[Spce-user] is temporarily banned, send 403

[Hohl Matthias]

Hello,

 

today i found this in my kamailio-lb.log:



Apr 23 03:44:56 spce lb[3978]: WARNING: <script>: Subscriber
'1111111111111111' UA='Cisco/SPA112-1.3.5(004p)' from IP='111.111.111.111’
is temporarily banned, send 403 –

 

I am not sure, which service/setting is banning this temporarily and how
long is temporarily?

Cause fail2ban is not configured with this regex and the spce himself for
DOS ban (looking for “is blocked or banned”) and SIP bruteforcing ban
(looking for “consecutive authentication failure”), doesn’t look on this
string or does I miss something?

 

Thanks for your help

 

Mit freundlichen Grüßen,

Matthias Hohl

 

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.sipwise.com/mailman/private/spce-user_lists.sipwise.com/attachments/20180423/e1d5b9dc/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 5532 bytes
Desc: not available
URL: <http://lists.sipwise.com/mailman/private/spce-user_lists.sipwise.com/attachments/20180423/e1d5b9dc/attachment.p7s>