Can anyone explain what happen with my sip account?

General Help
1

HI

some one used our sip account and made many international calls to strage countrys strange number ,

any one know this numbers? what they used for? and why they used my local land line to make the calls?

if any one can help me with this numebrs , does any one know this numbers?

2014-05-13

19:17:30,Mayzel,200972598767421,“”,pstn2(21304873),7,3,ANSWERED,Outbound

tps:]dQog

2014-05-09

23:21:38,Mayzel,20014042605391,“”,pstn2(21304873),11,7,ANSWERED,Outbound

tps:]dQog

2014-05-09

03:31:46,Mayzel,20037090003162,“”,pstn2(21304873),7,3,ANSWERED,Outbound

tps:]dQog

2014-05-08

11:21:41,Mayzel,200972597835029,“”,pstn2(21304873),29,25,ANSWERED,Outbound

s:]dQog

2014-05-08

10:08:50,Mayzel,20037180403632,“”,pstn2(21304873),22,18,ANSWERED,Outbound

s:]dQog

2014-05-08

10:07:05,Mayzel,20037090003181,“”,pstn2(21304873),30,26,ANSWERED,Outbound

s:]dQog

2014-05-08

09:44:48,Mayzel,200265990632040,“”,pstn2(21304873),23,19,ANSWERED,Outbound

s:]dQog

2014-05-08

09:39:45,Mayzel,2009607573311,“”,pstn2(21304873),23,19,ANSWERED,Outbound

s:]dQog

2014-05-08

09:36:35,Mayzel,2006745596920,“”,pstn2(21304873),23,19,ANSWERED,Outbound

s:]dQog

2014-05-08

09:34:51,Mayzel,2002348133352219,“”,pstn2(21304873),30,25,ANSWERED,Outbound

:]dQog

2014-05-08

09:34:22,Mayzel,20097431015770,“”,pstn2(21304873),27,23,ANSWERED,Outbound

:]dQog

2014-05-08

09:32:29,Mayzel,200381648006033,“”,pstn2(21304873),27,23,ANSWERED,Outbound

:]dQog

2014-05-08

09:14:12,Mayzel,20023221100935,“”,pstn2(21304873),35,31,ANSWERED,Outbound

:]dQog

2014-05-08

09:00:17,Mayzel,200878107001010628,“”,pstn2(21304873),7,3,ANSWERED,Outbound

:]dQog

2014-05-08

08:59:20,Mayzel,200681614508,“”,pstn2(21304873),22,19,ANSWERED,Outbound

l>

:]dQog

2014-05-08

08:49:41,Mayzel,20050230481930,“”,pstn2(21304873),131,128,ANSWERED,Outbound

:]dQog

2014-05-08

05:57:46,Mayzel,20050928167687,“”,pstn2(21304873),24,20,ANSWERED,Outbound

:]dQog

2014-05-08

05:12:55,Mayzel,20093702760658,“”,pstn2(21304873),22,18,ANSWERED,Outbound

:]dQog

2014-05-08

02:54:59,Mayzel,2002208913595,“”,pstn2(21304873),1176,1172,ANSWERED,Outbound

]dQog

2014-05-07

13:06:04,Mayzel,2006707203872,“”,pstn2(21304873),22,18,ANSWERED,Outbound

l>

]dQog

2014-05-07

11:10:50,Mayzel,20021620723918,“”,pstn2(21304873),34,30,ANSWERED,Outbound

]dQog

2014-05-07

12:44:17,Mayzel,20037178812733,“”,pstn2(21304873),21,17,ANSWERED,Outbound

]dQog

2014-05-07

12:36:24,Mayzel,20024103350408,“”,pstn2(21304873),25,21,ANSWERED,Outbound

]dQog

2014-05-07

12:39:43,Mayzel,20022455325558,“”,pstn2(21304873),21,17,ANSWERED,Outbound

]dQog

if any one can help me with this numebrs , does any one know this numbers?

regrds

2

Unfortunately you were hacked. Your system is probably exposed to the Internet with inadequate security measures in place.

3

If you have no need for internet exposure, shut down some ports on your firewall. Ports 5060 - 5061 are closed on my firewall/router, I do not need these to be open as I do not use any devices outside of my local network.

Change the password on all of your devices to something complex, it would appear you have an easy password or security on your extensions.

Hackers that are too cheap to pay for their own service do port scans on IP’s to determine SIP ports and if they are open, they scanned you, bruteforced your security and got in. Also make sure you are using the intrusion detection on your system and that is is running, I drop my max retries down lower so they have less chance of scanning before being blocked.
You need to tighten that system up!!! If you need to be visible, change your ports to something other than 5060 - 5061, something they won’t look for, if you don’t… you never know who they will call and what the purpose of the call will be for. You can rest assured, if it is criminal they will be knocking on your door for answers.