[asterisk-users] Ongoing attack from 188.138.100.16

[Zohair Raza]

Hi,

this can also be helpful

http://jcs.org/notaweblog/2010/04/11/properly_stopping_a_sip_flood/

Regards,
Zohair Raza



On Wed, Mar 7, 2012 at 7:53 PM, Danny Nicholas <danny at debsinc.com> wrote:

> Nothing against fail2ban but in this case I think the “route drop”
> solution is more appropriate.****
>
> ** **
>
> *From:* asterisk-users-bounces at lists.digium.com [mailto:
> asterisk-users-bounces at lists.digium.com] *On Behalf Of *equis software
> *Sent:* Wednesday, March 07, 2012 9:52 AM
> *To:* Asterisk Users Mailing List - Non-Commercial Discussion
> *Subject:* Re: [asterisk-users] Ongoing attack from 188.138.100.16****
>
> ** **
>
> fail2ban works perfect!!****
>
> On Wed, Mar 7, 2012 at 12:47 PM, Jamie A. Stapleton <
> jstapleton at computer-business.com> wrote:****
>
> Block them.  They are one of the Internet's top bad IP addresses.
> http://www.threatstop.com/checkip****
>
>
> -----Original Message-----
> From: asterisk-users-bounces at lists.digium.com [mailto:
> asterisk-users-bounces at lists.digium.com] On Behalf Of Mike Diehl
> Sent: Tuesday, March 06, 2012 7:29 PM
> To: asterisk-users at lists.digium.com
> Subject: [asterisk-users] Ongoing attack from 188.138.100.16
>
> I've been logging sip registrations from this IP address for 2 days now.
>  I've
> emailed the domain's admin, but nothing seems to come of it.
>
> I've routed him into oblivion, but still, I think 50 requests a second for
> 2
> days is a bit much.
>
> Any ideas?
>
> --
>
> Take care and have fun,
> Mike Diehl.
>
> --
> _____________________________________________________________________
> -- Bandwidth and Colocation Provided by http://www.api-digital.com --
> New to Asterisk? Join us for a live introductory webinar every Thurs:
>               http://www.asterisk.org/hello
>
> asterisk-users mailing list
> To UNSUBSCRIBE or update options visit:
>   http://lists.digium.com/mailman/listinfo/asterisk-users
>
> --
> _____________________________________________________________________
> -- Bandwidth and Colocation Provided by http://www.api-digital.com --
> New to Asterisk? Join us for a live introductory webinar every Thurs:
>               http://www.asterisk.org/hello
>
> asterisk-users mailing list
> To UNSUBSCRIBE or update options visit:
>   http://lists.digium.com/mailman/listinfo/asterisk-users****
>
> ** **
>
> --
> _____________________________________________________________________
> -- Bandwidth and Colocation Provided by http://www.api-digital.com --
> New to Asterisk? Join us for a live introductory webinar every Thurs:
>               http://www.asterisk.org/hello
>
> asterisk-users mailing list
> To UNSUBSCRIBE or update options visit:
>   http://lists.digium.com/mailman/listinfo/asterisk-users
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.digium.com/pipermail/asterisk-users/attachments/20120308/03d5e8c8/attachment.htm>