fail2ban/fail2ban — pull request #815 by RainerPiper (2014-09-15 15:20:16+00:00)
Title: asterisk version 12 and 13 pjsip logger

the pjsip logger is different to the sip logger :

sample of pjsip log:
[Sep 15 07:33:27] NOTICE[65267] res_pjsip/pjsip_distributor.c: Request
from '"1001" ' failed for '85.25.197.23:5071'
(callid: 1bfa1fcfee1e20dbe9bbbcac5d7bdffc) - No matching endpoint found

and here the RegEx for fail2ban to catch this log:
|NOTICE.* .*: Request from '.*' failed for '(:[0-9]{1,5})?' (.*) -
No matching endpoint found