Cannot Connect From Certain IP

From Kolmisoft Wiki
Jump to navigationJump to search
The printable version is no longer supported and may have rendering errors. Please update your browser bookmarks and please use the default browser print function instead.

Check if IP blocked or not at this moment by iptables: 

iptables -L -n | grep 192.168.11.125

Output: 

 REJECT     all  --  192.168.11.125        0.0.0.0/0            reject-with icmp-port-unreachable

Check Fail2ban log for blocked IP: 

grep -F "192.168.11.125" /var/log/fail2ban.log

Output: 

2020-02-04 08:41:12,175 fail2ban.filter         [1788]: INFO    [asterisk-iptables] Found 192.168.11.125
2020-02-04 08:41:13,131 fail2ban.actions        [1788]: NOTICE  [asterisk-iptables] Ban 192.168.11.125
2020-02-04 08:51:13,973 fail2ban.actions        [1788]: NOTICE  [asterisk-iptables] Unban 192.168.11.125
2020-02-04 08:51:28,470 fail2ban.filter         [1788]: INFO    [asterisk-iptables] Found 192.168.11.125
2020-02-04 08:53:28,767 fail2ban.filter         [1788]: INFO    [asterisk-iptables] Found 192.168.11.125
2020-02-04 08:55:29,018 fail2ban.filter         [1788]: INFO    [asterisk-iptables] Found 192.168.11.125
2020-02-04 08:57:29,433 fail2ban.filter         [1788]: INFO    [asterisk-iptables] Found 192.168.11.125
2020-02-04 08:59:28,785 fail2ban.filter         [1788]: INFO    [asterisk-iptables] Found 192.168.11.125
2020-02-04 08:59:29,689 fail2ban.actions        [1788]: NOTICE  [asterisk-iptables] Ban 192.168.11.125

To check Asterisk log by IP: 

grep -F "192.168.11.125" /var/log/asterisk/messages

Output: 

[2020-02-04 08:53:28] NOTICE[2451] chan_sip.c: Registration from '<sip:123456@192.168.11.120>' failed for '192.168.11.125:62219' - Wrong password
[2020-02-04 08:55:28] NOTICE[2451] chan_sip.c: Registration from '<sip:123456@192.168.11.120>' failed for '192.168.11.125:62219' - Wrong password
[2020-02-04 08:57:28] NOTICE[2451] chan_sip.c: Registration from '<sip:123456@192.168.11.120>' failed for '192.168.11.125:62219' - Wrong password
[2020-02-04 08:59:28] NOTICE[2451] chan_sip.c: Registration from '<sip:123456@192.168.11.120>' failed for '192.168.11.125:62219' - Wrong password
Retrieved from "https://wiki.kolmisoft.com/index.php?title=Cannot_Connect_From_Certain_IP&oldid=25218"