on our imquic library, the nativ...
142
APIBAN @apiban.org · 13/05/2026
At this year's Kamailio World, @fred.tel discussed what's new with APIBAN. www.youtube.com/watch?v=SAxs... #apiban #kamailio
youtube.com
Kamailio World 2026: APIBAN and Kamailio
YouTube video by Kamailio World
011
Reposted by APIBAN
Fred Posner @fred.tel · 13/05/2026
My presentation from #KamailioWorld, "APIBAN and #Kamailio" has been posted on YouTube: youtu.be/SAxseBDTrLA?...
youtu.be
Kamailio World 2026: APIBAN and Kamailio
YouTube video by Kamailio World
022
APIBAN @apiban.org · 08/05/2026
At #kamailio world, @tsearle.sipstacks.com had a great suggestion... the nftables datasets should support counters. Great idea Torrey! Now implemented in nftlib, nftables-api, and apiban-client-nftables github.com/apiban/apiba...
github.com
GitHub - apiban/apiban-client-nftables: nftables go client
nftables go client. Contribute to apiban/apiban-client-nftables development by creating an account on GitHub.
011
Reposted by APIBAN
Fred Posner @fred.tel · 07/05/2026
Big turnout for Kamailio World 2026. #kamailio
Full room at Kamailio world
021
Reposted by APIBAN
Fred Posner @fred.tel · 07/05/2026
Kamailio World 2026 is streaming live! www.youtube.com/live/jLtwnjQ...
youtube.com
Kamailio World 2026 - Day 1
YouTube video by Kamailio World
011
Reposted by APIBAN
Fred Posner @fred.tel · 07/05/2026
First up at Kamailio World is @miconda.bsky.social #kamailio #kamailioworld
Kamailio World 2026 start
011
Reposted by APIBAN
Fred Posner @fred.tel · 11/03/2026
Kamailio World is coming soon!!! www.fredposner.com/kamailio-wor...
fredposner.com
Kamailio World 2026: Coming Soon
Kamailio World 2026 will take place in Berlin, DE from May 7-8th, 2026. See you in Berlin!
011
Reposted by APIBAN
CommCon @commcon.xyz · 16/03/2026
🚨 EVENT UPDATE 🎉 Tickets are now on sale. Blindbird pricing available until 3rd April. Go grab a bargain now! CFP also open until 3rd April, and we'd love to hear from you if you are interested in supporting the event (several package options available!) See you in Düsseldorf! 2026.commcon.xyz
032
APIBAN @apiban.org · 18/03/2026
If anyone would like... github.com/apiban/apiba... The dev branch of apiban-client-nftables now has an uptime setting, so when you reboot the system, a full pull of apiban data is used.
github.com
GitHub - apiban/apiban-client-nftables at dev
nftables go client. Contribute to apiban/apiban-client-nftables development by creating an account on GitHub.
011
Reposted by APIBAN
Fred Posner @fred.tel · 26/02/2026
Time for me to say... "There are those who read what @sandrogauci.bsky.social and @enablesecurity.bsky.social write and those who wish they had." Also, very honored to have @apiban.org make the newsletter -- in a good way. ;) #security #rtc #sip www.enablesecurity.com/newsletter/2...
enablesecurity.com
February 2026: TURN security series, libvpx VP9 overflow, Grandstream RCE, coturn fixes
RTCSec newsletter for February 2026 covering Enable Security's TURN server security blog series, libvpx VP9 encoder heap overflow in Chrome and Firefox, Grandstream GXP1600 unauthenticated RCE with ca...
011
Reposted by APIBAN
Fred Posner @fred.tel · 18/02/2026
#Kamailio v6.1.0 released!! Thank you to @miconda.bsky.social and all the Kamailio developers. Read more: www.kamailio.org/w/kamailio-v...
kamailio.org
Kamailio v6.1.0 Release Notes – The Kamailio SIP Server Project
002
Reposted by APIBAN
enablesecurity.bsky.social @enablesecurity.bsky.social · 12/02/2026
TURN servers are meant to relay WebRTC media. To an attacker, they're just proxies. We wrote up the threats we've been finding since 2017: relay abuse, DoS amplification, and software vulns. www.enablesecurity.com/blog/turn-se...
enablesecurity.com
TURN Security Threats: A Hacker's View
TURN servers are powerful proxies abused for internal network access, C2 operations, and DDoS attacks. Threat analysis from years of research and pentesting.
023
Reposted by APIBAN
Sandro Gauci @sandrogauci.bsky.social · 12/02/2026
Wrote up our RTCon 2025 talk on TURN security threats. www.enablesecurity.com/blog/turn-se...
enablesecurity.com
TURN Security Threats: A Hacker's View
TURN servers are powerful proxies abused for internal network access, C2 operations, and DDoS attacks. Threat analysis from years of research and pentesting.
022
APIBAN @apiban.org · 06/02/2026
2025: The Year in Review (for unwanted SIP/HTTP traffic) apiban.org/2025.html
apiban.org
APIBAN - 2025 year in review
Happy New Year! Lets start 2026 off by looking at tha last year from an APIBAN point of view. The 2025 year in review.
011
Reposted by APIBAN
Fred Posner @fred.tel · 30/01/2026
There are those who read what @sandrogauci.bsky.social and @enablesecurity.bsky.social write... and those who wish they had. www.enablesecurity.com/newsletter/2... #voip #security #rtc #freepbx
enablesecurity.com
January 2026: Cisco UCM zero-day, 39C3 telco talks, FreePBX exploitation
January 2026 RTCSec newsletter: Cisco UCM zero-day, 39C3 telco talks, FreePBX web shell in the wild, Element Call, voice AI risks, Yealink RPS CVE, and more
032
Reposted by APIBAN
Fred Posner @fred.tel · 30/01/2026
Was honored to chat with @miconda.bsky.social and Luca about #kamailio and #kamailioworld on ClueCon Weekly. www.youtube.com/watch?v=czDp...
youtube.com
ClueCon Weekly with Daniel-Constantin & Fred Posner [Sn. 15 Ep. 21]: Kamailio 6.1
YouTube video by FreeSWITCH
021
Reposted by APIBAN
Fred Posner @fred.tel · 20/11/2025
The upcoming version of #Matrix Synapse drops support for PostgreSQL 13. If you're like me, and rarely use PostgreSQL... upgrading can create a bit of anxiety. www.fredposner.com/upgrade-post...
fredposner.com
Upgrade Postgres 13 to 17
The upcoming version of Matrix Synapse drops support for PostgreSQL 13. This is how I upgraded our deployments.
021
Reposted by APIBAN
Fred Posner @fred.tel · 20/10/2025
Amazon AWS is a single point of failure.
031
Reposted by APIBAN
Fred Posner @fred.tel · 20/10/2025
AWS is a single point of failure.
131
Reposted by APIBAN
Dan Jenkins @danjenkins.bsky.social · 17/09/2025
Off to Krakow for a few days to attend the RTC.ON conference hosted by @swmansion.com ! Looking forward to seeing friends and meeting new contacts. I’ll be speaking tomorrow about running WebRTC on low powered devices.
A view out of the window of an easyJet airplane. Rain on the windowA graphic showing the title of the talk Dan is giving
022
Reposted by APIBAN
Lorenzo Miniero @lminiero.it · 17/09/2025
If you're in Krakow for RTC.ON, don't miss the presentation my colleague Antonio will make there! He's been working on a new cool project called #Juturna for real-time AI pipelines, which we've been using with #Janus ourselves. The event is usually streamed, so I'll share a link when I have one 🙏
Banner for Antonio Bevilacqua's presentation at RTC.ON, called "From RTP Streams to AI Insights: Building Real-Time AI Pipelines with Juturna and Janus"
032
Reposted by APIBAN
Fred Posner @fred.tel · 05/09/2025
My presentation from #ClueCon was posted on YouTube =) www.youtube.com/watch?v=7omz...
youtube.com
ClueCon 2025 | Fred Posner: Scaling & Moving User Registrations/Locations/Presence - FS to Kamailio
YouTube video by FreeSWITCH
021
Reposted by APIBAN
Fred Posner @fred.tel · 05/08/2025
Next up at ClueCon... @miconda.bsky.social talking about #Kamailio and Lua
021
Reposted by APIBAN
Fred Posner @fred.tel · 05/08/2025
David Duffett gives a presentation on presenting presentations for an inception inducing presentation at #ClueCon2025
011
APIBAN @apiban.org · 01/08/2025
Did you know we have an open source integration with nftables? It allows you to control how long ips are blocked. Would love a star if you could. github.com/apiban/apiba...
github.com
GitHub - apiban/apiban-client-nftables: nftables go client
nftables go client. Contribute to apiban/apiban-client-nftables development by creating an account on GitHub.
011
Reposted by APIBAN
Fred Posner @fred.tel · 31/07/2025
I say it monthly... "There are those who read what @sandrogauci.bsky.social and @enablesecurity.bsky.social write... and those who wish they had." Big items in this month's newsletter. www.enablesecurity.com/newsletter/2... #sip #voip #rtp
enablesecurity.com
July 2025: Rtpengine fixes, RTC conferences and showers of vulnerabilities
July 2025 RTCSec newsletter: Rtpengine fixes, RTC conferences and showers of vulnerabilities
021
Reposted by APIBAN
Fred Posner @fred.tel · 30/07/2025
See you at ClueCon2025! www.fredposner.com/going-to-clu...
fredposner.com
See you at ClueCon 2025
Cluecon, a conference centered around FreeSWITCH, VoIP, and WebRTC, will be held in Chicago from August 4-7th, 2025. This year, I will present regarding migrating users from FreeSWITCH to registering ...
031
Reposted by APIBAN
Kevin Beaumont @doublepulsar.com · 08/07/2025
New by me - although Citrix say there is no evidence of exploitation of CitrixBleed 2 vulnerability, they are wrong - it has been under active exploitation since mid June by an IP associated to a ransomware group, with multiple IP addresses now involved. doublepulsar.com/citrixbleed-...
doublepulsar.com
CitrixBleed 2 exploitation started mid-June — how to spot it
CitrixBleed 2 — CVE-2025–5777 — has been under active exploitation to hijack Netscaler sessions, bypassing MFA, globally for a month.
48133
APIBAN @apiban.org · 27/06/2025
Love the inclusion of APIBAN.... thanks @nerduno.bsky.social nerdvittles.com/a-new-advent...
nerdvittles.com
A New Adventure: Introducing FusionPBX… again – Nerd Vittles
020
Reposted by APIBAN
Ward Mundy @nerduno.bsky.social · 25/06/2025
A New Day for Serious VoIP Developers #FusionPBX #FreeSWITCH #VoIP #NerdVittles nerdvittles.com/a-new-advent...
011
APIBAN @apiban.org · 26/06/2025
New feature for apiban-client-nftables: flushafter You can now adjust how long to keep the apiban addresses blocked in nftables (default period is 1 week). github.com/apiban/apiba...
github.com
GitHub - apiban/apiban-client-nftables: nftables go client
nftables go client. Contribute to apiban/apiban-client-nftables development by creating an account on GitHub.
011
Reposted by APIBAN
Fred Posner @fred.tel · 09/06/2025
Blogged: Kamailio World 2025 Thoughts www.fredposner.com/kamailio-wor...
fredposner.com
Kamailio World 2025: Thoughts
Kamailio World 2025 took place in Berlin, DE from May 12-13th, 20025. A great event with amazing presentations and community. Can't wait for Kamailio World 2026.
042
Reposted by APIBAN
Fred Posner @fred.tel · 27/05/2025
Nice comparison chart in the post.
021
Reposted by APIBAN
Fred Posner @fred.tel · 29/05/2025
The latest newsletter from @enablesecurity.bsky.social is out and as I always say... There are those who read what @sandrogauci.bsky.social writes, and those who wish they had. www.enablesecurity.com/newsletter/ (subscribe link right at the top) #voip #webrtc #sip #security #kamailio
enablesecurity.com
RTCSec Newsletter - a monthly newsletter about VoIP and WebRTC security
Curated VoIP and WebRTC security news, research and updates by Enable Security.
042
Reposted by APIBAN
Fred Posner @fred.tel · 29/05/2025
My Philips Hue bridge really wants to know the time in China. Like really, really badly.
Philips Hue attempts to contact IPs in China
001
Reposted by APIBAN
miconda.bsky.social @miconda.bsky.social · 12/05/2025
This is the day! #KamailioWorld Conferece 2025 starts at 9:00am, Berlin, Germany: www.kamailioworld.com/k2025/ It is going to be two intense days, packed with presentations, attended by a full house! You can watch the live stream at: www.youtube.com/@KamailioWorld #opensource #telephony #voip #vonr
kamailioworld.com
Kamailio World Conference 2025
062
Reposted by APIBAN
Fred Posner @fred.tel · 12/05/2025
Full house here at #kamailioworld. I love my row. @danjenkins.bsky.social @lminiero.it
151
Reposted by APIBAN
Lorenzo Miniero @lminiero.it · 12/05/2025
Kamailio World 2025 has started! I'll do my presentation on #RoQ (RTP over #QUIC) later today, at 4.50pm Germany time. You can watch the live stream here! www.youtube.com/watch?v=p4Zr...
youtube.com
Kamailio World 2025 - Day 1
YouTube video by Kamailio World
064
Reposted by APIBAN
Fred Posner @fred.tel · 12/05/2025
Next up is David Duffet presenting at #KamailioWorld on behalf of Simwood. Navigating the decline of minute revenue.
011
Reposted by APIBAN
miconda.bsky.social @miconda.bsky.social · 29/04/2025
Challenge everyone with an intriguing kamailio.cfg snippet at #KamailioWorld Conference 2025 and win: www.kamailioworld.com/k2025/kamail... #opensource #kamailio #voip #telephony #vonr #5G #webrtc
kamailioworld.com
Kamailio Code Challenge – Kamailio World Conference 2025
063
APIBAN @apiban.org · 29/04/2025
Getting **VERY** excited for #KamailioWorld in just under 2 weeks! More info: www.kamailioworld.com/k2025/
media.tenor.com
kermit the frog is dancing in front of a red curtain with the words i 'm so excited !
Alt: kermit the frog is dancing in front of a red curtain with the words i 'm so excited !
011
Reposted by APIBAN
qxip @qxip.bsky.social · 18/04/2025
The next #HOMER 11 is coming along nicely and for the first time ever its fully independent, cloud native and serverless friendly. Powered by DuckDB and Parquet it decouples compute and storage before they even hit a DB - only used for reading and compacting. I can't wait to present the final H11 🔥
263