[asterisk-users] sip attack.. fail2ban not stopping attack

[dave george]

Yes we have that set in logger.conf.

-----Original Message-----
From: asterisk-users-bounces at lists.digium.com
[mailto:asterisk-users-bounces at lists.digium.com] On Behalf Of Nick Ustinov
Sent: Saturday, December 25, 2010 6:25 PM
To: Asterisk Users Mailing List - Non-Commercial Discussion
Subject: Re: [asterisk-users] sip attack.. fail2ban not stopping attack

Make sure you have

dateformat=%F %T

in logger.conf



On Sun, Dec 26, 2010 at 1:04 AM, Dave George <dgeorge at teletoneinc.com>
wrote:
> My server is being attached all day and fail2ban is not stopping the
> attack. I updated stamstamp to match fail2ban requirements.
>
> [2010-12-25 18:54:34] NOTICE[15415]: chan_sip.c:21830
> handle_request_register: Registration from '"7002" '
> failed for '38.108.40.94' - No matching peer found
> [2010-12-25 18:54:34] NOTICE[15415]: chan_sip.c:21830
> handle_request_register: Registration from '"7002" '
> failed for '38.108.40.94' - No matching peer found
> [2010-12-25 18:54:34] NOTICE[15415]: chan_sip.c:21830
> handle_request_register: Registration from '"7002" '
> failed for '38.108.40.94' - No matching peer found
> [2010-12-25 18:54:34] NOTICE[15415]: chan_sip.c:21830
> handle_request_register: Registration from '"7002" '
> failed for '38.108.40.94' - No matching peer found
> [2010-12-25 18:54:34] NOTICE[15415]: chan_sip.c:21830
> handle_request_register: Registration from '"7002" '
> failed for '38.108.40.94' - No matching peer found
> [2010-12-25 18:54:34] NOTICE[15415]: chan_sip.c:21830
> handle_request_register: Registration from '"7002" '
> failed for '38.108.40.94' - No matching peer found
> [2010-12-25 18:54:34] NOTICE[15415]: chan_sip.c:21830
> handle_request_register: Registration from '"7002" '
> failed for '38.108.40.94' - No matching peer found
> [2010-12-25 18:54:34] NOTICE[15415]: chan_sip.c:21830
> handle_request_register: Registration from '"7002" '
> failed for '38.108.40.94' - No matching peer found
> [2010-12-25 18:54:34] NOTICE[15415]: chan_sip.c:21830
> handle_request_register: Registration from '"7002" '
> failed for '38.108.40.94' - No matching peer found
> [2010-12-25 18:54:34] NOTICE[15415]: chan_sip.c:21830
> handle_request_register: Registration from '"7002"
> Dave
>
>
>
> --
> _____________________________________________________________________
> -- Bandwidth and Colocation Provided by http://www.api-digital.com --
> New to Asterisk? Join us for a live introductory webinar every Thurs:
>               http://www.asterisk.org/hello
>
> asterisk-users mailing list
> To UNSUBSCRIBE or update options visit:
>   http://lists.digium.com/mailman/listinfo/asterisk-users
>

--
_____________________________________________________________________
-- Bandwidth and Colocation Provided by http://www.api-digital.com --
New to Asterisk? Join us for a live introductory webinar every Thurs:
               http://www.asterisk.org/hello

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users