<p>Its a good idea tos setup Fail2ban, instructions for which are on <a href="http://voip-info.org">voip-info.org</a>. It at least blocks such IP addresses, hopefully prompting the attackers to move their attack somewhere else and leave you alone.</p>
<p>Another good idea is to lookup in whois database this IP address and see if you can find contact info for the person responsible for this IP address. Then contact them and let them know about this incident.</p>
<p>You can also try to ask your ISP if they can block it on their end.<br></p>
<p>Zeeshan A Zakaria</p>
<p>--<br>
Sent from my Android phone with K-9 Mail.</p>
<p><blockquote type="cite">On 2010-04-10 5:39 PM, "Gordon Henderson" <<a href="mailto:gordon%2Basterisk@drogon.net">gordon+asterisk@drogon.net</a>> wrote:<br><br><br>
Just a "heads-up" ... my home asterisk server is being flooded by someone<br>
from IP 184.73.17.150 which is an Amazon EC2 instance by the looks of it -<br>
they're trying to send SIP subscribes to one account - and they're<br>
flooding the requests in - it's averaging some 600Kbits/sec of incoming<br>
UDP data or about 200 a second )-:<br>
<br>
This is much worse than anything else I've seen.<br>
<br>
Gordon<br>
<br>
--<br>
_____________________________________________________________________<br>
-- Bandwidth and Colocation Provided by <a href="http://www.api-digital.com" target="_blank">http://www.api-digital.com</a> --<br>
New to Asterisk? Join us for a live introductory webinar every Thurs:<br>
<a href="http://www.asterisk.org/hello" target="_blank">http://www.asterisk.org/hello</a><br>
<br>
asterisk-users mailing list<br>
To UNSUBSCRIBE or update options visit:<br>
<a href="http://lists.digium.com/mailman/listinfo/asterisk-users" target="_blank">http://lists.digium.com/mailman/listinfo/asterisk-users</a><br>
</blockquote></p>