3CX getting calls from "trunk"

[blackpearl]

Hi all,

we have a really strange problem.
Since a couple of days we get every 2-4 minutes calls from "trunk" or 'hi'or'x'='x'. At least this is what we get on the display. So I checked the logs and there is only a entry as follows:

Call(C:17): ACK is not received from sip:%E2%80%98hi%27or%E2%80%98x%E2%80%99=%27x%27@"our wan ip"

Any clues?

thx
dan

 

[mahe23]

We had exactly same Problem. My solution was to enter CallerID ="trunk" to the blacklist.

 

[mahe23]

Now I get calls from "hi'or‘x’='x'" and i put it to the Blacklist.

Is there a danger? How can we pretend us?
Matthias

 

[blackpearl]

Thanks Matthias,

I actually found out that some attacks got through my firewall. Even when "SNORT" was active. I just blocked them.
I'll try to find out why they got through snort.