<div dir="ltr">your username / passwords are probably compromised, if not your box entirely.<div><br></div><div><ul><li>Change ALL your passwords and enforce strong password policies.<br></li><li>Make sure all your SIP Profiles require auth, or have strong ACL's<br></li><li>Implement fail2ban <br></li><li>BLOCK THE KNOWN ATTACKER IP with Iptables.</li></ul><div>Im sorry to sound like an ass, but if you havnt done one of the above or dont think you can do them all then you probably need to pay someone who knows what they are doing.</div></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div></div><div class="gmail_extra"><br><div class="gmail_quote">On 20 February 2017 at 20:38, Shisheer Teli <span dir="ltr"><<a href="mailto:telishisheer@gmail.com" target="_blank">telishisheer@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">all my users are connected from office outside. so I can't block any IP.<div><br></div><div>is there any configuration in FreeSWITCH to block them.. ? </div></div><div class="HOEnZb"><div class="h5"><div class="gmail_extra"><br><div class="gmail_quote">On Mon, Feb 20, 2017 at 4:02 PM, Борисов, Дмитрий / Dmitriy Borisov <span dir="ltr"><<a href="mailto:bordmi@rarus.ru" target="_blank">bordmi@rarus.ru</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div>Hi!<br><br></div>This call is not self generated. It`s was generated by 23.239.85.20 (in most cases). Do you have properli configurated firewall?<br></div><br><div class="gmail_quote"><div dir="ltr">пн, 20 февр. 2017 г. в 13:29, Shisheer Teli <<a href="mailto:telishisheer@gmail.com" target="_blank">telishisheer@gmail.com</a>>:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div><div class="m_-6580285061418226846h5"><div dir="ltr" class="m_-6580285061418226846m_5780196258063120046gmail_msg">Dear Team,<div class="m_-6580285061418226846m_5780196258063120046gmail_msg"><br class="m_-6580285061418226846m_5780196258063120046gmail_msg"></div><div class="m_-6580285061418226846m_5780196258063120046gmail_msg">from last few days my FreeSWITCH server generating some logs itself. </div><div class="m_-6580285061418226846m_5780196258063120046gmail_msg"><br class="m_-6580285061418226846m_5780196258063120046gmail_msg"></div><div class="m_-6580285061418226846m_5780196258063120046gmail_msg">I don't know how to stop this .. please help .. it's urgent.</div><div class="m_-6580285061418226846m_5780196258063120046gmail_msg"><br class="m_-6580285061418226846m_5780196258063120046gmail_msg"></div><div class="m_-6580285061418226846m_5780196258063120046gmail_msg">Please see the attached logs.</div><div class="m_-6580285061418226846m_5780196258063120046gmail_msg"><br clear="all" class="m_-6580285061418226846m_5780196258063120046gmail_msg"><div class="m_-6580285061418226846m_5780196258063120046gmail_msg"><br class="m_-6580285061418226846m_5780196258063120046gmail_msg"></div>-- <br class="m_-6580285061418226846m_5780196258063120046gmail_msg"><div class="m_-6580285061418226846m_5780196258063120046m_-7608276620027101095gmail_signature m_-6580285061418226846m_5780196258063120046gmail_msg" data-smartmail="gmail_signature"><div dir="ltr" class="m_-6580285061418226846m_5780196258063120046gmail_msg"><div class="m_-6580285061418226846m_5780196258063120046gmail_msg"><div dir="ltr" class="m_-6580285061418226846m_5780196258063120046gmail_msg"><div class="m_-6580285061418226846m_5780196258063120046gmail_msg"><font face="arial, helvetica, sans-serif" class="m_-6580285061418226846m_5780196258063120046gmail_msg"><span style="color:rgb(34,34,34);background-color:rgb(255,255,255)" class="m_-6580285061418226846m_5780196258063120046gmail_msg"><div class="m_-6580285061418226846m_5780196258063120046gmail_msg">Regards,</div>Shisheer T</span><br style="color:rgb(34,34,34);background-color:rgb(255,255,255)" class="m_-6580285061418226846m_5780196258063120046gmail_msg"></font><table cellpadding="0" cellspacing="0" border="0" style="color:rgb(0,0,0);font-family:Calibri,sans-serif;font-size:14px;letter-spacing:-0.1px;background:transparent;margin:0px;padding:0px;border-collapse:collapse;border-spacing:0px;width:auto;border:none" class="m_-6580285061418226846m_5780196258063120046gmail_msg"><tbody style="margin:0px;padding:0px;letter-spacing:-0.1px;width:auto;border:none;background:transparent" class="m_-6580285061418226846m_5780196258063120046gmail_msg"><tr style="margin:0px;padding:0px;letter-spacing:-0.1px;width:auto;border:none;background:transparent" class="m_-6580285061418226846m_5780196258063120046gmail_msg"><td style="font-family:Calibri,sans-serif;padding:0px;letter-spacing:-0.1px;width:auto;border:none;background:transparent" class="m_-6580285061418226846m_5780196258063120046gmail_msg"><i class="m_-6580285061418226846m_5780196258063120046gmail_msg"><b class="m_-6580285061418226846m_5780196258063120046gmail_msg">Save paper, save trees.... Please do not print this e-mail unless it is absolutely <span style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:small;letter-spacing:normal" class="m_-6580285061418226846m_5780196258063120046gmail_msg">necessary.<br class="m_-6580285061418226846m_5780196258063120046gmail_msg"></span></b></i><br class="m_-6580285061418226846m_5780196258063120046gmail_msg"></td></tr></tbody></table></div></div></div></div></div>
</div></div></div></div>
______________________________<wbr>______________________________<wbr>_____________<br class="m_-6580285061418226846m_5780196258063120046gmail_msg">
Professional FreeSWITCH Consulting Services:<br class="m_-6580285061418226846m_5780196258063120046gmail_msg">
<a href="mailto:consulting@freeswitch.org" class="m_-6580285061418226846m_5780196258063120046gmail_msg" target="_blank">consulting@freeswitch.org</a><br class="m_-6580285061418226846m_5780196258063120046gmail_msg">
<a href="http://www.freeswitchsolutions.com" rel="noreferrer" class="m_-6580285061418226846m_5780196258063120046gmail_msg" target="_blank">http://www.freeswitchsolutions<wbr>.com</a><br class="m_-6580285061418226846m_5780196258063120046gmail_msg">
<br class="m_-6580285061418226846m_5780196258063120046gmail_msg">
Official FreeSWITCH Sites<br class="m_-6580285061418226846m_5780196258063120046gmail_msg">
<a href="http://www.freeswitch.org" rel="noreferrer" class="m_-6580285061418226846m_5780196258063120046gmail_msg" target="_blank">http://www.freeswitch.org</a><br class="m_-6580285061418226846m_5780196258063120046gmail_msg">
<a href="http://confluence.freeswitch.org" rel="noreferrer" class="m_-6580285061418226846m_5780196258063120046gmail_msg" target="_blank">http://confluence.freeswitch.o<wbr>rg</a><br class="m_-6580285061418226846m_5780196258063120046gmail_msg">
<a href="http://www.cluecon.com" rel="noreferrer" class="m_-6580285061418226846m_5780196258063120046gmail_msg" target="_blank">http://www.cluecon.com</a><br class="m_-6580285061418226846m_5780196258063120046gmail_msg">
<br class="m_-6580285061418226846m_5780196258063120046gmail_msg">
FreeSWITCH-users mailing list<br class="m_-6580285061418226846m_5780196258063120046gmail_msg">
<a href="mailto:FreeSWITCH-users@lists.freeswitch.org" class="m_-6580285061418226846m_5780196258063120046gmail_msg" target="_blank">FreeSWITCH-users@lists.freeswi<wbr>tch.org</a><br class="m_-6580285061418226846m_5780196258063120046gmail_msg">
<a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" rel="noreferrer" class="m_-6580285061418226846m_5780196258063120046gmail_msg" target="_blank">http://lists.freeswitch.org/ma<wbr>ilman/listinfo/freeswitch-user<wbr>s</a><br class="m_-6580285061418226846m_5780196258063120046gmail_msg">
UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" rel="noreferrer" class="m_-6580285061418226846m_5780196258063120046gmail_msg" target="_blank">http://lists.frees<wbr>witch.org/mailman/options/<wbr>freeswitch-users</a><br class="m_-6580285061418226846m_5780196258063120046gmail_msg">
<a href="http://www.freeswitch.org" rel="noreferrer" class="m_-6580285061418226846m_5780196258063120046gmail_msg" target="_blank">http://www.freeswitch.org</a></blockquote></div><span class="m_-6580285061418226846HOEnZb"><font color="#888888"><div dir="ltr">-- <br></div><div data-smartmail="gmail_signature"><div dir="ltr"><div style="font-family:"helvetica neue",helvetica,arial,sans-serif;line-height:19.5px">--</div><div style="font-family:"helvetica neue",helvetica,arial,sans-serif;line-height:19.5px">С уважением,</div><div style="font-family:"helvetica neue",helvetica,arial,sans-serif;line-height:19.5px">Борисов Дмитрий</div><div style="font-family:"helvetica neue",helvetica,arial,sans-serif;line-height:19.5px">Отдел облачных технологий 1С-Рарус</div><div style="font-family:"helvetica neue",helvetica,arial,sans-serif;line-height:19.5px">Тел. <a href="tel:+7%20495%20231-20-02" value="+74952312002" target="_blank">+7 (495) 231-20-02</a> доб.: 15-94</div><div style="font-family:"helvetica neue",helvetica,arial,sans-serif;line-height:19.5px">--</div><div style="font-family:"helvetica neue",helvetica,arial,sans-serif;line-height:19.5px">with best regards,</div><div style="font-family:"helvetica neue",helvetica,arial,sans-serif;line-height:19.5px">Dmitriy Borisov</div><div style="font-family:"helvetica neue",helvetica,arial,sans-serif;line-height:19.5px">1C-Rarus Cloud Services</div><div style="font-family:"helvetica neue",helvetica,arial,sans-serif;line-height:19.5px">tel.: <span style="font-size:12.8px"><a href="tel:+7%20495%20231-20-02" value="+74952312002" target="_blank">+7 (495) 231-20-02</a> add.: 15-94</span></div></div></div>
</font></span><br>______________________________<wbr>______________________________<wbr>_____________<br>
Professional FreeSWITCH Consulting Services:<br>
<a href="mailto:consulting@freeswitch.org" target="_blank">consulting@freeswitch.org</a><br>
<a href="http://www.freeswitchsolutions.com" rel="noreferrer" target="_blank">http://www.freeswitchsolutions<wbr>.com</a><br>
<br>
Official FreeSWITCH Sites<br>
<a href="http://www.freeswitch.org" rel="noreferrer" target="_blank">http://www.freeswitch.org</a><br>
<a href="http://confluence.freeswitch.org" rel="noreferrer" target="_blank">http://confluence.freeswitch.o<wbr>rg</a><br>
<a href="http://www.cluecon.com" rel="noreferrer" target="_blank">http://www.cluecon.com</a><br>
<br>
FreeSWITCH-users mailing list<br>
<a href="mailto:FreeSWITCH-users@lists.freeswitch.org" target="_blank">FreeSWITCH-users@lists.freeswi<wbr>tch.org</a><br>
<a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" rel="noreferrer" target="_blank">http://lists.freeswitch.org/ma<wbr>ilman/listinfo/freeswitch-user<wbr>s</a><br>
UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" rel="noreferrer" target="_blank">http://lists.frees<wbr>witch.org/mailman/options/<wbr>freeswitch-users</a><br>
<a href="http://www.freeswitch.org" rel="noreferrer" target="_blank">http://www.freeswitch.org</a><br></blockquote></div><br><br clear="all"><div><br></div>-- <br><div class="m_-6580285061418226846gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><font face="arial, helvetica, sans-serif"><span style="color:rgb(34,34,34);background-color:rgb(255,255,255)"><div>Regards,</div>Shisheer T</span><br style="color:rgb(34,34,34);background-color:rgb(255,255,255)"></font><table cellpadding="0" cellspacing="0" border="0" style="color:rgb(0,0,0);font-family:Calibri,sans-serif;font-size:14px;letter-spacing:-0.1px;background:transparent;margin:0px;padding:0px;border-collapse:collapse;border-spacing:0px;width:auto;border:none"><tbody style="margin:0px;padding:0px;letter-spacing:-0.1px;width:auto;border:none;background:transparent"><tr style="margin:0px;padding:0px;letter-spacing:-0.1px;width:auto;border:none;background:transparent"><td style="font-family:Calibri,sans-serif;padding:0px;letter-spacing:-0.1px;width:auto;border:none;background:transparent"><i><b>Save paper, save trees.... Please do not print this e-mail unless it is absolutely <span style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:small;letter-spacing:normal">necessary.<br></span></b></i><br></td></tr></tbody></table></div></div></div></div></div>
</div>
</div></div><br>______________________________<wbr>______________________________<wbr>_____________<br>
Professional FreeSWITCH Consulting Services:<br>
<a href="mailto:consulting@freeswitch.org">consulting@freeswitch.org</a><br>
<a href="http://www.freeswitchsolutions.com" rel="noreferrer" target="_blank">http://www.<wbr>freeswitchsolutions.com</a><br>
<br>
Official FreeSWITCH Sites<br>
<a href="http://www.freeswitch.org" rel="noreferrer" target="_blank">http://www.freeswitch.org</a><br>
<a href="http://confluence.freeswitch.org" rel="noreferrer" target="_blank">http://confluence.freeswitch.<wbr>org</a><br>
<a href="http://www.cluecon.com" rel="noreferrer" target="_blank">http://www.cluecon.com</a><br>
<br>
FreeSWITCH-users mailing list<br>
<a href="mailto:FreeSWITCH-users@lists.freeswitch.org">FreeSWITCH-users@lists.<wbr>freeswitch.org</a><br>
<a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" rel="noreferrer" target="_blank">http://lists.freeswitch.org/<wbr>mailman/listinfo/freeswitch-<wbr>users</a><br>
UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" rel="noreferrer" target="_blank">http://lists.<wbr>freeswitch.org/mailman/<wbr>options/freeswitch-users</a><br>
<a href="http://www.freeswitch.org" rel="noreferrer" target="_blank">http://www.freeswitch.org</a><br></blockquote></div><br><br clear="all"><div><br></div>-- <br><div class="gmail_signature" data-smartmail="gmail_signature">Sincerely<br><br>Jay</div>
</div>