[Spce-user] is temporarily banned, send 403

Hohl Matthias matthias.hohl at telematica.at
Mon Apr 23 08:14:26 EDT 2018



today i found this in my kamailio-lb.log:

Apr 23 03:44:56 spce lb[3978]: WARNING: <script>: Subscriber
'1111111111111111' UA='Cisco/SPA112-1.3.5(004p)' from IP='’
is temporarily banned, send 403 –


I am not sure, which service/setting is banning this temporarily and how
long is temporarily?

Cause fail2ban is not configured with this regex and the spce himself for
DOS ban (looking for “is blocked or banned”) and SIP bruteforcing ban
(looking for “consecutive authentication failure”), doesn’t look on this
string or does I miss something?


Thanks for your help


Mit freundlichen Grüßen,

Matthias Hohl



-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.sipwise.com/mailman/private/spce-user_lists.sipwise.com/attachments/20180423/e1d5b9dc/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 5532 bytes
Desc: not available
URL: <http://lists.sipwise.com/mailman/private/spce-user_lists.sipwise.com/attachments/20180423/e1d5b9dc/attachment.p7s>

More information about the Spce-user mailing list