Is this attack?

[VeseliD]

I am getting too much connections on shoutcast server from the same ip adress.



Is this some kind of attack?
How to solve it?
There is about 200 connection from that ip...
I have tried with iptable to limit connection from one ip,but doesnt help.

P.S always connecting from different ips

[Bryon Stout]

Happened to me a couple times. I just banned the IP.

I "think" it has something to do on their end (connection) and (player) could be bugging out.

[Kigen]

Do you know the User Agent that the IP is reportedly using?

[Jkey]

As mentioned above, this may be a buffering media player on a slow internet connection.

[thinktink]

PHP Code:

/tmp$ whois 37.250.23.39
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
%       To receive output for a database update, use the "-B" flag.

% Information related to '37.250.0.0 - 37.250.255.255'

% No abuse contact registered for 37.250.0.0 - 37.250.255.255

inetnum:        37.250.0.0 - 37.250.255.255
org:            ORG-HAA1-RIPE
netname:        SE-HI3GACCESS-20120418
descr:          Hi3G Access AB
country:        SE
admin-c:        DAWI-RIPE
tech-c:         ERBL1-RIPE
tech-c:         DAWI-RIPE
status:         ALLOCATED PA
mnt-by:         RIPE-NCC-HM-MNT
mnt-lower:      HI3GACCESS-MNT
mnt-routes:     HI3GACCESS-MNT
mnt-routes:     IP-ONLY-MNT
source:         RIPE # Filtered

organisation:   ORG-HAA1-RIPE
org-name:       Hi3G Access AB
org-type:       LIR
address:        Hi3G Access AB
address:        Daniel Wiberg
address:        P.O Box 30213
address:        SE-10425 Stockholm
address:        SWEDEN
phone:          +46763333333
fax-no:         +46763337200
admin-c:        DAWI-RIPE
mnt-ref:        HI3GACCESS-MNT
mnt-ref:        RIPE-NCC-HM-MNT
mnt-by:         RIPE-NCC-HM-MNT
source:         RIPE # Filtered

person:         Daniel Wiberg
address:        Hi3G Access AB
address:        Lindhagensgatan 98
address:        SE-104 25 Stockholm
address:        Sweden
mnt-by:         HI3GACCESS-MNT
phone:          +46 763 333333
nic-hdl:        DAWI-RIPE
abuse-mailbox:  abuse@tre.se
source:         RIPE # Filtered

person:         Erik Blomberg
address:        Hi3G Access AB
address:        P.O Box 30213
address:        Lindhagensgatan 98
address:        SE-104 25 Stockholm
address:        Sweden
phone:          +46 735 33 71 34
fax-no:         +46 8 5056 7200
nic-hdl:        erbl1-ripe
source:         RIPE # Filtered

% Information related to '37.250.0.0/16AS44034'

route:          37.250.0.0/16
descr:          HI3G
origin:         AS44034
mnt-by:         HI3GACCESS-MNT
source:         RIPE # Filtered

% This query was served by the RIPE Database Query Service version 1.70.1 (WHOIS2)


:/tmp$