[Freeswitch-users] How to check who is attacking my fs server?

Avi Marcus avi at avimarcus.net
Sun Aug 11 13:27:15 MSD 2013


CDRs say:
network_addr 85.195.107.50
For calls to 107. I guess I'm getting the same attack.
-Avi

On Sun, Aug 11, 2013 at 12:03 PM, Jessica Wang <xyangni at gmail.com> wrote:

> Dear all,
>
> My FS server got attacked by someone. Unknown external user 107 is
> frequently calling strange number on my FS server. From the log, I can not
> find the real IP of this external user, the IP logged is my server's IP!
>  How can check who is doing this and block any similar action?
>  Part of the log is as below.
>
> Thanks.
>
>
>
>  2013-08-11 09:48:12.401286 [NOTICE] switch_channel.c:951 New Channel
> sofia/external/107@(my fs server ip addr)
> [c1499822-0262-11e3-af23-2d4b950c464a]
> 2013-08-11 09:48:12.421101 [INFO] mod_dialplan_xml.c:485 Processing 107
> <107>->+970598610587 in context public
>
>
> _________________________________________________________________________
> Professional FreeSWITCH Consulting Services:
> consulting at freeswitch.org
> http://www.freeswitchsolutions.com
>
> 
> 
>
> Official FreeSWITCH Sites
> http://www.freeswitch.org
> http://wiki.freeswitch.org
> http://www.cluecon.com
>
> FreeSWITCH-users mailing list
> FreeSWITCH-users at lists.freeswitch.org
> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
> http://www.freeswitch.org
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.freeswitch.org/pipermail/freeswitch-users/attachments/20130811/c69a355d/attachment.html 


Join us at ClueCon 2013 Aug 6-8, 2013
More information about the FreeSWITCH-users mailing list