Hello, After a clean install of both, debian and freeswitch ( with mod_radius_cdr enabled ) i noticed a few accounting-packages sent to strange ip's on port 1813. 120.0.0.224 ( at&t ) 32.45.27.224 ( chinaunicom ) i'm pretty sure those packages originate from mod_radius_cdr. since we're not related with these companys in any way, i'm wondering why mod_radius_cdr is ( at least trying ) to sent cdr's to those ip's. here is a sample of a cdr sent to at&t: ------------------------------ /U *xxx*.*xxx*.*xxx*.*xxx*:59323 -> *120.0.0.224*:1813// //....r...`/..I....I..(.....,&0670776c-2388-11e4-aef1-8b582cc877c8......l...*xxxxxxxxxxx*....l.......l...*xxxxxxx*....l.............l.......l...default....l...*xxxxxxxxxxxx*....l...."..l...src/switch_ivr_originate.c.'..l..!2014-08-14T09:53:05.848983+0200......).......O..f/ ---------------------------- I also searched the source files of mod_radius_cdr, but sadly ( or luckily ) no match. Somebody cares to look into this? If i'm in the wrong place for this question, maybe some of you can point me in the right direction ;) have a nice day, regards,