Possible Obihai ATA security issue?
This morning I happened to check my pihole logs and noticed my Obihai 200 ATA had made thousands of requests to the following domains within a period of a few hours yesterday.
talk.google.com - approx 2500 times
voip.freephoneline.ca - approx 1800 times
I noticed the requests stopped at around 6:30pm. Not quite sure if it's a security issue or something else going on. I noticed it this morning and haven't had the time to investigate further before I went to work. For the time being, I've just powered off the ATA.
No port forwarding is being done for the ATA. It is behind an Edgerouter X.
The ATA has been setup for the last couple of years as far as I can remember. I check logs often and this is the first time noticing the obihai doing something like this.
I haven't used VoIP.ms for a few years now and no VoIP.ms account is associated with this ATA.
Yes, there are Google Voice and freephoneline accounts. Pretty sure no calls were received or made during this period. Honestly, this thing gets very little use.
talk.google.com - approx 2500 times
voip.freephoneline.ca - approx 1800 times
I noticed the requests stopped at around 6:30pm. Not quite sure if it's a security issue or something else going on. I noticed it this morning and haven't had the time to investigate further before I went to work. For the time being, I've just powered off the ATA.
No port forwarding is being done for the ATA. It is behind an Edgerouter X.
The ATA has been setup for the last couple of years as far as I can remember. I check logs often and this is the first time noticing the obihai doing something like this.
I haven't used VoIP.ms for a few years now and no VoIP.ms account is associated with this ATA.
Yes, there are Google Voice and freephoneline accounts. Pretty sure no calls were received or made during this period. Honestly, this thing gets very little use.
