Calls from *9399

Started by CityOracle, September 14, 2018, 07:45:12 PM

Previous topic - Next topic

CityOracle

I am getting calls from *9399 (as displayed on my phone) every two minutes.  When I pick up, there is no sound.    Anyone ran in this issue before?   Am I being hacked?

The calls keep coming.  Very annoying.  I have to disconnect my device.

I'd appreciate any help!

-David


CityOracle

Thanks for the tips, Steve.

This is the second time that things like this happened.

When it happened a year ago, I researched and read the page in your reply.
I just double checked X_AcceptSipFromRegistrarOnly on SP1 to SP4 are all already enabled.

But the *9399 calls still got in.

Anything else to do to block them?

What are these calls?  Who are the callers?
What is the purpose?   Are they hackers or just some technical glitch?

Thanks a bunch!



SteveInWA

Robert's solution ought to work.  To confirm, have you looked at your call history on the OBi to see where these calls are coming from (which SP is being rung)?  You'd need to go to the OBi's local web page (not the OBiTALK portal) and look at the call history section.  If they're ringing the OBiTALK service, then the fix will kill those calls.

CityOracle

Robert/Steve,

Thanks for the help.

I apologize.  I don't know much about telephony and don't quite follow your advice.

I am not able to locate "Voice Services -> OBiTalk Service -> InboundCallRoute: {}".

How do I check the call history on the OBi?
Where can I find the OBi's local web page?

Thanks!
-David

azrobert

Signin here:
https://www.obitalk.com/obinet/
To enter OBi Expert from the Dashboard click on the gear ICON to the right of your OBixxx then select OBi Expert Config, confirm and select Enter OBi Expert.

Click on Voice Services then OBiTalk Service.

Uncheck both boxes to the right of the InboundCallRoute then change the Value to: {}
Click Submit at the bottom of the page

To access Call History:
Log directly into the OBi using the local interface.
Key the IP address of the OBi into a Web Browser and hit Enter
If you don't know the IP address, dial ***1 from the phone attached to the OBi

The UserID and default Password are both "admin".
Click Status on the left column then click Call History.

CityOracle

I was able to login at https://www.obitalk.com/obinet/

Then I clicked on the gear icon on the right for "OBi202     500 233 842"
But I can't find "Voice Services then OBiTalk Service"

I tried to attach is a file with screenshots to this post.
But the website report error.
If you give me an email address, I can email it.



On Call History, I still don't quit follow you.

Log directly into the OBi using the local interface.-- Is this the same as login to ObiTalk?
Or do you mean hook up a laptop directly to the device?

Thanks!


CityOracle

When I tried to attach a file, the website reports error as:

2: error_log(/var/log/forum/errors.log): failed to open stream: No such file or directory
File: /var/www/forum/Sources/Post.php
Line: 1530

SteveInWA

Quote from: CityOracle on September 16, 2018, 05:37:05 PM
I was able to login at https://www.obitalk.com/obinet/

Then I clicked on the gear icon on the right for "OBi202     500 233 842"
But I can't find "Voice Services then OBiTalk Service"

I tried to attach is a file with screenshots to this post.
But the website report error.
If you give me an email address, I can email it.



On Call History, I still don't quit follow you.

Log directly into the OBi using the local interface.-- Is this the same as login to ObiTalk?
Or do you mean hook up a laptop directly to the device?

Thanks!



1)  the forum screenshot function is broken; the error message you got is the symptom of that.  You aren't doing anything wrong.

2) here is a screenshot of the OBiTALK setting page:  https://drive.google.com/file/d/1hzTKOZqgkE66L2MvlI9VWqpwI2uHSvkX/view?usp=sharing

3) call history is stored in the device.  To see it, you need to sign into the device's own web page, via its IP address.  To hear the IP address, pick up the attached phone and key in ***1.  The default username and password are "admin".

Taoman

Quote from: CityOracle on September 16, 2018, 05:37:05 PM

Then I clicked on the gear icon on the right for "OBi202     500 233 842"
But I can't find "Voice Services then OBiTalk Service"

After clicking on the gear icon, scroll to bottom and select OBi Expert Configuration as azrobert posted.

Note: From the main OBi dashboard, select Edit Profile in the left-hand column. Scroll to bottom and check the box in front of "Enable OBi Expert Entry from Dashboard" under Advanced Options. You will then be able to go directly into OBi Expert Configuration from main dashboard.
Also uncheck box in front of "View Softphone on Dashboard."

SteveInWA

Quote from: Taoman on September 16, 2018, 07:33:07 PM
Quote from: CityOracle on September 16, 2018, 05:37:05 PM

Then I clicked on the gear icon on the right for "OBi202     500 233 842"
But I can't find "Voice Services then OBiTalk Service"

After clicking on the gear icon, scroll to bottom and select OBi Expert Configuration as azrobert posted.

Note: From the main OBi dashboard, select Edit Profile in the left-hand column. Scroll to bottom and check the box in front of "Enable OBi Expert Entry from Dashboard" under Advanced Options. You will then be able to go directly into OBi Expert Configuration from main dashboard.
Also uncheck box in front of "View Softphone on Dashboard."

Thanks for adding those details!

CityOracle

I was able to locate InboundCallRoute and changed it to {}

Thanks!!

On the local call history, I still don't quite follow.

Which one is the local interface?  Where can I find it?

Thanks!

Taoman

Quote from: CityOracle on September 16, 2018, 09:13:48 PM

On the local call history, I still don't quite follow.

Which one is the local interface?  Where can I find it?


Both azrobert and SteveInWA have given you precise instructions. I can't make it any clearer than they already have.

Quote from: azrobertTo access Call History:
Log directly into the OBi using the local interface.
Key the IP address of the OBi into a Web Browser and hit Enter
If you don't know the IP address, dial ***1 from the phone attached to the OBi

The UserID and default Password are both "admin".
Click Status on the left column then click Call History.

CityOracle

which one is the local interface?
Is it the same as the ObiTalk?


Taoman

The local interface is the built in web gui in your OBi device. It is accessible from a web browser using the local network ip address of your OBi device.

Just follow the directions. That's all you have to do.

CityOracle

Thanks for the help!

Finally figured out, it is simply typing in the IP in a browser.  I thought there was another local interface.

Anyway, located the suspicious call.
Can't send a screen shot here.  But the history shows:

Call 30   09/14/2018    21:24:17   
21:24:17   From PP1(ob73*'*'9399)   Fork to:  PH1 PH2
21:24:17      Ringing (PH1)
21:24:17      Ringing (PH2)
21:24:29      Call Connected (PH1)
21:24:47      Call Ended

Anything else I need to do to block these *9399 calls?

Many thanks!!
-David

drgeoff

Quote from: CityOracle on September 17, 2018, 10:47:16 AM
Thanks for the help!

Finally figured out, it is simply typing in the IP in a browser.  I thought there was another local interface.

Anyway, located the suspicious call.
Can't send a screen shot here.  But the history shows:

Call 30   09/14/2018    21:24:17   
21:24:17   From PP1(ob73*'*'9399)   Fork to:  PH1 PH2
21:24:17      Ringing (PH1)
21:24:17      Ringing (PH2)
21:24:29      Call Connected (PH1)
21:24:47      Call Ended

Anything else I need to do to block these *9399 calls?

Many thanks!!
-David
Anything else in addition to what?  If you have used the portal to change the Obitalk InboundCallRoute to {} that should be sufficient.

Sheffield_Steve

The question you need to ask yourself is how these external SIP calls are managing to connect to your OBi device?

The Obi is not a SIP PBX and does not need it's ports exposed to the internet.

All you have done is applied a band-aid.

You potentially have all your network at great risk of being compromised due to a router misconfiguration or lack of a router/firewall, etc.

CityOracle

Hi Steve,

Thank you for the response.
Now I am more concerned.

Internet comes in the house through a cable modem.

A router is connected directly to the modem.

The Obi202 device is connected directly to the router.

I assume the router has a firewall which protects the Boi202 device.

Should I make any changes to this configuration?

I'd appreciate your advice very much.
-David