<div dir="ltr">Hi, <div><br></div><div>this can also be helpful</div><div><br></div><div><a href="http://jcs.org/notaweblog/2010/04/11/properly_stopping_a_sip_flood/">http://jcs.org/notaweblog/2010/04/11/properly_stopping_a_sip_flood/</a><div>
<br clear="all"><div dir="ltr">Regards,<br>Zohair Raza<div><br></div></div>
<br><br><div class="gmail_quote">On Wed, Mar 7, 2012 at 7:53 PM, Danny Nicholas <span dir="ltr"><<a href="mailto:danny@debsinc.com">danny@debsinc.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div lang="EN-US" link="blue" vlink="purple"><div><p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">Nothing against fail2ban but in this case I think the “route drop” solution is more appropriate.<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></p><p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">From:</span></b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif""> <a href="mailto:asterisk-users-bounces@lists.digium.com" target="_blank">asterisk-users-bounces@lists.digium.com</a> [mailto:<a href="mailto:asterisk-users-bounces@lists.digium.com" target="_blank">asterisk-users-bounces@lists.digium.com</a>] <b>On Behalf Of </b>equis software<br>
<b>Sent:</b> Wednesday, March 07, 2012 9:52 AM<br><b>To:</b> Asterisk Users Mailing List - Non-Commercial Discussion<br><b>Subject:</b> Re: [asterisk-users] Ongoing attack from 188.138.100.16<u></u><u></u></span></p><div>
<div class="h5"><p class="MsoNormal"><u></u> <u></u></p><p class="MsoNormal" style="margin-bottom:12.0pt">fail2ban works perfect!!<u></u><u></u></p><div><p class="MsoNormal">On Wed, Mar 7, 2012 at 12:47 PM, Jamie A. Stapleton <<a href="mailto:jstapleton@computer-business.com" target="_blank">jstapleton@computer-business.com</a>> wrote:<u></u><u></u></p>
<p class="MsoNormal">Block them. They are one of the Internet's top bad IP addresses. <a href="http://www.threatstop.com/checkip" target="_blank">http://www.threatstop.com/checkip</a><u></u><u></u></p><div><div><p class="MsoNormal">
<br>-----Original Message-----<br>From: <a href="mailto:asterisk-users-bounces@lists.digium.com" target="_blank">asterisk-users-bounces@lists.digium.com</a> [mailto:<a href="mailto:asterisk-users-bounces@lists.digium.com" target="_blank">asterisk-users-bounces@lists.digium.com</a>] On Behalf Of Mike Diehl<br>
Sent: Tuesday, March 06, 2012 7:29 PM<br>To: <a href="mailto:asterisk-users@lists.digium.com" target="_blank">asterisk-users@lists.digium.com</a><br>Subject: [asterisk-users] Ongoing attack from 188.138.100.16<br><br>I've been logging sip registrations from this IP address for 2 days now. I've<br>
emailed the domain's admin, but nothing seems to come of it.<br><br>I've routed him into oblivion, but still, I think 50 requests a second for 2<br>days is a bit much.<br><br>Any ideas?<br><br>--<br><br>Take care and have fun,<br>
Mike Diehl.<br><br>--<br>_____________________________________________________________________<br>-- Bandwidth and Colocation Provided by <a href="http://www.api-digital.com" target="_blank">http://www.api-digital.com</a> --<br>
New to Asterisk? Join us for a live introductory webinar every Thurs:<br> <a href="http://www.asterisk.org/hello" target="_blank">http://www.asterisk.org/hello</a><br><br>asterisk-users mailing list<br>To UNSUBSCRIBE or update options visit:<br>
<a href="http://lists.digium.com/mailman/listinfo/asterisk-users" target="_blank">http://lists.digium.com/mailman/listinfo/asterisk-users</a><br><br>--<br>_____________________________________________________________________<br>
-- Bandwidth and Colocation Provided by <a href="http://www.api-digital.com" target="_blank">http://www.api-digital.com</a> --<br>New to Asterisk? Join us for a live introductory webinar every Thurs:<br> <a href="http://www.asterisk.org/hello" target="_blank">http://www.asterisk.org/hello</a><br>
<br>asterisk-users mailing list<br>To UNSUBSCRIBE or update options visit:<br> <a href="http://lists.digium.com/mailman/listinfo/asterisk-users" target="_blank">http://lists.digium.com/mailman/listinfo/asterisk-users</a><u></u><u></u></p>
</div></div></div><p class="MsoNormal"><u></u> <u></u></p></div></div></div></div><br>--<br>
_____________________________________________________________________<br>
-- Bandwidth and Colocation Provided by <a href="http://www.api-digital.com" target="_blank">http://www.api-digital.com</a> --<br>
New to Asterisk? Join us for a live introductory webinar every Thurs:<br>
<a href="http://www.asterisk.org/hello" target="_blank">http://www.asterisk.org/hello</a><br>
<br>
asterisk-users mailing list<br>
To UNSUBSCRIBE or update options visit:<br>
<a href="http://lists.digium.com/mailman/listinfo/asterisk-users" target="_blank">http://lists.digium.com/mailman/listinfo/asterisk-users</a><br></blockquote></div><br></div></div></div>