Hacking so simple?

Distro Discussion & Help
1

Hi Freepbx,

Some of our PBX’s are hacked, or not???
When I do wireshark, I see the next invite

93.174.4.12 -> 84.244.134.110 SIP/SDP Request: INVITE sip:825240219700@ippbx, with session description

825240219700 is the number that is being dialed.
93.174.4.12 is the hackers IP address

Without a registered sip phone he is trying to dial out.

How is this possible??
Is have set “allow sip guest” to no

I am clewless now.
Hope someone can explain this to me.

2

That does not tell me your system is being hack. Based on what you pasted that shows a inbound call is trying to be sent to your PBX

3

Hi Tony, Thanx for your answer.
When this invite passes, a call outbound was created to number 825240219700.

There is no other (hackers) device logged in on a extension and still there are outgoing calls. (much of them fail building up a rtp stream)

Veryvery strange