Incomming call on X-Lite and Your session has been disabled

[ZibiX]

Hi.

One of my clients has very strange situation from past week. The system was running fine from April 2015.

Vicibox 6.0.3
SVN Version: 2540
DB Schema Version: 1460
Asterisk: 1.8.32.2-vici

Xeon 4 cores
8 GB RAM
SSD

Nothing was changed in clients network, server or Vicidial.

There are 7 Agents doing Outbound campaigns.

Agents log to system and doing their work.

Suddenly on random seat X-Lite start ringing (as it does when Agent log into campaign). X-Lite is set to AutoAnswer. Almost immediately Agent is kicked of the system with Your session has been disabled message.

Ia have checked that when this happens:
- internet connection is running fine (no ping loose do Vicidial server)
- no one is changing campaign or maybe logging on different user login or phone login

I have no clue what is going one.

[okli]

Are the softphones facing internet?
If yes- it could be malicious scan/attack, happens all the time. Need to take measures to protect the network properly.

If no- check asterisk logs on the server this phone is registered on and see where the call is coming from. If nothing on the logs, you might want to run wireshark on a few machines and capture where the SIP traffic comes from.

[ZibiX]

Thank you.

Soft phones are behind router with NAT. IP address of this router is added to firewall at DC where Vicidial servers are.

Today, non of this problem occur

Maybe a faulty switch?