[asterisk-users] Ongoing attack from 188.138.100.16

[Skyler]

You could traceroute the IP and contact NOC's along the route. They might
be interested to hear of flooding/DOS attacks being routed via their
equipment.

On Tue, Mar 6, 2012 at 4:58 PM, Mike Diehl <mdiehl at diehlnet.com> wrote:

> route add -host 188.138.100.16 dev lo
>
> Good bye.  But it shouldn't come to this.
>
> On Tuesday 06 March 2012 5:48:26 pm Matt Desbiens wrote:
> > iptables -A INPUT --src 188.138.100.16 -j DROP
> >
> > On Mar 6, 2012 7:29 PM, "Mike Diehl" <mdiehl at diehlnet.com> wrote:
> > > I've been logging sip registrations from this IP address for 2 days
> now.
> > >
> > >  I've
> > >
> > > emailed the domain's admin, but nothing seems to come of it.
> > >
> > > I've routed him into oblivion, but still, I think 50 requests a second
> > > for 2
> > > days is a bit much.
> > >
> > > Any ideas?
> > >
> > > --
> > >
> > > Take care and have fun,
> > > Mike Diehl.
> > >
> > > --
> > > _____________________________________________________________________
> > > -- Bandwidth and Colocation Provided by http://www.api-digital.com --
> > >
> > > New to Asterisk? Join us for a live introductory webinar every Thurs:
> > >               http://www.asterisk.org/hello
> > >
> > > asterisk-users mailing list
> > >
> > > To UNSUBSCRIBE or update options visit:
> > >   http://lists.digium.com/mailman/listinfo/asterisk-users
>
> --
>
> Take care and have fun,
> Mike Diehl.
>
> --
> _____________________________________________________________________
> -- Bandwidth and Colocation Provided by http://www.api-digital.com --
> New to Asterisk? Join us for a live introductory webinar every Thurs:
>               http://www.asterisk.org/hello
>
> asterisk-users mailing list
> To UNSUBSCRIBE or update options visit:
>   http://lists.digium.com/mailman/listinfo/asterisk-users
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.digium.com/pipermail/asterisk-users/attachments/20120306/bd4f08e2/attachment.htm>