[asterisk-users] Ongoing attack from 188.138.100.16

[Danny Nicholas]

Nothing against fail2ban but in this case I think the "route drop" solution
is more appropriate.

 

From: asterisk-users-bounces at lists.digium.com
[mailto:asterisk-users-bounces at lists.digium.com] On Behalf Of equis software
Sent: Wednesday, March 07, 2012 9:52 AM
To: Asterisk Users Mailing List - Non-Commercial Discussion
Subject: Re: [asterisk-users] Ongoing attack from 188.138.100.16

 

fail2ban works perfect!!

On Wed, Mar 7, 2012 at 12:47 PM, Jamie A. Stapleton
<jstapleton at computer-business.com> wrote:

Block them.  They are one of the Internet's top bad IP addresses.
http://www.threatstop.com/checkip


-----Original Message-----
From: asterisk-users-bounces at lists.digium.com
[mailto:asterisk-users-bounces at lists.digium.com] On Behalf Of Mike Diehl
Sent: Tuesday, March 06, 2012 7:29 PM
To: asterisk-users at lists.digium.com
Subject: [asterisk-users] Ongoing attack from 188.138.100.16

I've been logging sip registrations from this IP address for 2 days now.
I've
emailed the domain's admin, but nothing seems to come of it.

I've routed him into oblivion, but still, I think 50 requests a second for 2
days is a bit much.

Any ideas?

--

Take care and have fun,
Mike Diehl.

--
_____________________________________________________________________
-- Bandwidth and Colocation Provided by http://www.api-digital.com --
New to Asterisk? Join us for a live introductory webinar every Thurs:
              http://www.asterisk.org/hello

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
  http://lists.digium.com/mailman/listinfo/asterisk-users

--
_____________________________________________________________________
-- Bandwidth and Colocation Provided by http://www.api-digital.com --
New to Asterisk? Join us for a live introductory webinar every Thurs:
              http://www.asterisk.org/hello

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
  http://lists.digium.com/mailman/listinfo/asterisk-users

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.digium.com/pipermail/asterisk-users/attachments/20120307/5e28c4c4/attachment.htm>