[asterisk-users] SIP hacked connection?

[Steve Totaro]

On Thu, Jun 11, 2009 at 3:30 PM, Paul Redstone<paul.redstone at solica.com> wrote:
> Hi
>
> Running 1.2.26 BRI stuffed. Calls made via PSTN via ISDN interface (Junghanns).
>
> SIP ports mapped through firewall as we often connect from outside, but all SIP accounts have good passwords.
>
> However our telecoms provider picked up a few suspicious calls to places we do not normally call at times we do not often call.
>
> Looking at Asterisk logs it shows SIP session from the internet connected in and making calls with account IDs we do not recognise - definitely none of ours.
>
> Very few calls have been made this way, trivial cost, but it is slightly worrying.
>
> Anyone any ideas on how this could be happening?
>
> Thank
>
> Paul

Posting some redacted logs would be very helpful.

-- 
Thanks,
Steve Totaro
+18887771888 (Toll Free)
+12409381212 (Cell)
+12024369784 (Skype)