Bilal,

The first thing that comes to my mind is you may have "accept-blind-reg" directive in your sip profile.

It would help to see sip traffic to check against authorisation process.

2018-01-26 21:41 GMT+03:00 Bilal Abbasi <bilaln018@gmail.com>:
Hi Users,
I am using FreeSWITCH Version 1.6.19 git c540248 .
today i noticed very weird issue, that i am getting an attack on one of my dev servers, that somebody is trying to make calls out of the box.
And he is able to register the phone via "default" username(check via sngrep), i am using complex password and there is NO USER with name "DEFAULT" on my switch.
I tried to register the default user with any random password and it allowed me to register on my softphone.
I am really worried, and i can't believe that it's something at FS end.
I am sure its some mistake, can somebody help me out please.

Regards
Abbasi

_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org
http://www.freeswitchsolutions.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://confluence.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org



--
Volkan Oransoy