[Freeswitch-users] How to check who is attacking my fs server?

[covici at ccs.covici.com]

Me too, but fail2ban kills it nicely.

Avi Marcus <avi at avimarcus.net> wrote:

> CDRs say:
> network_addr 85.195.107.50
> For calls to 107. I guess I'm getting the same attack.
> -Avi
> 
> On Sun, Aug 11, 2013 at 12:03 PM, Jessica Wang <xyangni at gmail.com> wrote:
> 
> > Dear all,
> >
> > My FS server got attacked by someone. Unknown external user 107 is
> > frequently calling strange number on my FS server. From the log, I can not
> > find the real IP of this external user, the IP logged is my server's IP!
> >  How can check who is doing this and block any similar action?
> >  Part of the log is as below.
> >
> > Thanks.
> >
> >
> >
> >  2013-08-11 09:48:12.401286 [NOTICE] switch_channel.c:951 New Channel
> > sofia/external/107@(my fs server ip addr)
> > [c1499822-0262-11e3-af23-2d4b950c464a]
> > 2013-08-11 09:48:12.421101 [INFO] mod_dialplan_xml.c:485 Processing 107
> > <107>->+970598610587 in context public
> >
> >
> > _________________________________________________________________________
> > Professional FreeSWITCH Consulting Services:
> > consulting at freeswitch.org
> > http://www.freeswitchsolutions.com
> >
> > 
> > 
> >
> > Official FreeSWITCH Sites
> > http://www.freeswitch.org
> > http://wiki.freeswitch.org
> > http://www.cluecon.com
> >
> > FreeSWITCH-users mailing list
> > FreeSWITCH-users at lists.freeswitch.org
> > http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> > UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
> > http://www.freeswitch.org
> >
> >
> 
> ----------------------------------------------------
> Alternatives:
> 
> ----------------------------------------------------
> _________________________________________________________________________
> Professional FreeSWITCH Consulting Services:
> consulting at freeswitch.org
> http://www.freeswitchsolutions.com
> 
> 
> 
> 
> Official FreeSWITCH Sites
> http://www.freeswitch.org
> http://wiki.freeswitch.org
> http://www.cluecon.com
> 
> FreeSWITCH-users mailing list
> FreeSWITCH-users at lists.freeswitch.org
> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
> http://www.freeswitch.org

-- 
Your life is like a penny.  You're going to lose it.  The question is:
How do
you spend it?

         John Covici
         covici at ccs.covici.com