1

Just wondering - why are IP’s owned by Avast attempting to login to a SIP server in the United States over and over and over?

Our SIP server is blocking them for too many failed authentications - but make no mistake, they are attempting.

Have traced as many as 10 different IP’s - all trying the same thing.

2

I guess what you see has something to do with Avast DNS hijack check

3

Are we talking about a US Government Network, or just a [commercial] network in the US? Their is a distinct difference. Plus, I’m sure there are far more official channels you should be going through if you’re within the Government.

Your username made me laugh a little bit though, but I’d hardly describe this as “under attack”. I’ll see if I can pull Milos or someone similar (HonzaZ is the only other fellow I know) to hop in and check up with you.

4

Under Attack.
That describes the entire world. :slight_smile:

5

Hello,
without specific IP(s) we cannot verify. So I can only guess that it can be i.e. somebody (mis)using our VPN.

Milos

6

Why AVAST flood my SIP server? Too many connections from worldwide AVAST Software s.r.o. cloud to my host? 109-126-11-50.eth.vladlink.net:5060

How i can disable your traffic? My server has slow internet and drops legal my own connections.