I just had a call from a customer that had choppy audio and I found an 85 kbps stream uploading to bandwidth.com. This is an older system running Asterisk 1.4 and FreePBX 2.5 or 2.6. We don’t have anything set up with Bandwidth.com. Can someone explain what could cause this? The stream went away when I block outbound traffic to 188.8.131.52 at the firewall.
This system has been in place for years. Can you shed any light on why it would do this all of the sudden?
I know Tony is crazed right now with the acquisition and all the new staff. You may want to reach out to him another way.
I have never seen this happen. Could it just be a stuck channel? Does it stop if you stop just asterisk?
SOunds like a compromised box. Nothing ever in FreePBX reached out to anything with bandwidth.com
You might want to contact Bandwidth if you don’t use them for anything, as they should also be able to find out what system on their end your communicating with. With that info it should be simple to determine if it’s a compromise or something else. Granted I tend to agree with Tony, assume you have a break in till you prove otherwise.
We actually use Bandwidth for some SIP services, and nothing here talks to the IP you listed…
Just a quick suggestion, email [email protected] , derived from:-
Query terms are ambiguous. The query is assumed to be:
Use “?” to get help.
The following results may also be obtained via:
NetRange: 184.108.40.206 - 220.127.116.11
NetType: Direct Allocation
OrgName: Bandwidth.com Inc.
Address: 4001 Weston Parkway