Cannot Connect From Certain IP

From Kolmisoft Wiki
Jump to navigationJump to search

Check if IP blocked or not at this moment by iptables:

iptables -L -n | grep 192.168.11.125

Output:

 REJECT     all  --  192.168.11.125        0.0.0.0/0            reject-with icmp-port-unreachable

Check Fail2ban log for blocked IP:

grep -F "192.168.11.125" /var/log/fail2ban.log

Output:

2020-02-04 08:41:12,175 fail2ban.filter         [1788]: INFO    [asterisk-iptables] Found 192.168.11.125
2020-02-04 08:41:13,131 fail2ban.actions        [1788]: NOTICE  [asterisk-iptables] Ban 192.168.11.125
2020-02-04 08:51:13,973 fail2ban.actions        [1788]: NOTICE  [asterisk-iptables] Unban 192.168.11.125
2020-02-04 08:51:28,470 fail2ban.filter         [1788]: INFO    [asterisk-iptables] Found 192.168.11.125
2020-02-04 08:53:28,767 fail2ban.filter         [1788]: INFO    [asterisk-iptables] Found 192.168.11.125
2020-02-04 08:55:29,018 fail2ban.filter         [1788]: INFO    [asterisk-iptables] Found 192.168.11.125
2020-02-04 08:57:29,433 fail2ban.filter         [1788]: INFO    [asterisk-iptables] Found 192.168.11.125
2020-02-04 08:59:28,785 fail2ban.filter         [1788]: INFO    [asterisk-iptables] Found 192.168.11.125
2020-02-04 08:59:29,689 fail2ban.actions        [1788]: NOTICE  [asterisk-iptables] Ban 192.168.11.125

To check Asterisk log by IP:

grep -F "192.168.11.125" /var/log/asterisk/messages

Output:

[2020-02-04 08:53:28] NOTICE[2451] chan_sip.c: Registration from '<sip:123456@192.168.11.120>' failed for '192.168.11.125:62219' - Wrong password
[2020-02-04 08:55:28] NOTICE[2451] chan_sip.c: Registration from '<sip:123456@192.168.11.120>' failed for '192.168.11.125:62219' - Wrong password
[2020-02-04 08:57:28] NOTICE[2451] chan_sip.c: Registration from '<sip:123456@192.168.11.120>' failed for '192.168.11.125:62219' - Wrong password
[2020-02-04 08:59:28] NOTICE[2451] chan_sip.c: Registration from '<sip:123456@192.168.11.120>' failed for '192.168.11.125:62219' - Wrong password