[asterisk-users] Security AccountID unknown - PJSIP

Administrator TOOTAI admin at tootai.net
Fri Sep 27 09:31:34 CDT 2019

Hi list,

I would like to now what is the sense of such type of entry in security.log

[2019-09-27 15:12:24] SECURITY[26964] res_security_log.c: 
SessionID="56b0ca9-d967a90d16411209-a1b0fae1 at",LocalAddress="IPV4/UDP/<MyAddress>/5060",

We have a lot of such tries coming from IPs not allowed and fail2ban 
fail to ban them because of SecurityEvent not treated and Severity 

We add a fail2ban filter to ban those IPs which is OK on our side but 
also means that attacker knows that account is not existing.

Any comment appreciate

Best Regards


More information about the asterisk-users mailing list