Could be sip trunking, i.e. someone found them and are routing a bunch of calls though ..
Dennis Burgess, CTO, Link Technologies, Inc. den...@linktechs.net<mailto:den...@linktechs.net> – 314-735-0270 – www.linktechs.net<http://www.linktechs.net> From: Af [mailto:af-boun...@afmug.com] On Behalf Of TJ Trout Sent: Friday, February 27, 2015 11:42 AM To: af@afmug.com Subject: Re: [AFMUG] PBX gone crazy? PBX ddos? Was a sip port. going to france? I just dropped them in the firewall. PBX is EvolutionPBX and they aren't using HD voice and no one is on the phone On Fri, Feb 27, 2015 at 9:29 AM, Tim Reichhart <t...@nwohiobb.com<mailto:t...@nwohiobb.com>> wrote: TJ What kind of ip pbx are they using? Also are they doing the HD calling because some IP pbxs allow you to add that G.711 code in it. Tim From: Af [mailto:af-boun...@afmug.com<mailto:af-boun...@afmug.com>] On Behalf Of TJ Trout Sent: Friday, February 27, 2015 12:19 PM To: af@afmug.com<mailto:af@afmug.com> Subject: [AFMUG] PBX gone crazy? PBX ddos? I have a customer with a IP PBX that all of the sudden is using 100% of their available upload and download capacity, when I torch them it shows as 4 sip connections but using way more bandwidth than a regular sip connection? http://s7.postimg.org/qy3n03ljv/Untitled.png Anyone ever seen something like this?