I do not know if anyone has come accross this, I have someone hacking into an SPA8000, no ideal how, and relaying 011xx.t calls out to my freeswitch.  I have of course disabled access of the gateway to the freeswitch but do need to turn it up again.  I have seen a report to cisco on this problem but no ideal where it comes from.  Anythoughts or ideas would be appreciated.
 
my syslog from the spa8000 looks like this
 
 
Darcy Primrose