What's this weird activity in CDR's?

Status
Not open for further replies.

5280pbx

Member
Feb 4, 2019
68
1
8
39
Hi, I've been seeing weird activity in the call detail records on 3 servers I have, all around the same time, and all seemingly after I changed carrier maybe? The call length's are all 0's so it hasn't concerned me much but would like to figure it out. The calls aren't coming from any exts so no exts have been hacked...Thoughts? Much appreciated!
 

Attachments

  • weird actvity.png
    weird actvity.png
    775.5 KB · Views: 15

hfoster

Active Member
Jan 28, 2019
677
80
28
34
That is someone trying to have a pop at your PBX, presumably via the external profile. That number has had some activity from a Romanian IP address who is looking for open PBXs to relay calls through.

You might want to think about firewalling your external profile interface/port down to your SIP provider.
 
Status
Not open for further replies.