Oddities with My PBX

So am I getting War Dailed or what. It's freepbx (updated and patched) connected to google voice. Below is the CDR Reports. Real phone calls show as their correct caller ID number but I see a bunch of these. There another 1-2 pages of these just for one day.

CDRreports.tiff

NetworkNerd

Is traffic from any ip being allowed into your network and able to hit the PBX, or is it restricted to just traffic from Google?

NetworkNerd

Does connecting to the PBX via SSH and running asterisk -rvvvv show any kind of activity when you are not making / receiving calls?

scottalanmiller

Definitely looks like direct SIP calling, not calls from a trunk. Is you SIP locked down at the firewall?

FiyaFly

@NetworkNerd said:

Does connecting to the PBX via SSH and running asterisk -rvvvv show any kind of activity when you are not making / receiving calls?

Is there any way for you to block anonymous inbound? Some providers won't let you, and it looks like from that destination field that this might not be feasible, but if you can block anonymous inbound in your SIP settings in freepbx, that will help.

JaredBusch

@scottalanmiller said:

Definitely looks like direct SIP calling, not calls from a trunk. Is you SIP locked down at the firewall?

I did not even think about asking that as I simply assumed he had it turned off.

@thecreativeone91 There is a setting in the sip setting section to allow anonymous SIP I believe. Is that enabled?

Should both Allow SIP Guests and Allow Anonymous Inbound SIP Calls be Disabled? They were both enabled by default. Fail on my part.

JaredBusch

@thecreativeone91 said:

Should both Allow SIP Guests and Allow Anonymous Inbound SIP Calls be Disabled? They were both enabled by default. Fail on my part.

Yes. Unless needed for specific reason,s always disable both.

scottalanmiller

@thecreativeone91 said:

Should both Allow SIP Guests and Allow Anonymous Inbound SIP Calls be Disabled? They were both enabled by default. Fail on my part.

Yes, disable those.

Sweet. Thanks. I'll check the logs later. For some reason the apply config failed in the GUI when doing that. So I had to run 'amportal ar' in the terminal.