Just wondering - why are IP’s owned by Avast attempting to login to a SIP server in the United States over and over and over?
Our SIP server is blocking them for too many failed authentications - but make no mistake, they are attempting.
Have traced as many as 10 different IP’s - all trying the same thing.
I guess what you see has something to do with Avast DNS hijack check
Are we talking about a US Government Network, or just a [commercial] network in the US? Their is a distinct difference. Plus, I’m sure there are far more official channels you should be going through if you’re within the Government.
Your username made me laugh a little bit though, but I’d hardly describe this as “under attack”. I’ll see if I can pull Milos or someone similar (HonzaZ is the only other fellow I know) to hop in and check up with you.
Under Attack.
That describes the entire world. 
Hello,
without specific IP(s) we cannot verify. So I can only guess that it can be i.e. somebody (mis)using our VPN.
Milos
Why AVAST flood my SIP server? Too many connections from worldwide AVAST Software s.r.o. cloud to my host? 109-126-11-50.eth.vladlink.net:5060
How i can disable your traffic? My server has slow internet and drops legal my own connections.