I was looking through my call log the other day and I saw hundreds, if not thousands of entries similar to this in a one month period.
IP address has been replaced with xx.xxx.xx.xxx
Anyone know what this is? Is it something to be worried about?
Hi!
Are these IPs you recognize?
This is either misconfigured hardware/software or someone is trying to hack your server…
This suggests that you are allowing anonymous SIP cals and/or SIP guests…
Normally your SIP ports should also be firewalled to only admit traffic from your trunks unless you have a good very reason to let them open to the world…
Good luck and have a nice day!
Nick
The IP I have x’d out is my own IP.
I do have the SIP ports open in my router, but it uses the default port.