Unknown user under cdr report

Discussion in 'General' started by juno, Apr 11, 2009.

  1. juno

    Joined:
    Apr 11, 2009
    Messages:
    1
    Likes Received:
    0
    Hi All,

    Today, when i was routinely checking my cdr report, suddenly saw some disturbing entries.

    Date Source Destination Src. Channel Duration
    4/11/2009 0:15 levog s SIP/68.64.33.217-098709b0 12
    4/11/2009 3:24 levog s SIP/68.64.33.217-098709b0 12
    4/11/2009 4:22 levog s SIP/68.64.33.217-098709b0 12
    4/11/2009 8:11 levog s SIP/68.64.33.217-098709b0 12
    4/11/2009 10:19 levog s SIP/68.64.33.13-098709b0 12
    4/11/2009 11:11 levog s SIP/68.64.33.13-098709b0 12

    I do not have a sip account named "levog"

    I'm I hacked?

    Thank you in advance,
    Juno
     
  2. dicko

    Joined:
    Oct 24, 2008
    Messages:
    4,099
    Likes Received:
    0
    Possibly,

    you need to check the file /var/log/asterisk/full for attempted registration (hopefully they failed) time-stamped immediately after on of the "anonymous" calls.

    for example

    cat /var/log/asterisk/full8|grep "4/11/2009 11:1"|less

    from bash will filter all the calls (for 10 minutes) around the last one you show.
     

Share This Page