Unknown user under cdr report

juno

Joined
Apr 11, 2009
Messages
1
Likes
0
Points
0
#1
Hi All,

Today, when i was routinely checking my cdr report, suddenly saw some disturbing entries.

Date Source Destination Src. Channel Duration
4/11/2009 0:15 levog s SIP/68.64.33.217-098709b0 12
4/11/2009 3:24 levog s SIP/68.64.33.217-098709b0 12
4/11/2009 4:22 levog s SIP/68.64.33.217-098709b0 12
4/11/2009 8:11 levog s SIP/68.64.33.217-098709b0 12
4/11/2009 10:19 levog s SIP/68.64.33.13-098709b0 12
4/11/2009 11:11 levog s SIP/68.64.33.13-098709b0 12

I do not have a sip account named "levog"

I'm I hacked?

Thank you in advance,
Juno
 

dicko

Joined
Oct 24, 2008
Messages
4,099
Likes
0
Points
0
#2
Possibly,

you need to check the file /var/log/asterisk/full for attempted registration (hopefully they failed) time-stamped immediately after on of the "anonymous" calls.

for example

cat /var/log/asterisk/full8|grep "4/11/2009 11:1"|less

from bash will filter all the calls (for 10 minutes) around the last one you show.
 

Members online

No members online now.

Latest posts

Forum statistics

Threads
30,913
Messages
130,917
Members
17,589
Latest member
cristian.saiz
Top