Всем привет! Банальность какая-то, но не могу понять с чем связано именно такое поведение:
jail.local:
...
bantime = 1209600
findtime = 86400
maxretry = 1
лог asterisk:
[2018-05-02 13:15:54] NOTICE[2682] chan_sip.c: Registration from '"908" <sip:908@192.168.1.35:5060>' failed for '185.22.152.68:5467' - Wrong password
[2018-05-02 13:15:54] NOTICE[2682] chan_sip.c: Registration from '"908" <sip:908@192.168.1.35:5060>' failed for '185.22.152.68:5467' - Wrong password
[2018-05-02 13:15:54] NOTICE[2682] chan_sip.c: Registration from '"908" <sip:908@192.168.1.35:5060>' failed for '185.22.152.68:5467' - Wrong password
лог fail2ban:
2018-05-02 13:08:02,440 fail2ban.actions[2996]: WARNING [asterisk] Unban 185.22.152.68
2018-05-02 13:15:55,001 fail2ban.actions[2996]: WARNING [asterisk] Ban 185.22.152.68
Неужели fail2ban сканирует лог сервиса раз в секунду?
