We are seeing fraudulent calls from extensions and some are from 10 digit numbers that are not even present on any extensions or SIP trunk.

Howdy! Welcome to the forums. Sorry it started on a bad note :frowning: First, you might want to disconnect your system from the internet in order to review the extent of the damage and prevent further immediate exploitation. This might be a misconfigured dialplan that you can fix in the FreePBX GU…

Make sure both of these are set to NO on Asterisk Sip Settings [Capture]

Just don’t listen on UDP:5060 ;- )

Not a real solution. Hacking can still take place.

True, but I would guess there will be a better than 99% chance it will fix the OP’s problem. Personally I find that using TCP as the transport on the Server and having a reverse proxy, in my case haproxy, ONLY send TLS certified calls and registrations to an ‘unassociated and obscure’ domain name f…

FreePBX Community Forums

Server hacked

FreePBX Security

security, freepbx

show post in topic

Home
Categories
Guidelines
Terms of Service
Privacy Policy

Powered by Discourse, best viewed with JavaScript enabled