The following is a summary event for exceeded login failures on tenora.modulo.ro: SOURCE ADDRESS: 193.xxx.xxx.28 TARGET SERVICE: tenora.sip.2.bfd FAILED LOGINS: 7 EXECUTED COMMAND: /sbin/route add -host 193.xxx.xxx.28 reject REVERT COMMAND: /sbin/route del -host 193.xxx.xxx.28 reject SOURCE LOGS FROM SERVICE 'tenora.sip.2.bfd' (GMT +0200): [Nov 6 12:45:58] DEBUG[22828] acl.c: ##### Testing 193.xxx.xxx.28 with 0.0.0.0 [Nov 6 12:46:00] DEBUG[24114] acl.c: ##### Testing 193.xxx.xxx.28 with 0.0.0.0 [Nov 6 12:46:00] DEBUG[24114] acl.c: ##### Testing 193.xxx.xxx.28 with 0.0.0.0 [Nov 6 12:46:00] DEBUG[24114] acl.c: ##### Testing 193.xxx.xxx.28 with 0.0.0.0 [Nov 6 12:46:00] DEBUG[24114] acl.c: ##### Testing 193.xxx.xxx.28 with 0.0.0.0 [Nov 6 12:46:00] NOTICE[24114] chan_sip.c: Registration from '"293"' failed for '193.xxx.xxx.28' - Wrong password [Nov 6 12:46:02] DEBUG[24114] acl.c: ##### Testing 193.xxx.xxx.28 with 0.0.0.0 [Nov 6 12:46:02] DEBUG[24114] acl.c: ##### Testing 193.xxx.xxx.28 with 0.0.0.0 [Nov 6 12:46:02] DEBUG[24114] acl.c: ##### Testing 193.xxx.xxx.28 with 0.0.0.0 [Nov 6 12:46:02] DEBUG[24114] acl.c: ##### Testing 193.xxx.xxx.28 with 0.0.0.0 [Nov 6 12:46:02] NOTICE[24114] chan_sip.c: Registration from '"293"' failed for '193.xxx.xxx.28' - Wrong password [Nov 6 12:46:02] DEBUG[24114] acl.c: ##### Testing 193.xxx.xxx.28 with 0.0.0.0 [Nov 6 12:46:02] DEBUG[24114] acl.c: ##### Testing 193.xxx.xxx.28 with 0.0.0.0 [Nov 6 12:46:02] DEBUG[24114] acl.c: ##### Testing 193.xxx.xxx.28 with 0.0.0.0 [Nov 6 12:46:02] DEBUG[24114] acl.c: ##### Testing 193.xxx.xxx.28 with 0.0.0.0 [Nov 6 12:46:02] NOTICE[24114] chan_sip.c: Registration from '"293"' failed for '193.xxx.xxx.28' - Wrong password [Nov 6 12:46:03] DEBUG[24114] acl.c: ##### Testing 193.xxx.xxx.28 with 0.0.0.0 [Nov 6 12:46:03] DEBUG[24114] acl.c: ##### Testing 193.xxx.xxx.28 with 0.0.0.0 [Nov 6 12:46:03] DEBUG[24114] acl.c: ##### Testing 193.xxx.xxx.28 with 0.0.0.0 [Nov 6 12:46:03] DEBUG[24114] acl.c: ##### Testing 193.xxx.xxx.28 with 0.0.0.0 [Nov 6 12:46:03] NOTICE[24114] chan_sip.c: Registration from '"293"' failed for '193.xxx.xxx.28' - Wrong password [Nov 6 12:46:24] DEBUG[24114] acl.c: ##### Testing 193.xxx.xxx.28 with 0.0.0.0 [Nov 6 12:46:24] DEBUG[24114] acl.c: ##### Testing 193.xxx.xxx.28 with 0.0.0.0 [Nov 6 12:46:24] DEBUG[24114] acl.c: ##### Testing 193.xxx.xxx.28 with 0.0.0.0 [Nov 6 12:46:24] DEBUG[24114] acl.c: ##### Testing 193.xxx.xxx.28 with 0.0.0.0 [Nov 6 12:46:24] NOTICE[24114] chan_sip.c: Registration from '"293"' failed for '193.xxx.xxx.28' - Wrong password [Nov 6 12:46:27] DEBUG[22824] acl.c: ##### Testing 193.xxx.xxx.28 with 0.0.0.0 [Nov 6 12:46:27] DEBUG[22824] acl.c: ##### Testing 193.xxx.xxx.28 with 0.0.0.0 [Nov 6 12:46:32] DEBUG[22826] acl.c: ##### Testing 193.xxx.xxx.28 with 0.0.0.0 [Nov 6 12:46:32] DEBUG[22826] acl.c: ##### Testing 193.xxx.xxx.28 with 0.0.0.0 [Nov 6 12:46:32] DEBUG[22825] acl.c: ##### Testing 193.xxx.xxx.28 with 0.0.0.0 [Nov 6 12:46:32] DEBUG[22825] acl.c: ##### Testing 193.xxx.xxx.28 with 0.0.0.0 [Nov 6 12:46:36] DEBUG[24114] acl.c: ##### Testing 193.xxx.xxx.28 with 0.0.0.0 [Nov 6 12:46:36] DEBUG[24114] acl.c: ##### Testing 193.xxx.xxx.28 with 0.0.0.0 [Nov 6 12:46:36] DEBUG[24114] acl.c: ##### Testing 193.xxx.xxx.28 with 0.0.0.0 [Nov 6 12:46:36] DEBUG[24114] acl.c: ##### Testing 193.xxx.xxx.28 with 0.0.0.0 [Nov 6 12:46:36] NOTICE[24114] chan_sip.c: Registration from '"293"' failed for '193.xxx.xxx.28' - Wrong password [Nov 6 12:46:42] DEBUG[24114] acl.c: ##### Testing 193.xxx.xxx.28 with 0.0.0.0 [Nov 6 12:46:42] DEBUG[24114] acl.c: ##### Testing 193.xxx.xxx.28 with 0.0.0.0 [Nov 6 12:46:42] DEBUG[24114] acl.c: ##### Testing 193.xxx.xxx.28 with 0.0.0.0 [Nov 6 12:46:42] DEBUG[24114] acl.c: ##### Testing 193.xxx.xxx.28 with 0.0.0.0 [Nov 6 12:46:42] NOTICE[24114] chan_sip.c: Registration from '"293"' failed for '193.xxx.xxx.28' - Wrong password [Nov 6 12:47:17] DEBUG[24114] acl.c: ##### Testing 193.xxx.xxx.28 with 0.0.0.0 [Nov 6 12:47:17] DEBUG[24114] acl.c: ##### Testing 193.xxx.xxx.28 with 0.0.0.0 [Nov 6 12:47:17] DEBUG[24114] acl.c: ##### Testing 193.xxx.xxx.28 with 0.0.0.0 [Nov 6 12:47:17] DEBUG[24114] acl.c: ##### Testing 193.xxx.xxx.28 with 0.0.0.0 [Nov 6 12:47:33] DEBUG[22824] acl.c: ##### Testing 193.xxx.xxx.28 with 0.0.0.0 [Nov 6 12:47:33] DEBUG[22824] acl.c: ##### Testing 193.xxx.xxx.28 with 0.0.0.0 [Nov 6 12:47:33] DEBUG[22829] acl.c: ##### Testing 193.xxx.xxx.28 with 0.0.0.0 [Nov 6 12:47:33] DEBUG[22829] acl.c: ##### Testing 193.xxx.xxx.28 with 0.0.0.0 ----------------------------------------------- BFD (Brute Force Detection) 1.3 [bfd@r-fx.org]