|
|
Joined: Feb 2016
Posts: 7
Member
|
Member
Joined: Feb 2016
Posts: 7 |
Hi, Anyone had this before where calls are being made from CID's like 15, 1000 etc? We are using SIP trunks also.
|
|
|
Visit Atcom to get started with your new business VoIP phone system ASAP
Turn up is quick, painless, and can often be done same day.
Let us show you how to do VoIP right, resulting in crystal clear call quality and easy-to-use features that make everyone happy!
Proudly serving Canada from coast to coast.
|
|
|
Joined: Oct 2012
Posts: 252
Member
|
Member
Joined: Oct 2012
Posts: 252 |
Possibly a notification or trunk forward not setup correctly - I would get your vendor to take a look at it.
|
|
|
|
Joined: Jul 2005
Posts: 1,336
Member
|
Member
Joined: Jul 2005
Posts: 1,336 |
Sounds like a hacker trying to get in via SIP trunks. Is port 5070 open to the outside world on the SIP router?? Also delete all spare port and virtual station numbers as these guys are trying to find and opening. Have a look at the SMDR record see if you can see the calls coming in..
Regards,
Paul W Now back to a 0 day week. Love these 7 day weekends.
|
|
|
|
Joined: Nov 2001
Posts: 1,640
Moderator-NEC
|
Moderator-NEC
Joined: Nov 2001
Posts: 1,640 |
Its a hacker.
Use wireshark to identify the source IP and block it in the router, or better yet, get a list of IPs that the ITSP uses and blacklist all other IPs and only allow the IPs the ITSP use.
|
|
|
|
Joined: Feb 2016
Posts: 7
Member
|
Member
Joined: Feb 2016
Posts: 7 |
thanks for the replies guys. Definitely was a sip scanner. Closed ports on the router and no more calls
|
|
|
|
Joined: Mar 2014
Posts: 160
Member
|
Member
Joined: Mar 2014
Posts: 160 |
|
|
|
|
Joined: Feb 2016
Posts: 7
Member
|
Member
Joined: Feb 2016
Posts: 7 |
5050 to 5070 and I'm using 5080 now
|
|
|
|
Joined: May 2014
Posts: 9
Member
|
Member
Joined: May 2014
Posts: 9 |
sounds like SIP attack,
try tick 10-29-01 and 10-29-02
That usually solves
|
|
|
Forums84
Topics94,492
Posts639,865
Members49,836
|
Most Online5,661 May 23rd, 2018
|
|
1 members (www.telcom1.net),
261
guests, and
39
robots. |
Key:
Admin,
Global Mod,
Mod
|
|
|
|
|