Home » Forums » Community Edition » Open Discussion

Abuse asterisk based PBX

proxxio
Posts: 18
 Member Since:
2010-12-11
Submitted by proxxio on Mon, 01/23/2012 - 3:14am.

Hello All,

In the last months I saw different abuses of Asterisk based PBXes. All of my PBXes are secured by some good firewall but I have got the experience that when u shutdown the firewall and letting a PBX like Trixbox for some time directly connected with Internet, It will be abused within a short time.

Abusers can login on some arbitrary extension within a short time and use the calling routes for this extension. It doesn't matter what is the username or how long and how strong the password is, they will login and start calling to expensive numbers in Africa.

Can somebody tell me how they can do this? Can they login without any password?

It doesn't matter witch system, the abuse will happening by Trixbox, FreePBX, 4psa with kamilio SIP server and lot of other.

Most important for this is how can we stop this kind of abuse.

Thanks for each reply!

‹ Inbound call center for several projects Llamadas entrantes no se cuelgan ›


jgarzaro
Posts: 1
 Member Since:
2012-01-30
I am also experiencing the same Asterix Based Abuse Issue...
Mon, 01/30/2012 - 9:38am

Regardless of the secret word, password, or internal settings we've gotten hit also. In our case the attack originated from the 37.8.9.182.



Comment viewing options

Select your preferred way to display the comments and click "Save settings" to activate your changes.