<div dir="ltr">Certanly some ips are reported as attackers <div><br></div><div><br></div><div><a href="https://www.abuseipdb.com/check/202.183.32.6">https://www.abuseipdb.com/check/202.183.32.6</a><br></div><div><br></div><div><br></div><div>i found also some cameras ips, so it looks like the segment you are living is constantly scanned </div><div><br></div><div>When you tried another ip, was from the same segment?</div><div><br></div><div>Regards</div></div><div class="gmail_extra"><br><div class="gmail_quote">On Fri, Jun 15, 2018 at 2:43 PM, Victor Moreno <span dir="ltr"><<a href="mailto:vitjam@gmail.com" target="_blank">vitjam@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">Send the command output. i installed in other server and it's the same result. </div><div class="gmail_extra"><br><div class="gmail_quote">2018-06-06 9:53 GMT-05:00 Alejandro Flores <span dir="ltr"><<a href="mailto:alex@mordormx.net" target="_blank">alex@mordormx.net</a>></span>:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="auto">What's the command output?</div><div class="m_6724466547805288014HOEnZb"><div class="m_6724466547805288014h5"><br><div class="gmail_quote"><div dir="ltr">On Wed, Jun 6, 2018, 9:50 AM Victor Moreno <<a href="mailto:vitjam@gmail.com" target="_blank">vitjam@gmail.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><font face="arial, helvetica, sans-serif">i used this command </font><div><font face="arial, helvetica, sans-serif">netstat -ntu | awk '{print $5}' | cut -d: -f1 | sort | uniq -c | sort -n</font></div><div><font face="arial, helvetica, sans-serif"><br></font></div><div>
<font face="arial, helvetica, sans-serif"><br class="m_6724466547805288014m_5815785596240146563m_-5911062833246495881gmail-Apple-interchange-newline"><span style="color:rgb(33,33,33);text-align:left;white-space:pre-wrap;background-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:initial;float:none;display:inline">I've also changed the port and it shows a flood of ips blocking the icecast</span>
</font><div><br></div></div></div><div class="gmail_extra"><br><div class="gmail_quote">2018-06-06 4:36 GMT-05:00 Geoff Shang <span dir="ltr"><<a href="mailto:geoff@quitelikely.com" rel="noreferrer" target="_blank">geoff@quitelikely.com</a>></span>:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span>On Tue, 5 Jun 2018, Victor Moreno wrote:<br>
<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
I have a problem with the icecast. When I activate the service I am having<br>
an exesive consumption in the ip queries. It seems like a DDOS attack. How<br>
can I mitigate this attack?<br>
</blockquote>
<br></span>
Why do you think it's a DDOS? What do you see?<br>
<br>
If it's an option, try running it on another port.<br>
<br>
HTH,<br>
Geoff.<div class="m_6724466547805288014m_5815785596240146563m_-5911062833246495881HOEnZb"><div class="m_6724466547805288014m_5815785596240146563m_-5911062833246495881h5"><br>
<br>
______________________________<wbr>_________________<br>
Icecast mailing list<br>
<a href="mailto:Icecast@xiph.org" rel="noreferrer" target="_blank">Icecast@xiph.org</a><br>
<a href="http://lists.xiph.org/mailman/listinfo/icecast" rel="noreferrer noreferrer" target="_blank">http://lists.xiph.org/mailman/<wbr>listinfo/icecast</a><br>
</div></div></blockquote></div><br><br clear="all"><div><br></div>-- <br><div class="m_6724466547805288014m_5815785596240146563m_-5911062833246495881gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><font size="2">Victor Moreno</font><div><font size="2">Ingeniero Electrónico</font></div><div><font size="2">3177684646</font></div></div></div>
</div>
______________________________<wbr>_________________<br>
Icecast mailing list<br>
<a href="mailto:Icecast@xiph.org" rel="noreferrer" target="_blank">Icecast@xiph.org</a><br>
<a href="http://lists.xiph.org/mailman/listinfo/icecast" rel="noreferrer noreferrer" target="_blank">http://lists.xiph.org/mailman/<wbr>listinfo/icecast</a><br>
</blockquote></div>
</div></div><br>______________________________<wbr>_________________<br>
Icecast mailing list<br>
<a href="mailto:Icecast@xiph.org" target="_blank">Icecast@xiph.org</a><br>
<a href="http://lists.xiph.org/mailman/listinfo/icecast" rel="noreferrer" target="_blank">http://lists.xiph.org/mailman/<wbr>listinfo/icecast</a><br>
<br></blockquote></div><span class="HOEnZb"><font color="#888888"><br><br clear="all"><div><br></div>-- <br><div class="m_6724466547805288014gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><font size="2">Victor Moreno</font><div><font size="2">Ingeniero Electrónico</font></div><div><font size="2">3177684646</font></div></div></div>
</font></span></div>
<br>______________________________<wbr>_________________<br>
Icecast mailing list<br>
<a href="mailto:Icecast@xiph.org">Icecast@xiph.org</a><br>
<a href="http://lists.xiph.org/mailman/listinfo/icecast" rel="noreferrer" target="_blank">http://lists.xiph.org/mailman/<wbr>listinfo/icecast</a><br>
<br></blockquote></div><br><br clear="all"><div><br></div>-- <br><div class="gmail_signature" data-smartmail="gmail_signature">Alejandro Flores L.<br>LIA. CEH. VCP.<br>5513998178</div>
</div>