[Freeswitch-users] Strange warning continuously Can't find user

[Srigo Kanapathipillai]

Someone is trying to scan your freeswitch. This is a brut force attack.

If it's coming from the same IP, you can start by blocking it in your acl conf.

⁣Srigo Kana​

On 7 May 2018, 14:54, at 14:54, "Raimundo Pérez Nieves" <raimundo.perez.cuba at gmail.com> wrote:
>Hi, Iam having this issue, 
>
>2018-05-07 07:55:28.846712 [WARNING] sofia_reg.c:2906 Can't find user
>[627 at 68.20.172.152] from 220.230.85.18
>You must define a domain called '68.20.172.152' in your directory and
>add a user with the id="627" attribute
>and you must configure your device to use the proper domain in it's
>authentication credentials.
>2018-05-07 07:55:28.886694 [WARNING] sofia_reg.c:2906 Can't find user
>[627 at 68.20.172.152] from 220.230.85.18
>You must define a domain called '68.20.172.152' in your directory and
>add a user with the id="627" attribute
>and you must configure your device to use the proper domain in it's
>authentication credentials.
>2018-05-07 07:55:28.926681 [WARNING] sofia_reg.c:2906 Can't find user
>[627 at 68.20.172.152] from 220.230.85.18
>You must define a domain called '68.20.172.152' in your directory and
>add a user with the id="627" attribute
>and you must configure your device to use the proper domain in it's
>authentication credentials.
>
>I don’t use this user, so I don’t need to configure it, did anybody
>knows how stop this warning?, it is been very insistent for several
>days, some time change the user id to another that I don't use neither
>of them.
>Thanks
>
>
>
>------------------------------------------------------------------------
>
>_________________________________________________________________________
>Professional FreeSWITCH Consulting Services:
>consulting at freeswitch.org
>http://www.freeswitchsolutions.com
>
>Official FreeSWITCH Sites
>http://www.freeswitch.org
>http://confluence.freeswitch.org
>http://www.cluecon.com
>
>FreeSWITCH-users mailing list
>FreeSWITCH-users at lists.freeswitch.org
>http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
>http://www.freeswitch.org
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeswitch.org/pipermail/freeswitch-users/attachments/20180507/52554313/attachment-0001.html>