Simply to reduce the attack, and then improve the defense: If you don't need traffic from some area that is attacking you, just put the whole area in IPTables. A list is available on VOIP-INFO.org. Cull out what you want to allow. Then tune Fail2Ban at your leisure. Cary Fitch