Uploaded image for project: 'FreePBX'
  1. FreePBX
  2. FREEPBX-17451

Fail2ban is restarting every 15 minutes

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Minor
    • Resolution: Fixed
    • Affects Version/s: 14
    • Fix Version/s: None
    • Component/s: Fail2Ban, Firewall
    • Labels:
      None
    • ToDo:
    • Asterisk Version:
      13.19.1
    • Distro Version:
      12.7.4-1804-2.sng7
    • Distro:
      FreePBX Distro

      Description

      Fail2ban has started restarting every 15 minutes. This did not occur before this version. This is causing IPs to be unbanned every 15 minutes. It appears not to be crashing, but I don't understand why the system is restarting fail2ban every 15 minutes. System firewall version is 13.0.54.3. Reported by multiple individuals here: https://community.freepbx.org/t/multiple-fail2ban-notifications-where-should-i-be-looking/49656/5

       

      Fail2ban log showing occurrences:

      
       2018-05-08 09:30:02,729 fail2ban.server [8351]: INFO Stopping all jails
       2018-05-08 09:30:02,938 fail2ban.jail [8351]: INFO Jail 'apache-tcpwrapper' stopped
       2018-05-08 09:30:03,172 fail2ban.jail [8351]: INFO Jail 'recidive' stopped
       2018-05-08 09:30:03,865 fail2ban.actions.action[8351]: ERROR iptables -D INPUT -p all -j fail2ban-SIP
       iptables -F fail2ban-SIP
       iptables -X fail2ban-SIP returned 100
       2018-05-08 09:30:03,866 fail2ban.jail [8351]: INFO Jail 'pbx-gui' stopped
       2018-05-08 09:30:03,985 fail2ban.jail [8351]: INFO Jail 'apache-badbots' stopped
       2018-05-08 09:30:04,988 fail2ban.jail [8351]: INFO Jail 'ssh-iptables' stopped
       2018-05-08 09:30:05,862 fail2ban.jail [8351]: INFO Jail 'asterisk-iptables' stopped
       2018-05-08 09:30:06,837 fail2ban.jail [8351]: INFO Jail 'vsftpd-iptables' stopped
       2018-05-08 09:30:06,838 fail2ban.server [8351]: INFO Exiting Fail2ban
       2018-05-08 09:30:07,060 fail2ban.server [10189]: INFO Changed logging target to /var/log/fail2ban.log for Fail2ban v0.8.14
       2018-05-08 09:30:07,061 fail2ban.jail [10189]: INFO Creating new jail 'asterisk-iptables'
       2018-05-08 09:30:07,063 fail2ban.jail [10189]: INFO Jail 'asterisk-iptables' uses Gamin
       2018-05-08 09:30:07,134 fail2ban.jail [10189]: INFO Initiated 'gamin' backend
       2018-05-08 09:30:07,138 fail2ban.filter [10189]: INFO Added logfile = /var/log/asterisk/fail2ban
       2018-05-08 09:30:07,140 fail2ban.filter [10189]: INFO Set maxRetry = 8
       2018-05-08 09:30:07,144 fail2ban.filter [10189]: INFO Set findtime = 600
       2018-05-08 09:30:07,145 fail2ban.actions[10189]: INFO Set banTime = 2500000
       2018-05-08 09:30:07,267 fail2ban.jail [10189]: INFO Creating new jail 'pbx-gui'
       2018-05-08 09:30:07,267 fail2ban.jail [10189]: INFO Jail 'pbx-gui' uses Gamin
       2018-05-08 09:30:07,268 fail2ban.jail [10189]: INFO Initiated 'gamin' backend
       2018-05-08 09:30:07,270 fail2ban.filter [10189]: INFO Added logfile = /var/log/asterisk/freepbx_security.log
       2018-05-08 09:30:07,271 fail2ban.filter [10189]: INFO Set maxRetry = 8
       2018-05-08 09:30:07,275 fail2ban.filter [10189]: INFO Set findtime = 600
       2018-05-08 09:30:07,275 fail2ban.actions[10189]: INFO Set banTime = 2500000
       2018-05-08 09:30:07,287 fail2ban.jail [10189]: INFO Creating new jail 'ssh-iptables'
       2018-05-08 09:30:07,287 fail2ban.jail [10189]: INFO Jail 'ssh-iptables' uses Gamin
       2018-05-08 09:30:07,288 fail2ban.jail [10189]: INFO Initiated 'gamin' backend
       2018-05-08 09:30:07,289 fail2ban.filter [10189]: INFO Added logfile = /var/log/secure
       2018-05-08 09:30:07,290 fail2ban.filter [10189]: INFO Set maxRetry = 8
       2018-05-08 09:30:07,292 fail2ban.filter [10189]: INFO Set findtime = 600
       2018-05-08 09:30:07,293 fail2ban.actions[10189]: INFO Set banTime = 2500000
       2018-05-08 09:30:07,369 fail2ban.jail [10189]: INFO Creating new jail 'apache-tcpwrapper'
       2018-05-08 09:30:07,369 fail2ban.jail [10189]: INFO Jail 'apache-tcpwrapper' uses Gamin
       2018-05-08 09:30:07,370 fail2ban.jail [10189]: INFO Initiated 'gamin' backend
       2018-05-08 09:30:07,371 fail2ban.filter [10189]: INFO Added logfile = /var/log/httpd/error_log
       2018-05-08 09:30:07,372 fail2ban.filter [10189]: INFO Set maxRetry = 8
       2018-05-08 09:30:07,374 fail2ban.filter [10189]: INFO Set findtime = 600
       2018-05-08 09:30:07,375 fail2ban.actions[10189]: INFO Set banTime = 2500000
       2018-05-08 09:30:07,434 fail2ban.jail [10189]: INFO Creating new jail 'vsftpd-iptables'
       2018-05-08 09:30:07,435 fail2ban.jail [10189]: INFO Jail 'vsftpd-iptables' uses Gamin
       2018-05-08 09:30:07,435 fail2ban.jail [10189]: INFO Initiated 'gamin' backend
       2018-05-08 09:30:07,437 fail2ban.filter [10189]: INFO Added logfile = /var/log/vsftpd.log
       2018-05-08 09:30:07,439 fail2ban.filter [10189]: INFO Set maxRetry = 8
       2018-05-08 09:30:07,441 fail2ban.filter [10189]: INFO Set findtime = 600
       2018-05-08 09:30:07,442 fail2ban.actions[10189]: INFO Set banTime = 2500000
       2018-05-08 09:30:07,460 fail2ban.jail [10189]: INFO Creating new jail 'apache-badbots'
       2018-05-08 09:30:07,461 fail2ban.jail [10189]: INFO Jail 'apache-badbots' uses Gamin
       2018-05-08 09:30:07,461 fail2ban.jail [10189]: INFO Initiated 'gamin' backend
       2018-05-08 09:30:07,463 fail2ban.filter [10189]: INFO Added logfile = /var/log/httpd/access_log
       2018-05-08 09:30:07,463 fail2ban.filter [10189]: INFO Added logfile = /var/log/httpd/ssl_access_log
       2018-05-08 09:30:07,464 fail2ban.filter [10189]: INFO Set maxRetry = 8
       2018-05-08 09:30:07,466 fail2ban.filter [10189]: INFO Set findtime = 600
       2018-05-08 09:30:07,467 fail2ban.actions[10189]: INFO Set banTime = 2500000
       2018-05-08 09:30:07,491 fail2ban.jail [10189]: INFO Creating new jail 'recidive'
       2018-05-08 09:30:07,491 fail2ban.jail [10189]: INFO Jail 'recidive' uses Gamin
       2018-05-08 09:30:07,492 fail2ban.jail [10189]: INFO Initiated 'gamin' backend
       2018-05-08 09:30:07,493 fail2ban.filter [10189]: INFO Added logfile = /var/log/fail2ban.log-20180508
       2018-05-08 09:30:07,494 fail2ban.filter [10189]: INFO Added logfile = /var/log/fail2ban.log
       2018-05-08 09:30:07,494 fail2ban.filter [10189]: INFO Added logfile = /var/log/fail2ban.log-20180507
       2018-05-08 09:30:07,495 fail2ban.filter [10189]: INFO Added logfile = /var/log/fail2ban.log-20180428
       2018-05-08 09:30:07,496 fail2ban.filter [10189]: INFO Added logfile = /var/log/fail2ban.log-20180429
       2018-05-08 09:30:07,497 fail2ban.filter [10189]: INFO Set maxRetry = 20
       2018-05-08 09:30:07,499 fail2ban.filter [10189]: INFO Set findtime = 86400
       2018-05-08 09:30:07,500 fail2ban.actions[10189]: INFO Set banTime = 604800
       2018-05-08 09:30:07,520 fail2ban.jail [10189]: INFO Jail 'asterisk-iptables' started
       2018-05-08 09:30:07,539 fail2ban.jail [10189]: INFO Jail 'pbx-gui' started
       2018-05-08 09:30:07,563 fail2ban.jail [10189]: INFO Jail 'ssh-iptables' started
       2018-05-08 09:30:07,573 fail2ban.jail [10189]: INFO Jail 'apache-tcpwrapper' started
       2018-05-08 09:30:07,602 fail2ban.jail [10189]: INFO Jail 'vsftpd-iptables' started
       2018-05-08 09:30:07,614 fail2ban.jail [10189]: INFO Jail 'apache-badbots' started
       2018-05-08 09:30:07,623 fail2ban.jail [10189]: INFO Jail 'recidive' started
       2018-05-08 09:30:07,818 fail2ban.server [10189]: INFO Stopping all jails
       2018-05-08 09:30:08,638 fail2ban.jail [10189]: INFO Jail 'apache-tcpwrapper' stopped
       2018-05-08 09:30:09,665 fail2ban.jail [10189]: INFO Jail 'recidive' stopped
       2018-05-08 09:30:10,679 fail2ban.jail [10189]: INFO Jail 'ssh-iptables' stopped
       2018-05-08 09:30:11,681 fail2ban.jail [10189]: INFO Jail 'apache-badbots' stopped
       2018-05-08 09:30:12,602 fail2ban.actions.action[10189]: ERROR iptables -D INPUT -p all -j fail2ban-SIP
       iptables -F fail2ban-SIP
       iptables -X fail2ban-SIP returned 100
       2018-05-08 09:30:12,688 fail2ban.jail [10189]: INFO Jail 'pbx-gui' stopped
       2018-05-08 09:30:13,691 fail2ban.jail [10189]: INFO Jail 'asterisk-iptables' stopped
       2018-05-08 09:30:14,663 fail2ban.jail [10189]: INFO Jail 'vsftpd-iptables' stopped
       2018-05-08 09:30:14,667 fail2ban.server [10189]: INFO Changed logging target to /var/log/fail2ban.log for Fail2ban v0.8.14
       2018-05-08 09:30:14,668 fail2ban.jail [10189]: INFO Creating new jail 'asterisk-iptables'
       2018-05-08 09:30:14,669 fail2ban.jail [10189]: INFO Jail 'asterisk-iptables' uses Gamin
       2018-05-08 09:30:14,670 fail2ban.jail [10189]: INFO Initiated 'gamin' backend
       2018-05-08 09:30:14,673 fail2ban.filter [10189]: INFO Added logfile = /var/log/asterisk/fail2ban
       2018-05-08 09:30:14,674 fail2ban.filter [10189]: INFO Set maxRetry = 8
       2018-05-08 09:30:14,677 fail2ban.filter [10189]: INFO Set findtime = 600
       2018-05-08 09:30:14,678 fail2ban.actions[10189]: INFO Set banTime = 2500000
       2018-05-08 09:30:14,737 fail2ban.jail [10189]: INFO Creating new jail 'pbx-gui'
       2018-05-08 09:30:14,737 fail2ban.jail [10189]: INFO Jail 'pbx-gui' uses Gamin
       2018-05-08 09:30:14,738 fail2ban.jail [10189]: INFO Initiated 'gamin' backend
       2018-05-08 09:30:14,739 fail2ban.filter [10189]: INFO Added logfile = /var/log/asterisk/freepbx_security.log
       2018-05-08 09:30:14,740 fail2ban.filter [10189]: INFO Set maxRetry = 8
       2018-05-08 09:30:14,742 fail2ban.filter [10189]: INFO Set findtime = 600
       2018-05-08 09:30:14,743 fail2ban.actions[10189]: INFO Set banTime = 2500000
       2018-05-08 09:30:14,753 fail2ban.jail [10189]: INFO Creating new jail 'ssh-iptables'
       2018-05-08 09:30:14,754 fail2ban.jail [10189]: INFO Jail 'ssh-iptables' uses Gamin
       2018-05-08 09:30:14,754 fail2ban.jail [10189]: INFO Initiated 'gamin' backend
       2018-05-08 09:30:14,756 fail2ban.filter [10189]: INFO Added logfile = /var/log/secure
       2018-05-08 09:30:14,756 fail2ban.filter [10189]: INFO Set maxRetry = 8
       2018-05-08 09:30:14,758 fail2ban.filter [10189]: INFO Set findtime = 600
       2018-05-08 09:30:14,759 fail2ban.actions[10189]: INFO Set banTime = 2500000
       2018-05-08 09:30:14,794 fail2ban.jail [10189]: INFO Creating new jail 'apache-tcpwrapper'
       2018-05-08 09:30:14,794 fail2ban.jail [10189]: INFO Jail 'apache-tcpwrapper' uses Gamin
       2018-05-08 09:30:14,795 fail2ban.jail [10189]: INFO Initiated 'gamin' backend
       2018-05-08 09:30:14,796 fail2ban.filter [10189]: INFO Added logfile = /var/log/httpd/error_log
       2018-05-08 09:30:14,797 fail2ban.filter [10189]: INFO Set maxRetry = 8
       2018-05-08 09:30:14,799 fail2ban.filter [10189]: INFO Set findtime = 600
       2018-05-08 09:30:14,799 fail2ban.actions[10189]: INFO Set banTime = 2500000
       2018-05-08 09:30:14,830 fail2ban.jail [10189]: INFO Creating new jail 'vsftpd-iptables'
       2018-05-08 09:30:14,830 fail2ban.jail [10189]: INFO Jail 'vsftpd-iptables' uses Gamin
       2018-05-08 09:30:14,831 fail2ban.jail [10189]: INFO Initiated 'gamin' backend
       2018-05-08 09:30:14,832 fail2ban.filter [10189]: INFO Added logfile = /var/log/vsftpd.log
       2018-05-08 09:30:14,833 fail2ban.filter [10189]: INFO Set maxRetry = 8
       2018-05-08 09:30:14,835 fail2ban.filter [10189]: INFO Set findtime = 600
       2018-05-08 09:30:14,835 fail2ban.actions[10189]: INFO Set banTime = 2500000
       2018-05-08 09:30:14,848 fail2ban.jail [10189]: INFO Creating new jail 'apache-badbots'
       2018-05-08 09:30:14,848 fail2ban.jail [10189]: INFO Jail 'apache-badbots' uses Gamin
       2018-05-08 09:30:14,849 fail2ban.jail [10189]: INFO Initiated 'gamin' backend
       2018-05-08 09:30:14,850 fail2ban.filter [10189]: INFO Added logfile = /var/log/httpd/access_log
       2018-05-08 09:30:14,851 fail2ban.filter [10189]: INFO Added logfile = /var/log/httpd/ssl_access_log
       2018-05-08 09:30:14,852 fail2ban.filter [10189]: INFO Set maxRetry = 8
       2018-05-08 09:30:14,854 fail2ban.filter [10189]: INFO Set findtime = 600
       2018-05-08 09:30:14,855 fail2ban.actions[10189]: INFO Set banTime = 2500000
       2018-05-08 09:30:14,872 fail2ban.jail [10189]: INFO Creating new jail 'recidive'
       2018-05-08 09:30:14,873 fail2ban.jail [10189]: INFO Jail 'recidive' uses Gamin
       2018-05-08 09:30:14,873 fail2ban.jail [10189]: INFO Initiated 'gamin' backend
       2018-05-08 09:30:14,874 fail2ban.filter [10189]: INFO Added logfile = /var/log/fail2ban.log-20180508
       2018-05-08 09:30:14,875 fail2ban.filter [10189]: INFO Added logfile = /var/log/fail2ban.log
       2018-05-08 09:30:14,876 fail2ban.filter [10189]: INFO Added logfile = /var/log/fail2ban.log-20180507
       2018-05-08 09:30:14,877 fail2ban.filter [10189]: INFO Added logfile = /var/log/fail2ban.log-20180428
       2018-05-08 09:30:14,879 fail2ban.filter [10189]: INFO Added logfile = /var/log/fail2ban.log-20180429
       2018-05-08 09:30:14,880 fail2ban.filter [10189]: INFO Set maxRetry = 20
       2018-05-08 09:30:14,884 fail2ban.filter [10189]: INFO Set findtime = 86400
       2018-05-08 09:30:14,885 fail2ban.actions[10189]: INFO Set banTime = 604800
       2018-05-08 09:30:14,917 fail2ban.jail [10189]: INFO Jail 'asterisk-iptables' started
       2018-05-08 09:30:14,923 fail2ban.jail [10189]: INFO Jail 'pbx-gui' started
       2018-05-08 09:30:14,945 fail2ban.jail [10189]: INFO Jail 'ssh-iptables' started
       2018-05-08 09:30:14,975 fail2ban.jail [10189]: INFO Jail 'apache-tcpwrapper' started
       2018-05-08 09:30:14,986 fail2ban.jail [10189]: INFO Jail 'vsftpd-iptables' started
       2018-05-08 09:30:15,013 fail2ban.jail [10189]: INFO Jail 'apache-badbots' started
       2018-05-08 09:30:15,046 fail2ban.jail [10189]: INFO Jail 'recidive' started
       2018-05-08 09:45:02,898 fail2ban.server [10189]: INFO Stopping all jails
       2018-05-08 09:45:03,833 fail2ban.jail [10189]: INFO Jail 'apache-tcpwrapper' stopped
       2018-05-08 09:45:04,075 fail2ban.jail [10189]: INFO Jail 'recidive' stopped
       2018-05-08 09:45:04,883 fail2ban.actions.action[10189]: ERROR iptables -D INPUT -p all -j fail2ban-SIP
       iptables -F fail2ban-SIP
       iptables -X fail2ban-SIP returned 100
       2018-05-08 09:45:04,884 fail2ban.jail [10189]: INFO Jail 'pbx-gui' stopped
       2018-05-08 09:45:04,991 fail2ban.jail [10189]: INFO Jail 'apache-badbots' stopped
       2018-05-08 09:45:05,883 fail2ban.jail [10189]: INFO Jail 'ssh-iptables' stopped
       2018-05-08 09:45:06,860 fail2ban.jail [10189]: INFO Jail 'asterisk-iptables' stopped
       2018-05-08 09:45:07,840 fail2ban.jail [10189]: INFO Jail 'vsftpd-iptables' stopped
       2018-05-08 09:45:07,842 fail2ban.server [10189]: INFO Exiting Fail2ban
       2018-05-08 09:45:08,060 fail2ban.server [12547]: INFO Changed logging target to /var/log/fail2ban.log for Fail2ban v0.8.14
       2018-05-08 09:45:08,062 fail2ban.jail [12547]: INFO Creating new jail 'asterisk-iptables'
       2018-05-08 09:45:08,064 fail2ban.jail [12547]: INFO Jail 'asterisk-iptables' uses Gamin
       2018-05-08 09:45:08,134 fail2ban.jail [12547]: INFO Initiated 'gamin' backend
       2018-05-08 09:45:08,137 fail2ban.filter [12547]: INFO Added logfile = /var/log/asterisk/fail2ban
       2018-05-08 09:45:08,138 fail2ban.filter [12547]: INFO Set maxRetry = 8
       2018-05-08 09:45:08,140 fail2ban.filter [12547]: INFO Set findtime = 600
       2018-05-08 09:45:08,141 fail2ban.actions[12547]: INFO Set banTime = 2500000
       2018-05-08 09:45:08,238 fail2ban.jail [12547]: INFO Creating new jail 'pbx-gui'
       2018-05-08 09:45:08,238 fail2ban.jail [12547]: INFO Jail 'pbx-gui' uses Gamin
       2018-05-08 09:45:08,239 fail2ban.jail [12547]: INFO Initiated 'gamin' backend
       2018-05-08 09:45:08,240 fail2ban.filter [12547]: INFO Added logfile = /var/log/asterisk/freepbx_security.log
       2018-05-08 09:45:08,241 fail2ban.filter [12547]: INFO Set maxRetry = 8
       2018-05-08 09:45:08,243 fail2ban.filter [12547]: INFO Set findtime = 600
       2018-05-08 09:45:08,244 fail2ban.actions[12547]: INFO Set banTime = 2500000
       2018-05-08 09:45:08,256 fail2ban.jail [12547]: INFO Creating new jail 'ssh-iptables'
       2018-05-08 09:45:08,256 fail2ban.jail [12547]: INFO Jail 'ssh-iptables' uses Gamin
       2018-05-08 09:45:08,257 fail2ban.jail [12547]: INFO Initiated 'gamin' backend
       2018-05-08 09:45:08,258 fail2ban.filter [12547]: INFO Added logfile = /var/log/secure
       2018-05-08 09:45:08,259 fail2ban.filter [12547]: INFO Set maxRetry = 8
       2018-05-08 09:45:08,261 fail2ban.filter [12547]: INFO Set findtime = 600
       2018-05-08 09:45:08,261 fail2ban.actions[12547]: INFO Set banTime = 2500000
       2018-05-08 09:45:08,320 fail2ban.jail [12547]: INFO Creating new jail 'apache-tcpwrapper'
       2018-05-08 09:45:08,320 fail2ban.jail [12547]: INFO Jail 'apache-tcpwrapper' uses Gamin
       2018-05-08 09:45:08,321 fail2ban.jail [12547]: INFO Initiated 'gamin' backend
       2018-05-08 09:45:08,322 fail2ban.filter [12547]: INFO Added logfile = /var/log/httpd/error_log
       2018-05-08 09:45:08,323 fail2ban.filter [12547]: INFO Set maxRetry = 8
       2018-05-08 09:45:08,325 fail2ban.filter [12547]: INFO Set findtime = 600
       2018-05-08 09:45:08,325 fail2ban.actions[12547]: INFO Set banTime = 2500000
       2018-05-08 09:45:08,370 fail2ban.jail [12547]: INFO Creating new jail 'vsftpd-iptables'
       2018-05-08 09:45:08,370 fail2ban.jail [12547]: INFO Jail 'vsftpd-iptables' uses Gamin
       2018-05-08 09:45:08,371 fail2ban.jail [12547]: INFO Initiated 'gamin' backend
       2018-05-08 09:45:08,372 fail2ban.filter [12547]: INFO Added logfile = /var/log/vsftpd.log
       2018-05-08 09:45:08,373 fail2ban.filter [12547]: INFO Set maxRetry = 8
       2018-05-08 09:45:08,375 fail2ban.filter [12547]: INFO Set findtime = 600
       2018-05-08 09:45:08,375 fail2ban.actions[12547]: INFO Set banTime = 2500000
       2018-05-08 09:45:08,391 fail2ban.jail [12547]: INFO Creating new jail 'apache-badbots'
       2018-05-08 09:45:08,392 fail2ban.jail [12547]: INFO Jail 'apache-badbots' uses Gamin
       2018-05-08 09:45:08,392 fail2ban.jail [12547]: INFO Initiated 'gamin' backend
       2018-05-08 09:45:08,393 fail2ban.filter [12547]: INFO Added logfile = /var/log/httpd/access_log
       2018-05-08 09:45:08,394 fail2ban.filter [12547]: INFO Added logfile = /var/log/httpd/ssl_access_log
       2018-05-08 09:45:08,395 fail2ban.filter [12547]: INFO Set maxRetry = 8
       2018-05-08 09:45:08,398 fail2ban.filter [12547]: INFO Set findtime = 600
       2018-05-08 09:45:08,399 fail2ban.actions[12547]: INFO Set banTime = 2500000
       2018-05-08 09:45:08,421 fail2ban.jail [12547]: INFO Creating new jail 'recidive'
       2018-05-08 09:45:08,422 fail2ban.jail [12547]: INFO Jail 'recidive' uses Gamin
       2018-05-08 09:45:08,422 fail2ban.jail [12547]: INFO Initiated 'gamin' backend
       2018-05-08 09:45:08,423 fail2ban.filter [12547]: INFO Added logfile = /var/log/fail2ban.log-20180508
       2018-05-08 09:45:08,424 fail2ban.filter [12547]: INFO Added logfile = /var/log/fail2ban.log
       2018-05-08 09:45:08,425 fail2ban.filter [12547]: INFO Added logfile = /var/log/fail2ban.log-20180507
       2018-05-08 09:45:08,426 fail2ban.filter [12547]: INFO Added logfile = /var/log/fail2ban.log-20180428
       2018-05-08 09:45:08,426 fail2ban.filter [12547]: INFO Added logfile = /var/log/fail2ban.log-20180429
       2018-05-08 09:45:08,427 fail2ban.filter [12547]: INFO Set maxRetry = 20
       2018-05-08 09:45:08,429 fail2ban.filter [12547]: INFO Set findtime = 86400
       2018-05-08 09:45:08,430 fail2ban.actions[12547]: INFO Set banTime = 604800
       2018-05-08 09:45:08,450 fail2ban.jail [12547]: INFO Jail 'asterisk-iptables' started
       2018-05-08 09:45:08,480 fail2ban.jail [12547]: INFO Jail 'pbx-gui' started
       2018-05-08 09:45:08,500 fail2ban.jail [12547]: INFO Jail 'ssh-iptables' started
       2018-05-08 09:45:08,511 fail2ban.jail [12547]: INFO Jail 'apache-tcpwrapper' started
       2018-05-08 09:45:08,535 fail2ban.jail [12547]: INFO Jail 'vsftpd-iptables' started
       2018-05-08 09:45:08,558 fail2ban.jail [12547]: INFO Jail 'apache-badbots' started
       2018-05-08 09:45:08,575 fail2ban.jail [12547]: INFO Jail 'recidive' started
       2018-05-08 09:45:08,729 fail2ban.server [12547]: INFO Stopping all jails
       2018-05-08 09:45:09,582 fail2ban.jail [12547]: INFO Jail 'apache-tcpwrapper' stopped
       2018-05-08 09:45:10,601 fail2ban.jail [12547]: INFO Jail 'recidive' stopped
       2018-05-08 09:45:11,608 fail2ban.jail [12547]: INFO Jail 'ssh-iptables' stopped
       2018-05-08 09:45:12,630 fail2ban.jail [12547]: INFO Jail 'apache-badbots' stopped
       2018-05-08 09:45:13,517 fail2ban.actions.action[12547]: ERROR iptables -D INPUT -p all -j fail2ban-SIP
       iptables -F fail2ban-SIP
       iptables -X fail2ban-SIP returned 100
       2018-05-08 09:45:13,637 fail2ban.jail [12547]: INFO Jail 'pbx-gui' stopped
       2018-05-08 09:45:14,639 fail2ban.jail [12547]: INFO Jail 'asterisk-iptables' stopped
       2018-05-08 09:45:15,588 fail2ban.jail [12547]: INFO Jail 'vsftpd-iptables' stopped
       2018-05-08 09:45:15,591 fail2ban.server [12547]: INFO Changed logging target to /var/log/fail2ban.log for Fail2ban v0.8.14
       2018-05-08 09:45:15,592 fail2ban.jail [12547]: INFO Creating new jail 'asterisk-iptables'
       2018-05-08 09:45:15,593 fail2ban.jail [12547]: INFO Jail 'asterisk-iptables' uses Gamin
       2018-05-08 09:45:15,594 fail2ban.jail [12547]: INFO Initiated 'gamin' backend
       2018-05-08 09:45:15,596 fail2ban.filter [12547]: INFO Added logfile = /var/log/asterisk/fail2ban
       2018-05-08 09:45:15,597 fail2ban.filter [12547]: INFO Set maxRetry = 8
       2018-05-08 09:45:15,600 fail2ban.filter [12547]: INFO Set findtime = 600
       2018-05-08 09:45:15,600 fail2ban.actions[12547]: INFO Set banTime = 2500000
       2018-05-08 09:45:15,646 fail2ban.jail [12547]: INFO Creating new jail 'pbx-gui'
       2018-05-08 09:45:15,646 fail2ban.jail [12547]: INFO Jail 'pbx-gui' uses Gamin
       2018-05-08 09:45:15,647 fail2ban.jail [12547]: INFO Initiated 'gamin' backend
       2018-05-08 09:45:15,648 fail2ban.filter [12547]: INFO Added logfile = /var/log/asterisk/freepbx_security.log
       2018-05-08 09:45:15,649 fail2ban.filter [12547]: INFO Set maxRetry = 8
       2018-05-08 09:45:15,651 fail2ban.filter [12547]: INFO Set findtime = 600
       2018-05-08 09:45:15,652 fail2ban.actions[12547]: INFO Set banTime = 2500000
       2018-05-08 09:45:15,662 fail2ban.jail [12547]: INFO Creating new jail 'ssh-iptables'
       2018-05-08 09:45:15,663 fail2ban.jail [12547]: INFO Jail 'ssh-iptables' uses Gamin
       2018-05-08 09:45:15,663 fail2ban.jail [12547]: INFO Initiated 'gamin' backend
       2018-05-08 09:45:15,664 fail2ban.filter [12547]: INFO Added logfile = /var/log/secure
       2018-05-08 09:45:15,665 fail2ban.filter [12547]: INFO Set maxRetry = 8
       2018-05-08 09:45:15,667 fail2ban.filter [12547]: INFO Set findtime = 600
       2018-05-08 09:45:15,668 fail2ban.actions[12547]: INFO Set banTime = 2500000
       2018-05-08 09:45:15,711 fail2ban.jail [12547]: INFO Creating new jail 'apache-tcpwrapper'
       2018-05-08 09:45:15,712 fail2ban.jail [12547]: INFO Jail 'apache-tcpwrapper' uses Gamin
       2018-05-08 09:45:15,713 fail2ban.jail [12547]: INFO Initiated 'gamin' backend
       2018-05-08 09:45:15,716 fail2ban.filter [12547]: INFO Added logfile = /var/log/httpd/error_log
       2018-05-08 09:45:15,717 fail2ban.filter [12547]: INFO Set maxRetry = 8
       2018-05-08 09:45:15,720 fail2ban.filter [12547]: INFO Set findtime = 600
       2018-05-08 09:45:15,720 fail2ban.actions[12547]: INFO Set banTime = 2500000
       2018-05-08 09:45:15,751 fail2ban.jail [12547]: INFO Creating new jail 'vsftpd-iptables'
       2018-05-08 09:45:15,752 fail2ban.jail [12547]: INFO Jail 'vsftpd-iptables' uses Gamin
       2018-05-08 09:45:15,752 fail2ban.jail [12547]: INFO Initiated 'gamin' backend
       2018-05-08 09:45:15,754 fail2ban.filter [12547]: INFO Added logfile = /var/log/vsftpd.log
       2018-05-08 09:45:15,754 fail2ban.filter [12547]: INFO Set maxRetry = 8
       2018-05-08 09:45:15,756 fail2ban.filter [12547]: INFO Set findtime = 600
       2018-05-08 09:45:15,757 fail2ban.actions[12547]: INFO Set banTime = 2500000
       2018-05-08 09:45:15,770 fail2ban.jail [12547]: INFO Creating new jail 'apache-badbots'
       2018-05-08 09:45:15,771 fail2ban.jail [12547]: INFO Jail 'apache-badbots' uses Gamin
       2018-05-08 09:45:15,771 fail2ban.jail [12547]: INFO Initiated 'gamin' backend
       2018-05-08 09:45:15,772 fail2ban.filter [12547]: INFO Added logfile = /var/log/httpd/access_log
       2018-05-08 09:45:15,774 fail2ban.filter [12547]: INFO Added logfile = /var/log/httpd/ssl_access_log
       2018-05-08 09:45:15,775 fail2ban.filter [12547]: INFO Set maxRetry = 8
       2018-05-08 09:45:15,780 fail2ban.filter [12547]: INFO Set findtime = 600
       2018-05-08 09:45:15,781 fail2ban.actions[12547]: INFO Set banTime = 2500000
       2018-05-08 09:45:15,797 fail2ban.jail [12547]: INFO Creating new jail 'recidive'
       2018-05-08 09:45:15,798 fail2ban.jail [12547]: INFO Jail 'recidive' uses Gamin
       2018-05-08 09:45:15,799 fail2ban.jail [12547]: INFO Initiated 'gamin' backend
       2018-05-08 09:45:15,800 fail2ban.filter [12547]: INFO Added logfile = /var/log/fail2ban.log-20180508
       2018-05-08 09:45:15,801 fail2ban.filter [12547]: INFO Added logfile = /var/log/fail2ban.log
       2018-05-08 09:45:15,802 fail2ban.filter [12547]: INFO Added logfile = /var/log/fail2ban.log-20180507
       2018-05-08 09:45:15,803 fail2ban.filter [12547]: INFO Added logfile = /var/log/fail2ban.log-20180428
       2018-05-08 09:45:15,804 fail2ban.filter [12547]: INFO Added logfile = /var/log/fail2ban.log-20180429
       2018-05-08 09:45:15,805 fail2ban.filter [12547]: INFO Set maxRetry = 20
       2018-05-08 09:45:15,807 fail2ban.filter [12547]: INFO Set findtime = 86400
       2018-05-08 09:45:15,808 fail2ban.actions[12547]: INFO Set banTime = 604800
       2018-05-08 09:45:15,833 fail2ban.jail [12547]: INFO Jail 'asterisk-iptables' started
       2018-05-08 09:45:15,836 fail2ban.jail [12547]: INFO Jail 'pbx-gui' started
       2018-05-08 09:45:15,852 fail2ban.jail [12547]: INFO Jail 'ssh-iptables' started
       2018-05-08 09:45:15,876 fail2ban.jail [12547]: INFO Jail 'apache-tcpwrapper' started
       2018-05-08 09:45:15,901 fail2ban.jail [12547]: INFO Jail 'vsftpd-iptables' started
       2018-05-08 09:45:15,938 fail2ban.jail [12547]: INFO Jail 'apache-badbots' started
       2018-05-08 09:45:15,975 fail2ban.jail [12547]: INFO Jail 'recidive' started

      Here's what messages says:

      
      May 8 09:00:15 sip systemd: Started Fail2Ban Service.
       May 8 09:15:02 sip systemd: Stopping Fail2Ban Service...
       May 8 09:15:06 sip fail2ban-client: Shutdown successful
       May 8 09:15:06 sip systemd: Starting Fail2Ban Service...
       May 8 09:15:07 sip fail2ban-client: 2018-05-08 09:15:07,042 fail2ban.server [8349]: INFO Starting Fail2ban v0.8.14
       May 8 09:15:07 sip fail2ban-client: 2018-05-08 09:15:07,042 fail2ban.server [8349]: INFO Starting in daemon mode
       May 8 09:15:14 sip systemd: Started Fail2Ban Service.
       May 8 09:30:02 sip systemd: Stopping Fail2Ban Service...
       May 8 09:30:06 sip fail2ban-client: Shutdown successful
       May 8 09:30:06 sip systemd: Starting Fail2Ban Service...
       May 8 09:30:07 sip fail2ban-client: 2018-05-08 09:30:06,999 fail2ban.server [10187]: INFO Starting Fail2ban v0.8.14
       May 8 09:30:07 sip fail2ban-client: 2018-05-08 09:30:07,000 fail2ban.server [10187]: INFO Starting in daemon mode
       May 8 09:30:15 sip systemd: Started Fail2Ban Service.
       May 8 09:45:02 sip systemd: Stopping Fail2Ban Service...
       May 8 09:45:07 sip fail2ban-client: Shutdown successful
       May 8 09:45:07 sip systemd: Starting Fail2Ban Service...
       May 8 09:45:07 sip fail2ban-client: 2018-05-08 09:45:07,994 fail2ban.server [12545]: INFO Starting Fail2ban v0.8.14
       May 8 09:45:07 sip fail2ban-client: 2018-05-08 09:45:07,994 fail2ban.server [12545]: INFO Starting in daemon mode
       May 8 09:45:15 sip systemd: Started Fail2Ban Service.
      

        Gliffy Diagrams

          Attachments

            Activity

              People

              • Assignee:
                xrobau Rob Thomas
                Reporter:
                computertechs M Wise
              • Votes:
                3 Vote for this issue
                Watchers:
                14 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved:

                  NextupJiraPlusStatus

                  Error rendering 'slack.nextup.jira:nextup-jira-plus-status'. Please contact your Jira administrators.