Has my sigate UK account been hijacked because of LMCE?

[ladekribs]

Fibres,

loggs found at Web admin - Advanced - configuration - Phones setup - (FreePBX) - Reports

[fibres]

That is strange then.

Not sure how they accessed your account then. Can sipgate tell you the ip address that the calls were made from?
Or at least confirm if it was from your ip or not?

Might be worth just having a quick look there purps to see if they have got in through your system.

May shed some light on it.

Regards

[twodogs]

Purps,

Nothing to add except my condolences. Simultaneous problems with MCE, VOIP provider, and SWMBO is the trifecta of pain.

Twodogs

[purps]

That is strange then.

Not sure how they accessed your account then. Can sipgate tell you the ip address that the calls were made from?
Or at least confirm if it was from your ip or not?

Might be worth just having a quick look there purps to see if they have got in through your system.

May shed some light on it.

Regards

Thanks, yes, I will contact sipgate and ask that question. Anything else you think I should ask whilst I am there?

Purps,

Nothing to add except my condolences. Simultaneous problems with MCE, VOIP provider, and SWMBO is the trifecta of pain.

Twodogs

Thank you Twodogs, it's not that bad, perhaps I am being a little melodramatic. We have far more important things going on at the moment. I have just accepted a new job, and we will be buying our first house together soon, so it's all go. I will certainly be getting back on the wiki tasks now that the interviews are finally over!

Cheers,
Matt.

[fibres]

I would just check the logs suggested above by ladekribs.

You should be able to see if the calls have been made through your system. If you see calls in the logs but dont understand what they mean pm me a copy and ill have a look.

Regards

[purps]

Thank you very much for that offer fibres, I will certainly take you up on that.

Sipgate got back to me very quickly - the calls were made from 41.239.173.188, which certainly isn't my IP. Does that add up, seeing as I don't reckon I had any extensions set up?

Thanks again.

Cheers,
Matt.

[fibres]

That seems to rule out the calls being made from an unsecured extension on your system.

However, Does the freePBX admin page have a default password set and do you know if it is accessible from outside your network?

If this is the case it is possible they got your details from the admin page.

Regards