[asterisk-users] sip attack.. fail2ban not stopping attack

Dave George dgeorge at teletoneinc.com
Sat Dec 25 23:04:59 UTC 2010


My server is being attached all day and fail2ban is not stopping the
attack.  I updated stamstamp to match fail2ban requirements.

[2010-12-25 18:54:34] NOTICE[15415]: chan_sip.c:21830
handle_request_register: Registration from '"7002" <sip:7002 at x.x.x.x>'
failed for '38.108.40.94' - No matching peer found
[2010-12-25 18:54:34] NOTICE[15415]: chan_sip.c:21830
handle_request_register: Registration from '"7002" <sip:7002 at x.x.x.x>'
failed for '38.108.40.94' - No matching peer found
[2010-12-25 18:54:34] NOTICE[15415]: chan_sip.c:21830
handle_request_register: Registration from '"7002" <sip:7002 at x.x.x.x>'
failed for '38.108.40.94' - No matching peer found
[2010-12-25 18:54:34] NOTICE[15415]: chan_sip.c:21830
handle_request_register: Registration from '"7002" <sip:7002 at x.x.x.x>'
failed for '38.108.40.94' - No matching peer found
[2010-12-25 18:54:34] NOTICE[15415]: chan_sip.c:21830
handle_request_register: Registration from '"7002" <sip:7002 at x.x.x.x>'
failed for '38.108.40.94' - No matching peer found
[2010-12-25 18:54:34] NOTICE[15415]: chan_sip.c:21830
handle_request_register: Registration from '"7002" <sip:7002 at x.x.x.x>'
failed for '38.108.40.94' - No matching peer found
[2010-12-25 18:54:34] NOTICE[15415]: chan_sip.c:21830
handle_request_register: Registration from '"7002" <sip:7002 at x.x.x.x>'
failed for '38.108.40.94' - No matching peer found
[2010-12-25 18:54:34] NOTICE[15415]: chan_sip.c:21830
handle_request_register: Registration from '"7002" <sip:7002 at x.x.x.x>'
failed for '38.108.40.94' - No matching peer found
[2010-12-25 18:54:34] NOTICE[15415]: chan_sip.c:21830
handle_request_register: Registration from '"7002" <sip:7002 at x.x.x.x>'
failed for '38.108.40.94' - No matching peer found
[2010-12-25 18:54:34] NOTICE[15415]: chan_sip.c:21830
handle_request_register: Registration from '"7002" <sip:70

Dave

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.digium.com/pipermail/asterisk-users/attachments/20101225/4a1d3cf9/attachment.htm>


More information about the asterisk-users mailing list