[Icecast] Help attack DDOS

[Alejandro Flores]

Certanly some ips are reported as attackers


https://www.abuseipdb.com/check/202.183.32.6


i found also some cameras ips, so  it looks like the segment you are living
is constantly scanned

When you tried another ip, was from the same segment?

Regards

On Fri, Jun 15, 2018 at 2:43 PM, Victor Moreno <vitjam at gmail.com> wrote:

> Send the command output. i installed in other server and it's the same
> result.
>
> 2018-06-06 9:53 GMT-05:00 Alejandro Flores <alex at mordormx.net>:
>
>> What's the command output?
>>
>> On Wed, Jun 6, 2018, 9:50 AM Victor Moreno <vitjam at gmail.com> wrote:
>>
>>> i used this command
>>> netstat -ntu | awk '{print $5}' | cut -d: -f1 | sort | uniq -c | sort -n
>>>
>>>
>>> I've also changed the port and it shows a flood of ips blocking the
>>> icecast
>>>
>>>
>>> 2018-06-06 4:36 GMT-05:00 Geoff Shang <geoff at quitelikely.com>:
>>>
>>>> On Tue, 5 Jun 2018, Victor Moreno wrote:
>>>>
>>>> I have a problem with the icecast. When I activate the service I am
>>>>> having
>>>>> an exesive consumption in the ip queries. It seems like a DDOS attack.
>>>>> How
>>>>> can I mitigate this attack?
>>>>>
>>>>
>>>> Why do you think it's a DDOS?  What do you see?
>>>>
>>>> If it's an option, try running it on another port.
>>>>
>>>> HTH,
>>>> Geoff.
>>>>
>>>>
>>>> _______________________________________________
>>>> Icecast mailing list
>>>> Icecast at xiph.org
>>>> http://lists.xiph.org/mailman/listinfo/icecast
>>>>
>>>
>>>
>>>
>>> --
>>> Victor Moreno
>>> Ingeniero Electrónico
>>> 3177684646
>>> _______________________________________________
>>> Icecast mailing list
>>> Icecast at xiph.org
>>> http://lists.xiph.org/mailman/listinfo/icecast
>>>
>>
>> _______________________________________________
>> Icecast mailing list
>> Icecast at xiph.org
>> http://lists.xiph.org/mailman/listinfo/icecast
>>
>>
>
>
> --
> Victor Moreno
> Ingeniero Electrónico
> 3177684646
>
> _______________________________________________
> Icecast mailing list
> Icecast at xiph.org
> http://lists.xiph.org/mailman/listinfo/icecast
>
>


-- 
Alejandro Flores L.
LIA. CEH. VCP.
5513998178
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.xiph.org/pipermail/icecast/attachments/20180615/7383ee3e/attachment.htm>