FreePBX establishes suspicious connections

Hello,

FreePBX 13.0.194.2
have private IP 192.168.0.100

on my firewall i see suspicious connections:

192.168.0.100:56340 -> 91.108.34.10:8004 (tcp) established (always)
192.168.0.100:57094 -> 89.20.132.26:8000 (tcp) syn sent (periodically)

what it is?

ICE cast server (“Could not parse XSLT file”). Probably used for MoH streaming, but not setup or managed by FreePBX. It’s why it’s “always” connected because it’s streaming.

https://urlscan.io/result/b38e7294-bc23-4fbf-ae6f-9972fc6263bb/#summary

Another Russian radio streaming service

https://www.tvonlinestreams.com/radio-2/

Considering your account email ends in “.ru” and these two addresses are Russian Music Streaming services I have to make the assumption that you or someone that works for you setup Music streaming services for Music on your PBX.

2 Likes

thanks, this is really a MoH streaming.
topic can be deleted

1 Like

This topic was automatically closed 7 days after the last reply. New replies are no longer allowed.