Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations strongm on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

IP Office v9.1.0.0 hacker question

Status
Not open for further replies.

TN94z

Technical User
Apr 15, 2010
103
US
I got a call from one of our older locations today and they stated this morning they all heard someone say "I can see you. You better run." This particular office area is broken into several separate offices and they had several of the employees that stated they all heard it clear as day. So much so, they called the cops to come clear the office. The phones all belong to a page group, so I am thinking the only thing that makes sense is someone hacked into the system and got in the paging group from one of the phones. They use h323 phones.

My question is, where can I look at logs to maybe see if someone was trying to get in or did get in? Or where is the best place to start to try and find evidence to confirm this is the case or not?
 
the only log you can maybe see anything of that sort is the audit trail

but if someone connected via an external h.323 phone then you should see the extension in the programming and a user also the people should have seen the name of that user in the display during the page.

If they have vmpro it may also be a scheduled announcement that goes over the paging

Joe
FHandw, ACSS, ACIS

 
I can't remember if page calls would show up on the individual extensions call history. If it does it would at least tell you where the call came from.

Dermis and feline can be divorced by manifold methods.*
*(Disclaimer for all advise given)--'Version Dependent'
 
Ok maybe just me..🤷
A bit over the top to call the police…and for them to clear the office.

I’m assuming it’s a very sensitive working environment with a very silly page prank.

You can download call SMDR records from the past few days..otherwise you will have to have call logging software…or use in suggestions provided.
 
Well, it is a behavioral health location so not necessarily over the top with some of the things they deal with.

The prank would have to have been from an outside entity as it was a man's voice and no men work in the office.

I will look at the things suggested so far. Thanks guys and keep the ideas coming if anything comes to mind.

 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top