Attack from"friendly-scanner"
HI everyone,
Unfortunately I've been receiving 20 Register messages per second since yesterday from a random ip using friendly-scanner, I'd like to know if is enough setting the Basis DDoS configuration for access environment.
I can block a ip address with ACL but the ip is changing everyday, can I block this register message dynamically?
I'm using a Broadsoft solution in order to authenticate the users. (image attached)
This is the message, it has been extracted of bradsoft server and it answers 404 not found
REGISTER sip:2538@bestel.com.mx SIP/2.0^M
ViaIP/2.0/UDP 189.202.203.55:5060;branch=z9hG4bK331qdd201oj0fmsd92t1.1^M