[VoiceOps] International IP blacklist

[anorexicpoodle]

Depending on your scope of service, I personally have found that
maintaining static blocklists just creates a heap of support problems,
but instead deny traffic outside ARIN allocated IP's  and allow
customers to turn on international use individually which has severely
cut down our fraud, since chasing it statically is just a game of
whack-a-mole. 

Though this topic does raise a question I have been kicking around for a
while, has anyone here tried implementing a SIP equivalent of URPF on
your border controllers or proxies on the peering side, so if you cannot
determine a route back to the calling number you drop the call to IVR or
reject? Obviously implementing UPRF at L3 has saved me tons of headaches
in other facets, but certainly a L5 solution could alleviate a potential
ton of spam calls that come through normal PSTN connections. Thoughts?

On Sat, 2010-04-17 at 22:14 -0700, Ujjval Karihaloo wrote:
> We have seen a lot Unauthorized attempts from Mid-East, China
> recently. I wanted to see if there is a blacklist of IPs that is
> maintained or we as Service Providers should maintain. Maybe a wild
> idea but worth a shot. I would like to identify whole subnets from
> even sending traffic to our networks.
> 
>  
> 
> Here is the IPs we have blocked recently…
> 
>  
> 
> 188.161.142.151
> 
> 188.161.135.62
> 
> 85.114.97.106
> 
> 113.105.152.137
> 
> 121.14.149.148
> 
> 113.105.152.131
> 
> 113.105.152.135
> 
> 188.161.130.5
> 
> 121.14.149.148
> 
> 188.161.135.62
> 
> 188.161.155.180
> 
> 188.225.184.117
> 
> 95.35.189.89
> 
> 188.161.241.77
> 
> 95.35.211.88
> 
> 188.225.193.97
> 
>  
> 
> Shut the buggers out!
> 
>  
> 
>  
> 
>  
> 
> 
> 
> _______________________________________________
> VoiceOps mailing list
> VoiceOps at voiceops.org
> https://puck.nether.net/mailman/listinfo/voiceops


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://puck.nether.net/pipermail/voiceops/attachments/20100418/ee326742/attachment.html>