FQDN IP changing

[Heath]

I’m having an issue of the IP address changing on my FQDN. Everyday like clockwork between 10 & 11am the IP address on my FQDN keeps changing to an unknown IP address. It’s not an IP address that I have and it’s not a PBX. But it keeps changing to the same exact IP address and I have to keep going back to the PBX to reset the 3cx dns to repoint back to my server. My IP that I have on my PBX is a static. There is nothing in the logs that I can see on what’s causing the IP address to change on the FQDN.

For kicks and giggles I shut down the PBX server overnight now when I did that 2 hours later I did a ping of the FQDN and it resolved to the correct IP, but of course got lost packets cause it was offline. At 11am I pinged the FQDN and lol behold the IP address changed to that same IP address that it changes to daily. So it’s not an issue with the PBX but something is sending to 3CX dns to change the IP address to the same one that I don’t own or have on any of my networks. It’s like I’m getting slammed or crammed (similar to back when your long distance got switched without your knowing or permission). I don’t know what is causing this, why it’s happening and how to stop it

What’s also interesting is when the IP changes I of course the phones are offline and the SIP trunks are no longer connected to the PBX but then I don’t get any emails that the phones or the SIP trunks lost connection to the PBX. When I get the IP to resolve back to the PBX I then get the noticed that the phones are back online and the SIP connected back to the PBX.

It seems that 3CX dns servers are getting something at the same time daily to change the IP address on my FQDN but don’t know how or why. With the change also happening when the PBX and server shut off I can see how it’s the PBX or server. It’s driving me crazy cause I got to go into the PBX and reset it for the FQDN to resolve back to the correct static ip.

 

[AWS2P]

Hello,
did you try to search who is the owner of the IP which replace yours and try to do a abuse report ?

 

[Heath]

Yup I did a search and I know who the owner of that IP address is that replaced mine. How do I do an abuse report

 

[SweetAction]

If you are sure the IP isn't yours (isn't an old system), you may need to contact support and have them re-issue the license key. Only PBXs with your key could update your FQDN.

 

[AWS2P]

How do I do an abuse report

normally when you do a WHOIS IP you have abuse link or email to do that on the IP range owner

 

[SteveITS]

If you are sure the IP isn't yours (isn't an old system),...Only PBXs with your key could update your FQDN

Came here to post this...it sounds like the other entity is turning on or restarting an old server/VM every day at that time.

 

[TheodorosG_3CX]

Correct, this can also be another installation or VM that is keeps contacting the activation server.
If you are aware of the ip check if there is any previous installation up and running. If further assistance is requires you are always welcome to create a support ticket to check this further.

 

[SweetAction]

Actually, that's not a bad idea to visit the IPort (443/5001) and see if 3CX is there. See if you can login, etc. Might give you some clues as to what it is doing and you might be able to use terminal to find out more info or restore a blank DB with another license key?

 

[Charles_3CX]

Yup I did a search and I know who the owner of that IP address is that replaced mine. How do I do an abuse report

Have you also checked if you have a secondary machine that was set up with this same license and used for the 3cx failover?