[asterisk-users] sip attack.. fail2ban not stopping attack

[Nick Ustinov]

Make sure you have

dateformat=%F %T

in logger.conf



On Sun, Dec 26, 2010 at 1:04 AM, Dave George <dgeorge at teletoneinc.com> wrote:
> My server is being attached all day and fail2ban is not stopping the
> attack. I updated stamstamp to match fail2ban requirements.
>
> [2010-12-25 18:54:34] NOTICE[15415]: chan_sip.c:21830
> handle_request_register: Registration from '"7002" '
> failed for '38.108.40.94' - No matching peer found
> [2010-12-25 18:54:34] NOTICE[15415]: chan_sip.c:21830
> handle_request_register: Registration from '"7002" '
> failed for '38.108.40.94' - No matching peer found
> [2010-12-25 18:54:34] NOTICE[15415]: chan_sip.c:21830
> handle_request_register: Registration from '"7002" '
> failed for '38.108.40.94' - No matching peer found
> [2010-12-25 18:54:34] NOTICE[15415]: chan_sip.c:21830
> handle_request_register: Registration from '"7002" '
> failed for '38.108.40.94' - No matching peer found
> [2010-12-25 18:54:34] NOTICE[15415]: chan_sip.c:21830
> handle_request_register: Registration from '"7002" '
> failed for '38.108.40.94' - No matching peer found
> [2010-12-25 18:54:34] NOTICE[15415]: chan_sip.c:21830
> handle_request_register: Registration from '"7002" '
> failed for '38.108.40.94' - No matching peer found
> [2010-12-25 18:54:34] NOTICE[15415]: chan_sip.c:21830
> handle_request_register: Registration from '"7002" '
> failed for '38.108.40.94' - No matching peer found
> [2010-12-25 18:54:34] NOTICE[15415]: chan_sip.c:21830
> handle_request_register: Registration from '"7002" '
> failed for '38.108.40.94' - No matching peer found
> [2010-12-25 18:54:34] NOTICE[15415]: chan_sip.c:21830
> handle_request_register: Registration from '"7002" '
> failed for '38.108.40.94' - No matching peer found
> [2010-12-25 18:54:34] NOTICE[15415]: chan_sip.c:21830
> handle_request_register: Registration from '"7002"
> Dave
>
>
>
> --
> _____________________________________________________________________
> -- Bandwidth and Colocation Provided by http://www.api-digital.com --
> New to Asterisk? Join us for a live introductory webinar every Thurs:
>               http://www.asterisk.org/hello
>
> asterisk-users mailing list
> To UNSUBSCRIBE or update options visit:
>   http://lists.digium.com/mailman/listinfo/asterisk-users
>