Computers & Electronics

Possible Obihai ATA security issue?

  • Last Updated:
  • Feb 1st, 2018 3:34 pm
[OP]
Deal Addict
User avatar
Sep 10, 2005
4495 posts
1803 upvotes
GTA

Possible Obihai ATA security issue?

This morning I happened to check my pihole logs and noticed my Obihai 200 ATA had made thousands of requests to the following domains within a period of a few hours yesterday.

talk.google.com - approx 2500 times
voip.freephoneline.ca - approx 1800 times

I noticed the requests stopped at around 6:30pm. Not quite sure if it's a security issue or something else going on. I noticed it this morning and haven't had the time to investigate further before I went to work. For the time being, I've just powered off the ATA.

No port forwarding is being done for the ATA. It is behind an Edgerouter X.

The ATA has been setup for the last couple of years as far as I can remember. I check logs often and this is the first time noticing the obihai doing something like this.

I haven't used VoIP.ms for a few years now and no VoIP.ms account is associated with this ATA.

Yes, there are Google Voice and freephoneline accounts. Pretty sure no calls were received or made during this period. Honestly, this thing gets very little use.
2 replies
Deal Fanatic
User avatar
Mar 3, 2002
9417 posts
3311 upvotes
I'm not seeing anything abnormal in my logs, but I don't use Obitalk.com. And I've disabled Obitalk service.
Now that firmware has been modded/hacked, I'm not sure I'll ever use Obitalk.com again: http://www.dslreports.com/forum/r317927 ... rmware-mod.

I've done steps 1 to 3 here: https://forums.redflagdeals.com/newegg- ... #p28508704.

I recommend setting strong admin and user passwords.

You may want to run syslog on the ATA: https://www.obitalk.com/info/faq/Troubl ... g-from-OBi
Last edited by Guest1284983 on Feb 1st, 2018 2:54 pm, edited 2 times in total.
Please do not PM me for tech support. I help out on the forums when I can. Thank you.
OBi200/202 Freephonline PDF guide (version 1.60) can be found here. OBi200 info can be found here. For OBi202 info, click here.
[OP]
Deal Addict
User avatar
Sep 10, 2005
4495 posts
1803 upvotes
GTA
If I remember correctly, I do have the obihai service disabled so that it wouldn't auto-upgrade firmware. I did use the site for initial setup though because I had a Voice account to add.

I know Google had an outage yesterday so I'm wondering if that has anything to do with it but not sure how fpl would be involved there.

I wouldn't mind just redoing everything without the Google voice account I guess.

Top

Thread Information

There is currently 1 user viewing this thread. (0 members and 1 guest)