<div dir="ltr">Hi <span style="font-size:12.8000001907349px">Nikolay Zaytsev ,</span><div><span style="font-size:12.8000001907349px">Very 1st thing that i will suggest is that please change the default sip ports to some other ports like 7000,5090 etc.</span></div><div><span style="font-size:12.8000001907349px">Plus use the ipset and iptables to block the ip&#39;s.</span></div><div><span style="font-size:12.8000001907349px">This will surely help you,</span></div><div><span style="font-size:12.8000001907349px"><a href="https://github.com/vervelink/badguys/blob/master/ipset-blockips.sh">https://github.com/vervelink/badguys/blob/master/ipset-blockips.sh</a></span><br></div><div><span style="font-size:12.8000001907349px"><br></span></div><div><span style="font-size:12.8000001907349px">list of common attacking IP&#39;s</span></div><div><span style="font-size:12.8000001907349px"><br></span></div><div><span style="font-size:12.8000001907349px">Regards</span></div><div><span style="font-size:12.8000001907349px">Bilal Abbasi</span></div></div><div class="gmail_extra"><br><div class="gmail_quote">On Sat, Aug 15, 2015 at 2:18 PM, Nikolay Zaytsev <span dir="ltr">&lt;<a href="mailto:nzaytsevc@gmail.com" target="_blank">nzaytsevc@gmail.com</a>&gt;</span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">Hi,all)<div>I have the freeswitch on public ip with set up fail2ban.</div><div>However, there is an external invites which proceed to dialplan&#39;s context public.</div><div>How can I defend my freeswitch from such attaks?</div><div>The log of such attack is in the attachment.</div><div>Bets Regards,</div><div>Nikolay Zaytsev </div></div>
<br>_________________________________________________________________________<br>
Professional FreeSWITCH Consulting Services:<br>
<a href="mailto:consulting@freeswitch.org">consulting@freeswitch.org</a><br>
<a href="http://www.freeswitchsolutions.com" rel="noreferrer" target="_blank">http://www.freeswitchsolutions.com</a><br>
<br>
Official FreeSWITCH Sites<br>
<a href="http://www.freeswitch.org" rel="noreferrer" target="_blank">http://www.freeswitch.org</a><br>
<a href="http://confluence.freeswitch.org" rel="noreferrer" target="_blank">http://confluence.freeswitch.org</a><br>
<a href="http://www.cluecon.com" rel="noreferrer" target="_blank">http://www.cluecon.com</a><br>
<br>
FreeSWITCH-users mailing list<br>
<a href="mailto:FreeSWITCH-users@lists.freeswitch.org">FreeSWITCH-users@lists.freeswitch.org</a><br>
<a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" rel="noreferrer" target="_blank">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br>
UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" rel="noreferrer" target="_blank">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br>
<a href="http://www.freeswitch.org" rel="noreferrer" target="_blank">http://www.freeswitch.org</a><br></blockquote></div><br></div>