[asterisk-users] [SPAM] RE: SIP hacked connection?

[C. Savinovich]

>>>Very few calls have been made this way, trivial cost, but it is slightly
worrying.

  That's what I thought when they hacked into one of my systems, but it is
not the cost of the calls, it is the purposed of the calls you should watch
out for.  The FBI contacted the owner of the PBX, and inquired him about
calls being made from "his company" doing credit card soliciting.

CS


-----Original Message-----
From: asterisk-users-bounces at lists.digium.com
[mailto:asterisk-users-bounces at lists.digium.com] On Behalf Of Paul Redstone
Sent: Thursday, June 11, 2009 3:30 PM
To: Asterisk User
Subject: [asterisk-users] SIP hacked connection?

Hi

Running 1.2.26 BRI stuffed. Calls made via PSTN via ISDN interface
(Junghanns).

SIP ports mapped through firewall as we often connect from outside, but all
SIP accounts have good passwords.

However our telecoms provider picked up a few suspicious calls to places we
do not normally call at times we do not often call.

Looking at Asterisk logs it shows SIP session from the internet connected in
and making calls with account IDs we do not recognise - definitely none of
ours.

Very few calls have been made this way, trivial cost, but it is slightly
worrying.

Anyone any ideas on how this could be happening?

Thank

Paul


_______________________________________________
-- Bandwidth and Colocation Provided by http://www.api-digital.com --

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users