search for: notaweblog

I'm currently receiving over 200 SIP REGISTER requests per second from a machine apparently in Italy, host97-239-149-62.serverdedicati.aruba.it. This has continued for several days, and abuse at staff.aruba.it are unresponsive. I've had a couple of similar incidents recently, the others originating from uk2.net. I have an ADSL connection and responding to these REGISTERS was consuming all

Hello list. I'm trying to find a way to block any ip that tries to login more than three times with the wrong password and try to log in three different extensions. For I have suffered some brute force attacks on my asterisk in the morning period. The idea would be: Any ip with three attempts without success to log into an extension is blocked. Is there any way to accomplish this directly