Hi Benoît

We use pike in combination with fail2ban. Log a message -> create a fail2ban rule to block the ip for xxx time.

example:

if ($ua =~ "(friendly-scanner|sipvicious)") {         sl_send_reply("488", "Go away.");         xlog("L_INFO","$ci Blocking traffic from $si\n");         exit; }

Cool thing is, you can write a log entry from every part in your kamailio-config, and then fail2ban does the rest.

Regards Stefan

Am 27.04.23 um 16:07 schrieb Benoit Panizzon:

Hi

Before I go too deep into try and error, I guess others have been there too.

What are sensible value you use for the pike module to detect / mitigate abusive behavior, especially dictionary attacks?

Are there better solutions that the pike module?

Mit freundlichen Grüssen

-Benoît Panizzon-