3 ms·
Off-Topic question: Is there an existing static file that contains all the attacking IP's from a 3 or 6 month period that spawned the creation of this system?
by LinuxBender 5y ago
Off-Topic question: Is there an existing static file that contains all the attacking IP's from a 3 or 6 month period that spawned the creation of this system? I would like to compare it to what is in firehol's repo. [1] I am not trying to downplay anything rather hoping to see the delta of the outliers. In the past I logged the people querying my DNS servers for SIP names but have since switched to NSD which does not have query logging.
[Edit] I am running tcpdump right now and it didn't even take 15 seconds to start seeing queries for sip SRV records.
[1] - https://github.com/firehol/blocklist-ipsets.git https://github.com/firehol/blocklist-ipsets.git