[asterisk-users] Ongoing attack from 188.138.100.16

[Patrick Lists]

On 07-03-12 01:28, Mike Diehl wrote:
> I've been logging sip registrations from this IP address for 2 days now.  I've
> emailed the domain's admin, but nothing seems to come of it.
>
> I've routed him into oblivion, but still, I think 50 requests a second for 2
> days is a bit much.
>
> Any ideas?

Did you talk to the upstream provider? A quick whois on that IP address 
suggests mentions PlusServer. Send them an email at abuse at plusserver.de 
or use the chat link on the left side on this page: 
http://www.plusserver.de/produkte/ or call them at +49-2233-6124300.

Regards,
Patrick