You need to enable fail2ban, whether you like it or not. It will only block ip addresses from which failed register attempts are received. It won't block successful registers.<br><br>On the other hand, if you are seeing calls from registered users and those users claim they didn't make those calls, you must change all passwords.<br><br>As Jay points out, you should authorize on all profiles either with digest or with acl.<br><div class="gmail_quote"><div dir="ltr">On Mon, Feb 20, 2017 at 12:10 PM jay binks <<a href="mailto:jaybinks@gmail.com">jaybinks@gmail.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr" class="gmail_msg">your username / passwords are probably compromised, if not your box entirely.<div class="gmail_msg"><br class="gmail_msg"></div><div class="gmail_msg"><ul class="gmail_msg"><li class="gmail_msg">Change ALL your passwords and enforce strong password policies.<br class="gmail_msg"></li><li class="gmail_msg">Make sure all your SIP Profiles require auth, or have strong ACL's<br class="gmail_msg"></li><li class="gmail_msg">Implement fail2ban <br class="gmail_msg"></li><li class="gmail_msg">BLOCK THE KNOWN ATTACKER IP with Iptables.</li></ul><div class="gmail_msg">Im sorry to sound like an ass, but if you havnt done one of the above or dont think you can do them all then you probably need to pay someone who knows what they are doing.</div></div><div class="gmail_msg"><br class="gmail_msg"></div><div class="gmail_msg"><br class="gmail_msg"></div><div class="gmail_msg"><br class="gmail_msg"></div><div class="gmail_msg"><br class="gmail_msg"></div><div class="gmail_msg"><br class="gmail_msg"></div></div><div class="gmail_extra gmail_msg"></div><div class="gmail_extra gmail_msg"><br class="gmail_msg"><div class="gmail_quote gmail_msg">On 20 February 2017 at 20:38, Shisheer Teli <span dir="ltr" class="gmail_msg"><<a href="mailto:telishisheer@gmail.com" class="gmail_msg" target="_blank">telishisheer@gmail.com</a>></span> wrote:<br class="gmail_msg"><blockquote class="gmail_quote gmail_msg" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr" class="gmail_msg">all my users are connected from office outside. so I can't block any IP.<div class="gmail_msg"><br class="gmail_msg"></div><div class="gmail_msg">is there any configuration in FreeSWITCH to block them.. ? </div></div><div class="m_6327466236363548890HOEnZb gmail_msg"><div class="m_6327466236363548890h5 gmail_msg"><div class="gmail_extra gmail_msg"><br class="gmail_msg"><div class="gmail_quote gmail_msg">On Mon, Feb 20, 2017 at 4:02 PM, Борисов, Дмитрий / Dmitriy Borisov <span dir="ltr" class="gmail_msg"><<a href="mailto:bordmi@rarus.ru" class="gmail_msg" target="_blank">bordmi@rarus.ru</a>></span> wrote:<br class="gmail_msg"><blockquote class="gmail_quote gmail_msg" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr" class="gmail_msg"><div class="gmail_msg">Hi!<br class="gmail_msg"><br class="gmail_msg"></div>This call is not self generated. It`s was generated by 23.239.85.20 (in most cases). Do you have properli configurated firewall?<br class="gmail_msg"></div><br class="gmail_msg"><div class="gmail_quote gmail_msg"><div dir="ltr" class="gmail_msg">пн, 20 февр. 2017 г. в 13:29, Shisheer Teli <<a href="mailto:telishisheer@gmail.com" class="gmail_msg" target="_blank">telishisheer@gmail.com</a>>:<br class="gmail_msg"></div><blockquote class="gmail_quote gmail_msg" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div class="gmail_msg"><div class="m_6327466236363548890m_-6580285061418226846h5 gmail_msg"><div dir="ltr" class="m_6327466236363548890m_-6580285061418226846m_5780196258063120046gmail_msg gmail_msg">Dear Team,<div class="m_6327466236363548890m_-6580285061418226846m_5780196258063120046gmail_msg gmail_msg"><br class="m_6327466236363548890m_-6580285061418226846m_5780196258063120046gmail_msg gmail_msg"></div><div class="m_6327466236363548890m_-6580285061418226846m_5780196258063120046gmail_msg gmail_msg">from last few days my FreeSWITCH server generating some logs itself. </div><div class="m_6327466236363548890m_-6580285061418226846m_5780196258063120046gmail_msg gmail_msg"><br class="m_6327466236363548890m_-6580285061418226846m_5780196258063120046gmail_msg gmail_msg"></div><div class="m_6327466236363548890m_-6580285061418226846m_5780196258063120046gmail_msg gmail_msg">I don't know how to stop this .. please help .. it's urgent.</div><div class="m_6327466236363548890m_-6580285061418226846m_5780196258063120046gmail_msg gmail_msg"><br class="m_6327466236363548890m_-6580285061418226846m_5780196258063120046gmail_msg gmail_msg"></div><div class="m_6327466236363548890m_-6580285061418226846m_5780196258063120046gmail_msg gmail_msg">Please see the attached logs.</div><div class="m_6327466236363548890m_-6580285061418226846m_5780196258063120046gmail_msg gmail_msg"><br clear="all" class="m_6327466236363548890m_-6580285061418226846m_5780196258063120046gmail_msg gmail_msg"><div class="m_6327466236363548890m_-6580285061418226846m_5780196258063120046gmail_msg gmail_msg"><br class="m_6327466236363548890m_-6580285061418226846m_5780196258063120046gmail_msg gmail_msg"></div>-- <br class="m_6327466236363548890m_-6580285061418226846m_5780196258063120046gmail_msg gmail_msg"><div class="m_6327466236363548890m_-6580285061418226846m_5780196258063120046m_-7608276620027101095gmail_signature m_6327466236363548890m_-6580285061418226846m_5780196258063120046gmail_msg gmail_msg" data-smartmail="gmail_signature"><div dir="ltr" class="m_6327466236363548890m_-6580285061418226846m_5780196258063120046gmail_msg gmail_msg"><div class="m_6327466236363548890m_-6580285061418226846m_5780196258063120046gmail_msg gmail_msg"><div dir="ltr" class="m_6327466236363548890m_-6580285061418226846m_5780196258063120046gmail_msg gmail_msg"><div class="m_6327466236363548890m_-6580285061418226846m_5780196258063120046gmail_msg gmail_msg"><font face="arial, helvetica, sans-serif" class="m_6327466236363548890m_-6580285061418226846m_5780196258063120046gmail_msg gmail_msg"><span style="color:rgb(34,34,34);background-color:rgb(255,255,255)" class="m_6327466236363548890m_-6580285061418226846m_5780196258063120046gmail_msg gmail_msg"><div class="m_6327466236363548890m_-6580285061418226846m_5780196258063120046gmail_msg gmail_msg">Regards,</div>Shisheer T</span><br style="color:rgb(34,34,34);background-color:rgb(255,255,255)" class="m_6327466236363548890m_-6580285061418226846m_5780196258063120046gmail_msg gmail_msg"></font><table cellpadding="0" cellspacing="0" border="0" style="color:rgb(0,0,0);font-family:Calibri,sans-serif;font-size:14px;letter-spacing:-0.1px;background:transparent;margin:0px;padding:0px;border-collapse:collapse;border-spacing:0px;width:auto;border:none" class="m_6327466236363548890m_-6580285061418226846m_5780196258063120046gmail_msg gmail_msg"><tbody style="margin:0px;padding:0px;letter-spacing:-0.1px;width:auto;border:none;background:transparent" class="m_6327466236363548890m_-6580285061418226846m_5780196258063120046gmail_msg gmail_msg"><tr style="margin:0px;padding:0px;letter-spacing:-0.1px;width:auto;border:none;background:transparent" class="m_6327466236363548890m_-6580285061418226846m_5780196258063120046gmail_msg gmail_msg"><td style="font-family:Calibri,sans-serif;padding:0px;letter-spacing:-0.1px;width:auto;border:none;background:transparent" class="m_6327466236363548890m_-6580285061418226846m_5780196258063120046gmail_msg gmail_msg"><i class="m_6327466236363548890m_-6580285061418226846m_5780196258063120046gmail_msg gmail_msg"><b class="m_6327466236363548890m_-6580285061418226846m_5780196258063120046gmail_msg gmail_msg">Save paper, save trees.... Please do not print this e-mail unless it is absolutely <span style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:small;letter-spacing:normal" class="m_6327466236363548890m_-6580285061418226846m_5780196258063120046gmail_msg gmail_msg">necessary.<br class="m_6327466236363548890m_-6580285061418226846m_5780196258063120046gmail_msg gmail_msg"></span></b></i><br class="m_6327466236363548890m_-6580285061418226846m_5780196258063120046gmail_msg gmail_msg"></td></tr></tbody></table></div></div></div></div></div>
</div></div></div></div>
_________________________________________________________________________<br class="m_6327466236363548890m_-6580285061418226846m_5780196258063120046gmail_msg gmail_msg">
Professional FreeSWITCH Consulting Services:<br class="m_6327466236363548890m_-6580285061418226846m_5780196258063120046gmail_msg gmail_msg">
<a href="mailto:consulting@freeswitch.org" class="m_6327466236363548890m_-6580285061418226846m_5780196258063120046gmail_msg gmail_msg" target="_blank">consulting@freeswitch.org</a><br class="m_6327466236363548890m_-6580285061418226846m_5780196258063120046gmail_msg gmail_msg">
<a href="http://www.freeswitchsolutions.com" rel="noreferrer" class="m_6327466236363548890m_-6580285061418226846m_5780196258063120046gmail_msg gmail_msg" target="_blank">http://www.freeswitchsolutions.com</a><br class="m_6327466236363548890m_-6580285061418226846m_5780196258063120046gmail_msg gmail_msg">
<br class="m_6327466236363548890m_-6580285061418226846m_5780196258063120046gmail_msg gmail_msg">
Official FreeSWITCH Sites<br class="m_6327466236363548890m_-6580285061418226846m_5780196258063120046gmail_msg gmail_msg">
<a href="http://www.freeswitch.org" rel="noreferrer" class="m_6327466236363548890m_-6580285061418226846m_5780196258063120046gmail_msg gmail_msg" target="_blank">http://www.freeswitch.org</a><br class="m_6327466236363548890m_-6580285061418226846m_5780196258063120046gmail_msg gmail_msg">
<a href="http://confluence.freeswitch.org" rel="noreferrer" class="m_6327466236363548890m_-6580285061418226846m_5780196258063120046gmail_msg gmail_msg" target="_blank">http://confluence.freeswitch.org</a><br class="m_6327466236363548890m_-6580285061418226846m_5780196258063120046gmail_msg gmail_msg">
<a href="http://www.cluecon.com" rel="noreferrer" class="m_6327466236363548890m_-6580285061418226846m_5780196258063120046gmail_msg gmail_msg" target="_blank">http://www.cluecon.com</a><br class="m_6327466236363548890m_-6580285061418226846m_5780196258063120046gmail_msg gmail_msg">
<br class="m_6327466236363548890m_-6580285061418226846m_5780196258063120046gmail_msg gmail_msg">
FreeSWITCH-users mailing list<br class="m_6327466236363548890m_-6580285061418226846m_5780196258063120046gmail_msg gmail_msg">
<a href="mailto:FreeSWITCH-users@lists.freeswitch.org" class="m_6327466236363548890m_-6580285061418226846m_5780196258063120046gmail_msg gmail_msg" target="_blank">FreeSWITCH-users@lists.freeswitch.org</a><br class="m_6327466236363548890m_-6580285061418226846m_5780196258063120046gmail_msg gmail_msg">
<a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" rel="noreferrer" class="m_6327466236363548890m_-6580285061418226846m_5780196258063120046gmail_msg gmail_msg" target="_blank">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br class="m_6327466236363548890m_-6580285061418226846m_5780196258063120046gmail_msg gmail_msg">
UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" rel="noreferrer" class="m_6327466236363548890m_-6580285061418226846m_5780196258063120046gmail_msg gmail_msg" target="_blank">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br class="m_6327466236363548890m_-6580285061418226846m_5780196258063120046gmail_msg gmail_msg">
<a href="http://www.freeswitch.org" rel="noreferrer" class="m_6327466236363548890m_-6580285061418226846m_5780196258063120046gmail_msg gmail_msg" target="_blank">http://www.freeswitch.org</a></blockquote></div><span class="m_6327466236363548890m_-6580285061418226846HOEnZb gmail_msg"><font color="#888888" class="gmail_msg"><div dir="ltr" class="gmail_msg">-- <br class="gmail_msg"></div><div data-smartmail="gmail_signature" class="gmail_msg"><div dir="ltr" class="gmail_msg"><div style="font-family:"helvetica neue",helvetica,arial,sans-serif;line-height:19.5px" class="gmail_msg">--</div><div style="font-family:"helvetica neue",helvetica,arial,sans-serif;line-height:19.5px" class="gmail_msg">С уважением,</div><div style="font-family:"helvetica neue",helvetica,arial,sans-serif;line-height:19.5px" class="gmail_msg">Борисов Дмитрий</div><div style="font-family:"helvetica neue",helvetica,arial,sans-serif;line-height:19.5px" class="gmail_msg">Отдел облачных технологий 1С-Рарус</div><div style="font-family:"helvetica neue",helvetica,arial,sans-serif;line-height:19.5px" class="gmail_msg">Тел. <a href="tel:+7%20495%20231-20-02" value="+74952312002" class="gmail_msg" target="_blank">+7 (495) 231-20-02</a> доб.: 15-94</div><div style="font-family:"helvetica neue",helvetica,arial,sans-serif;line-height:19.5px" class="gmail_msg">--</div><div style="font-family:"helvetica neue",helvetica,arial,sans-serif;line-height:19.5px" class="gmail_msg">with best regards,</div><div style="font-family:"helvetica neue",helvetica,arial,sans-serif;line-height:19.5px" class="gmail_msg">Dmitriy Borisov</div><div style="font-family:"helvetica neue",helvetica,arial,sans-serif;line-height:19.5px" class="gmail_msg">1C-Rarus Cloud Services</div><div style="font-family:"helvetica neue",helvetica,arial,sans-serif;line-height:19.5px" class="gmail_msg">tel.: <span style="font-size:12.8px" class="gmail_msg"><a href="tel:+7%20495%20231-20-02" value="+74952312002" class="gmail_msg" target="_blank">+7 (495) 231-20-02</a> add.: 15-94</span></div></div></div>
</font></span><br class="gmail_msg">_________________________________________________________________________<br class="gmail_msg">
Professional FreeSWITCH Consulting Services:<br class="gmail_msg">
<a href="mailto:consulting@freeswitch.org" class="gmail_msg" target="_blank">consulting@freeswitch.org</a><br class="gmail_msg">
<a href="http://www.freeswitchsolutions.com" rel="noreferrer" class="gmail_msg" target="_blank">http://www.freeswitchsolutions.com</a><br class="gmail_msg">
<br class="gmail_msg">
Official FreeSWITCH Sites<br class="gmail_msg">
<a href="http://www.freeswitch.org" rel="noreferrer" class="gmail_msg" target="_blank">http://www.freeswitch.org</a><br class="gmail_msg">
<a href="http://confluence.freeswitch.org" rel="noreferrer" class="gmail_msg" target="_blank">http://confluence.freeswitch.org</a><br class="gmail_msg">
<a href="http://www.cluecon.com" rel="noreferrer" class="gmail_msg" target="_blank">http://www.cluecon.com</a><br class="gmail_msg">
<br class="gmail_msg">
FreeSWITCH-users mailing list<br class="gmail_msg">
<a href="mailto:FreeSWITCH-users@lists.freeswitch.org" class="gmail_msg" target="_blank">FreeSWITCH-users@lists.freeswitch.org</a><br class="gmail_msg">
<a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" rel="noreferrer" class="gmail_msg" target="_blank">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br class="gmail_msg">
UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" rel="noreferrer" class="gmail_msg" target="_blank">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br class="gmail_msg">
<a href="http://www.freeswitch.org" rel="noreferrer" class="gmail_msg" target="_blank">http://www.freeswitch.org</a><br class="gmail_msg"></blockquote></div><br class="gmail_msg"><br clear="all" class="gmail_msg"><div class="gmail_msg"><br class="gmail_msg"></div>-- <br class="gmail_msg"><div class="m_6327466236363548890m_-6580285061418226846gmail_signature gmail_msg" data-smartmail="gmail_signature"><div dir="ltr" class="gmail_msg"><div class="gmail_msg"><div dir="ltr" class="gmail_msg"><div class="gmail_msg"><font face="arial, helvetica, sans-serif" class="gmail_msg"><span style="color:rgb(34,34,34);background-color:rgb(255,255,255)" class="gmail_msg"><div class="gmail_msg">Regards,</div>Shisheer T</span><br style="color:rgb(34,34,34);background-color:rgb(255,255,255)" class="gmail_msg"></font><table cellpadding="0" cellspacing="0" border="0" style="color:rgb(0,0,0);font-family:Calibri,sans-serif;font-size:14px;letter-spacing:-0.1px;background:transparent;margin:0px;padding:0px;border-collapse:collapse;border-spacing:0px;width:auto;border:none" class="gmail_msg"><tbody style="margin:0px;padding:0px;letter-spacing:-0.1px;width:auto;border:none;background:transparent" class="gmail_msg"><tr style="margin:0px;padding:0px;letter-spacing:-0.1px;width:auto;border:none;background:transparent" class="gmail_msg"><td style="font-family:Calibri,sans-serif;padding:0px;letter-spacing:-0.1px;width:auto;border:none;background:transparent" class="gmail_msg"><i class="gmail_msg"><b class="gmail_msg">Save paper, save trees.... Please do not print this e-mail unless it is absolutely <span style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:small;letter-spacing:normal" class="gmail_msg">necessary.<br class="gmail_msg"></span></b></i><br class="gmail_msg"></td></tr></tbody></table></div></div></div></div></div>
</div>
</div></div><br class="gmail_msg">_________________________________________________________________________<br class="gmail_msg">
Professional FreeSWITCH Consulting Services:<br class="gmail_msg">
<a href="mailto:consulting@freeswitch.org" class="gmail_msg" target="_blank">consulting@freeswitch.org</a><br class="gmail_msg">
<a href="http://www.freeswitchsolutions.com" rel="noreferrer" class="gmail_msg" target="_blank">http://www.freeswitchsolutions.com</a><br class="gmail_msg">
<br class="gmail_msg">
Official FreeSWITCH Sites<br class="gmail_msg">
<a href="http://www.freeswitch.org" rel="noreferrer" class="gmail_msg" target="_blank">http://www.freeswitch.org</a><br class="gmail_msg">
<a href="http://confluence.freeswitch.org" rel="noreferrer" class="gmail_msg" target="_blank">http://confluence.freeswitch.org</a><br class="gmail_msg">
<a href="http://www.cluecon.com" rel="noreferrer" class="gmail_msg" target="_blank">http://www.cluecon.com</a><br class="gmail_msg">
<br class="gmail_msg">
FreeSWITCH-users mailing list<br class="gmail_msg">
<a href="mailto:FreeSWITCH-users@lists.freeswitch.org" class="gmail_msg" target="_blank">FreeSWITCH-users@lists.freeswitch.org</a><br class="gmail_msg">
<a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" rel="noreferrer" class="gmail_msg" target="_blank">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br class="gmail_msg">
UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" rel="noreferrer" class="gmail_msg" target="_blank">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br class="gmail_msg">
<a href="http://www.freeswitch.org" rel="noreferrer" class="gmail_msg" target="_blank">http://www.freeswitch.org</a><br class="gmail_msg"></blockquote></div><br class="gmail_msg"><br clear="all" class="gmail_msg"><div class="gmail_msg"><br class="gmail_msg"></div></div><div class="gmail_extra gmail_msg">-- <br class="gmail_msg"><div class="m_6327466236363548890gmail_signature gmail_msg" data-smartmail="gmail_signature">Sincerely<br class="gmail_msg"><br class="gmail_msg">Jay</div>
</div>
_________________________________________________________________________<br class="gmail_msg">
Professional FreeSWITCH Consulting Services:<br class="gmail_msg">
<a href="mailto:consulting@freeswitch.org" class="gmail_msg" target="_blank">consulting@freeswitch.org</a><br class="gmail_msg">
<a href="http://www.freeswitchsolutions.com" rel="noreferrer" class="gmail_msg" target="_blank">http://www.freeswitchsolutions.com</a><br class="gmail_msg">
<br class="gmail_msg">
Official FreeSWITCH Sites<br class="gmail_msg">
<a href="http://www.freeswitch.org" rel="noreferrer" class="gmail_msg" target="_blank">http://www.freeswitch.org</a><br class="gmail_msg">
<a href="http://confluence.freeswitch.org" rel="noreferrer" class="gmail_msg" target="_blank">http://confluence.freeswitch.org</a><br class="gmail_msg">
<a href="http://www.cluecon.com" rel="noreferrer" class="gmail_msg" target="_blank">http://www.cluecon.com</a><br class="gmail_msg">
<br class="gmail_msg">
FreeSWITCH-users mailing list<br class="gmail_msg">
<a href="mailto:FreeSWITCH-users@lists.freeswitch.org" class="gmail_msg" target="_blank">FreeSWITCH-users@lists.freeswitch.org</a><br class="gmail_msg">
<a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" rel="noreferrer" class="gmail_msg" target="_blank">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br class="gmail_msg">
UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" rel="noreferrer" class="gmail_msg" target="_blank">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br class="gmail_msg">
<a href="http://www.freeswitch.org" rel="noreferrer" class="gmail_msg" target="_blank">http://www.freeswitch.org</a></blockquote></div>