Find source ip of etension

Discussion in '3CX Phone System - General' started by ufgeorge, Dec 29, 2011.

Thread Status:
Not open for further replies.
  1. ufgeorge

    Joined:
    Jan 26, 2010
    Messages:
    15
    Likes Received:
    0
    My 3CX was hacked.
    I saw from log that hacker register extension 1000 but I do not have this extension!
    How can I find which ip address to register extension 1000 and call out?

    George
     
  2. leejor

    leejor Well-Known Member

    Joined:
    Jan 22, 2008
    Messages:
    10,360
    Likes Received:
    226
    The 3CX logs would give you all of that information. Which version of 3CX are you running?
     
  3. ufgeorge

    Joined:
    Jan 26, 2010
    Messages:
    15
    Likes Received:
    0
    I'm using V8. How to generate report includs ip that I can provide it to police department
     
  4. leejor

    leejor Well-Known Member

    Joined:
    Jan 22, 2008
    Messages:
    10,360
    Likes Received:
    226
    Here are a couple of links that may be of help.

    http://www.3cx.com/blog/docs/3cx-server-activity-log/

    3cxphonesystem-log-retaining-data-for-a-longer-period-17633.html

    It is doubtful that the local police would be interested in becoming involved with your hacking problem. Most of these IP's belong to servers/providers located in places like Eastern Europe, India, or China. Tracking down who was actually using that particular IP (if it wasn't spoofed) is a time consuming chore, like trying to pinpoint where Spam is actually coming from.

    You may be able to get some assistance from your ISP, but then again, they already know that this sort of thing is going on, but it is very difficult to stop, they might, however, provide some suggestions. You probably need to concentrate on increasing the security on your system/router/firewall. Upgrading to 3CX version 10, with it's much improved security features, would be a good start.
     
Thread Status:
Not open for further replies.