atcomsystems.ca/forum
Posted By: John807 Hmmm Hack attempt? - 10/12/16 09:59 AM
Early this morning around 5 I was in the office when I saw the led on 702 light up but the phone didn't ring. I only have one pots line on the system. I have a Sip station programmed on it but nothing connected and a Sip trunk license not programmed. I unplugged the line and plugged it back in the next time I got call for 500 and then 702 went off hook. disconnected again. put a butt set on the pots line it happened again this time I heard music on the butt set. disconnected again. Then it came in again no ring picked up my IP phone and got no MGI channel I only have one on the system. I disconnected the lan connection and have had no further instances. The only thing in the call in log is no CID 351 (which is a 3rd party sip station) on just the first call that came in 500. It seems they were coming in Sip and trying to call out one call I heard the can't call the number intercept that one pots line has no international calling allowed. Thoughts? TIA
Posted By: nameless Re: Hmmm Hack attempt? - 10/12/16 08:11 PM
Sounds like it.

I would change the password on your sip extension.

What system and version?
Posted By: John807 Re: Hmmm Hack attempt? - 10/12/16 09:24 PM
OS7100 4.95 This is one of our in house test systems. I will have to also check what the whitelist settings are. Since it is a test box things are always being changed and tested and not necessarily put back secure.
Thanks
Posted By: John807 Re: Hmmm Hack attempt? - 10/12/16 10:01 PM
Just changed passwords and put everything back to using the white list. Amazing how they could pin point one sip extension on a box using a DHCP cable address.
Posted By: John807 Re: Hmmm Hack attempt? - 10/15/16 05:19 PM
Today I took a look at the IP address that had been connected to that Sip Extension. It tracked back to Palestine. Since changing the sip extension password and enabling the white list no further issues.
© Sundance Business VOIP Telephone Help