You could traceroute the IP and contact NOC's along the route. They might be interested to hear of flooding/DOS attacks being routed via their equipment.<br><br><div class="gmail_quote">On Tue, Mar 6, 2012 at 4:58 PM, Mike Diehl <span dir="ltr"><<a href="mailto:mdiehl@diehlnet.com">mdiehl@diehlnet.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">route add -host 188.138.100.16 dev lo<br>
<br>
Good bye. But it shouldn't come to this.<br>
<div class="HOEnZb"><div class="h5"><br>
On Tuesday 06 March 2012 5:48:26 pm Matt Desbiens wrote:<br>
> iptables -A INPUT --src 188.138.100.16 -j DROP<br>
><br>
> On Mar 6, 2012 7:29 PM, "Mike Diehl" <<a href="mailto:mdiehl@diehlnet.com">mdiehl@diehlnet.com</a>> wrote:<br>
> > I've been logging sip registrations from this IP address for 2 days now.<br>
> ><br>
> > I've<br>
> ><br>
> > emailed the domain's admin, but nothing seems to come of it.<br>
> ><br>
> > I've routed him into oblivion, but still, I think 50 requests a second<br>
> > for 2<br>
> > days is a bit much.<br>
> ><br>
> > Any ideas?<br>
> ><br>
> > --<br>
> ><br>
> > Take care and have fun,<br>
> > Mike Diehl.<br>
> ><br>
> > --<br>
> > _____________________________________________________________________<br>
> > -- Bandwidth and Colocation Provided by <a href="http://www.api-digital.com" target="_blank">http://www.api-digital.com</a> --<br>
> ><br>
> > New to Asterisk? Join us for a live introductory webinar every Thurs:<br>
> > <a href="http://www.asterisk.org/hello" target="_blank">http://www.asterisk.org/hello</a><br>
> ><br>
> > asterisk-users mailing list<br>
> ><br>
> > To UNSUBSCRIBE or update options visit:<br>
> > <a href="http://lists.digium.com/mailman/listinfo/asterisk-users" target="_blank">http://lists.digium.com/mailman/listinfo/asterisk-users</a><br>
<br>
--<br>
<br>
Take care and have fun,<br>
Mike Diehl.<br>
<br>
--<br>
_____________________________________________________________________<br>
-- Bandwidth and Colocation Provided by <a href="http://www.api-digital.com" target="_blank">http://www.api-digital.com</a> --<br>
New to Asterisk? Join us for a live introductory webinar every Thurs:<br>
<a href="http://www.asterisk.org/hello" target="_blank">http://www.asterisk.org/hello</a><br>
<br>
asterisk-users mailing list<br>
To UNSUBSCRIBE or update options visit:<br>
<a href="http://lists.digium.com/mailman/listinfo/asterisk-users" target="_blank">http://lists.digium.com/mailman/listinfo/asterisk-users</a><br>
</div></div></blockquote></div><br>