Strange PBX CDR Entries
-
So here's a sample from my one extension FreePBX lab box. With my one experience with toll fraud at my last company, I'm quite interested in figuring out what's going on.
Looking at voip.ms and seeing 4 total calls for today (time in the above picture is UTC), this looks like traffic isn't coming from or going out the PSTN.
Here is the detail for the first entry from the above log.
My suspicion (because of the from-sip-external) context, is this is a SIP request from
$badBottrying to make a call to extension 9121. . .From my SIP settings (pretty sure this is default for FreePBX), it looks like I do allow guests, but not anonymous inbound SIP calls.
Is my suspicion right?
-
@eddiejennings said in Strange PBX CDR Entries:
So here's a sample from my one extension FreePBX lab box. With my one experience with toll fraud at my last company, I'm quite interested in figuring out what's going on.
Looking at voip.ms and seeing 4 total calls for today (time in the above picture is UTC), this looks like traffic isn't coming from or going out the PSTN.
Here is the detail for the first entry from the above log.
My suspicion (because of the from-sip-external) context, is this is a SIP request from
$badBottrying to make a call to extension 9121. . .From my SIP settings (pretty sure this is default for FreePBX), it looks like I do allow guests, but not anonymous inbound SIP calls.
Is my suspicion right?
This is correct. You don't want that on unless you plan to setup direct SIP URI calling, not through a trunk.
-
I've disallowed SIP guests. We'll see if I get future CDR entries like these.
-
@eddiejennings said in Strange PBX CDR Entries:
I've disallowed SIP guests. We'll see if I get future CDR entries like these.
You won't.
