Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations Mike Lewis on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Panasonic PBX and KX TVA 50 VM Hacked - African numbers

Status
Not open for further replies.

ilikebirds12

IS-IT--Management
Oct 6, 2013
31
US
We have TRS implemented and I've updated the Message manager and System Manager passwords, but they are still attempting and it rings certain extensions on our phone system over and over with CID 1000:

Here's a log:
10/16/15 11:14AM 306 0006 <D>30680048525531150<I>1000 1000 1'08 00:00'00 $00000.00
10/16/15 11:14AM 306 0005 <D>30690048525531150<I>1000 1000 1'01 00:00'00 $00000.00
10/16/15 11:14AM 307 0014 <D>30740048525531150<I>1000 1000 0'32 00:00'00 $00000.00
10/16/15 11:14AM 307 0013 <D>30750048525531150<I>1000 1000 0'23 00:00'00 $00000.00
10/16/15 11:14AM 307 0012 <D>30760048525531150<I>1000 1000 0'16 00:00'00 $00000.00
10/16/15 11:14AM 307 0011 <D>30770048525531150<I>1000 1000 0'07 00:00'00 $00000.00
10/16/15 11:14AM 307 0010 <D>30780048525531150<I>1000 1000 0'02 00:00'00 $00000.00
10/16/15 11:14AM 307 0009 <D>30790048525531150<I>1000 1000 0'03 00:00'00 $00000.00
10/16/15 11:15AM 308 0008 <D>30800048525531150<I>1000 1000 0'07 00:00'01 $00000.00


Anything I can do to block this more?
 
if you lock down the vm ports on the system and delete any mailboxes they setup the numbers on.
make sure the fwd feature in class of service on the tvm is disabled
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top