<div dir="ltr"><div>CDRs say:<br>network_addr 85.195.107.50 <br>For calls to 107. I guess I'm getting the same attack.<div dir="ltr"><span style="font-family:Verdana,Arial,Helvetica,sans-serif;font-size:small">-Avi</span></div>
</div><br><div class="gmail_quote">On Sun, Aug 11, 2013 at 12:03 PM, Jessica Wang <span dir="ltr"><<a href="mailto:xyangni@gmail.com" target="_blank">xyangni@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div dir="ltr">Dear all,<div><br></div><div>My FS server got attacked by someone. Unknown external user 107 is frequently calling strange number on my FS server. From the log, I can not find the real IP of this external user, the IP logged is my server's IP!</div>
<div> How can check who is doing this and block any similar action?</div><div> Part of the log is as below. </div><div><br></div><div>Thanks. </div><div><br></div><div><br><div><br></div><div><div> 2013-08-11 09:48:12.401286 [NOTICE] switch_channel.c:951 New Channel sofia/external/107@(my fs server ip addr) [c1499822-0262-11e3-af23-2d4b950c464a]</div>
<div>2013-08-11 09:48:12.421101 [INFO] mod_dialplan_xml.c:485 Processing 107 <107>-><a href="tel:%2B970598610587" value="+970598610587" target="_blank">+970598610587</a> in context public</div><div><br></div></div>
</div></div>
<br>_________________________________________________________________________<br>
Professional FreeSWITCH Consulting Services:<br>
<a href="mailto:consulting@freeswitch.org">consulting@freeswitch.org</a><br>
<a href="http://www.freeswitchsolutions.com" target="_blank">http://www.freeswitchsolutions.com</a><br>
<br>
FreeSWITCH-powered IP PBX: The CudaTel Communication Server<br>
<a href="http://www.cudatel.com" target="_blank">http://www.cudatel.com</a><br>
<br>
Official FreeSWITCH Sites<br>
<a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br>
<a href="http://wiki.freeswitch.org" target="_blank">http://wiki.freeswitch.org</a><br>
<a href="http://www.cluecon.com" target="_blank">http://www.cluecon.com</a><br>
<br>
FreeSWITCH-users mailing list<br>
<a href="mailto:FreeSWITCH-users@lists.freeswitch.org">FreeSWITCH-users@lists.freeswitch.org</a><br>
<a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br>
UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br>
<a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br>
<br></blockquote></div><br></div>