#!/bin/bash
###########################################
## SIPBAN v1.0 2010 (C)                  ##
## DigitalOffensive.com                  ##
## Michael LaSalvia                      ##
## ban failed sip registration attempts  ##
## Requires APF                          ##
###########################################

#Variables
fBAN=/var/tmp/sipban.txt
gIP1=192.168.230
gIP2=174.59.109.188
cat /var/log/asterisk/full | grep "Registration from" | cut -d"'" -f4 >> $fBAN
sort $fBAN |uniq|grep -v "$gIP1" | grep -v "$gIP2" >> $fBAN.tmp
mv $fBAN.tmp $fBAN
for bIP in $(cat $fBAN); do
apf -d $bIP >> /var/tmp/sipban.log
done
> $fBAN