Are these calls looking to originate from an internal or external calling party? If it’s internal it’s very likely these are scam calls coming from spoofed calling numbers. If you look into the details of these calls, either in SDL logs or CDR data, do you see these calls originating from an outside calling party? The same thing can apply for calls looking as it originated from an external calling party as well, but then it’s harder to make that generic assumption of the origin as it would always come in via a gateway.
