Please be aware, I am a newb!
Our outbound dialer is working properly however it has been compromised and we cannot determine from where or how. Every five minutes a batch of International calls goes out. We have our SIP provider/gateway blocking these calls but we would like to determine the source and close the loop. Below is the batch:
-- Attempting call on SIP/s/0112698100289 for application Playback(hello) (Retry 1)
-- Attempting call on SIP/s/0112698100289 for application Playback(hello) (Retry 1)
-- Attempting call on SIP/s/0112698100289 for application Playback(hello) (Retry 1)
-- Attempting call on SIP/s/0112698100289 for application Playback(hello) (Retry 1)
-- Attempting call on SIP/s/0112698100289 for application Playback(hello) (Retry 1)
-- Attempting call on SIP/s/0112698100289 for application Playback(hello) (Retry 1)
-- Attempting call on SIP/s/0112698100289 for application Playback(hello) (Retry 1)
-- Attempting call on SIP/s/0112698100289 for application Playback(hello) (Retry 1)
-- Attempting call on SIP/s/0112698100289 for application Playback(hello) (Retry 1)
-- Attempting call on SIP/s/0112698100289 for application Playback(hello) (Retry 1)
-- Attempting call on SIP/s/0112698100289 for application Playback(hello) (Retry 1)
-- Attempting call on SIP/s/0112698100289 for application Playback(hello) (Retry 1)
-- Attempting call on SIP/s/0112698100289 for application Playback(hello) (Retry 1)
-- Attempting call on SIP/s/0112698100289 for application Playback(hello) (Retry 1)
-- Attempting call on SIP/s/0112698100289 for application Playback(hello) (Retry 1)
-- Attempting call on SIP/s/0112698100289 for application Playback(hello) (Retry 1)
-- Attempting call on SIP/s/0112698100289 for application Playback(hello) (Retry 1)
-- Attempting call on SIP/s/0112698100289 for application Playback(hello) (Retry 1)
-- Attempting call on SIP/s/0112698100289 for application Playback(hello) (Retry 1)
-- Attempting call on SIP/s/0112698100289 for application Playback(hello) (Retry 1)
As I said, the calls are being blocked so they inevitably come back with the following:
-- Got SIP response 603 "Declined" back from x.x.x.x
-- Got SIP response 603 "Declined" back from x.x.x.x
-- Got SIP response 603 "Declined" back from x.x.x.x
-- Got SIP response 603 "Declined" back from x.x.x.x
-- Got SIP response 603 "Declined" back from x.x.x.x
-- Got SIP response 603 "Declined" back from x.x.x.x
**x.x.x.x = Our SIP Gateways IP Address
Can anyone assist me in determining how this is happening?
Thanks,
MOD2011