If your SSH port is open, close it.
If your web port is open to the outside world, then close it.
If your SIP port is open to the outside world then do everything you can to restrict access except by the source IP's you need.

We have found ISDN systems being hacked. if the hacker can get to the SSH port then they can manipulate the database to create a user. They then go through the user portal using the user they created and divert the extension or do other things so that calls in end up at expensive destinations.


Answer The Phones
Telephone Engineer
UK