[Freeswitch-users] ERROR 404 BAD HEADER

Sean Devoy sdevoy at bizfocused.com
Fri Apr 26 18:41:32 MSD 2013


OMG, let me be the first to point out that "SCUM can read too" has nothing
to do with the Middle East, only the hackers hitting my system.  If anyone
interpreted that as a bash on the Middle East I apologize, none was
intended.

-----Original Message-----
From: freeswitch-users-bounces at lists.freeswitch.org
[mailto:freeswitch-users-bounces at lists.freeswitch.org] On Behalf Of Sean
Devoy
Sent: Friday, April 26, 2013 10:28 AM
To: 'FreeSWITCH Users Help'
Subject: Re: [Freeswitch-users] ERROR 404 BAD HEADER

What kind of proof do you want?  I am sure I have some freeswitch logs
showing authentication errors.  FAILTOBAN was well worth learning about and
installing.  I even had an earlier post to discuss this.  Several people
commented about the need to "sanitize" your posts and the name of the
program frequently used to attempt the hack ins.

Within 24 hours of pasting to your pastebin, I get 3 to 10  hackers trying
to login to my switch with common usernames and passwords as well as
generated ones.  Granted that is not a true "port scan", but it conveys the
seriousness of the problem.   I now have Class A 3 ip domains in the middle
east complete blocked in my iptables because I have no customers there.

I am not saying your pastebin is at fault, only that SCUM can read too and
this is a good source of targets to attack.

-----Original Message-----
From: freeswitch-users-bounces at lists.freeswitch.org
[mailto:freeswitch-users-bounces at lists.freeswitch.org] On Behalf Of Brian
West
Sent: Thursday, April 25, 2013 10:15 PM
To: FreeSWITCH Users Help
Subject: Re: [Freeswitch-users] ERROR 404 BAD HEADER

Is this our pastebin you're speaking of? If so can you provide me some proof
of this?

On Apr 25, 2013, at 8:30 PM, Sean Devoy <sdevoy at bizfocused.com> wrote:

> I will see if I can contribute.  First, if you have not yet, change 
> the
default passwords.  I get port scans everytime I post addresses in pastebin.




_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting at freeswitch.org
http://www.freeswitchsolutions.com




Official FreeSWITCH Sites
http://www.freeswitch.org
http://wiki.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users at lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org





Join us at ClueCon 2011 Aug 9-11, 2011
More information about the FreeSWITCH-users mailing list