Receive Call from unknown user

Home » Asterisk Users » Receive Call from unknown user
Asterisk Users 2 Comments

Hello List,

I have noticed for the past few weeks that someone from an unknown IP is
trying to make a call to my Asterisk box, below is the sample content of the
log file. Sometimes the calls are being made every seconds.

Is my system being hack by someone?

Oct 12 09:41:47] VERBOSE[3114] netsock.c: == Using SIP VRTP CoS mark 6
[Oct 12 09:41:47] VERBOSE[21627] pbx.c: — Executing
[99541442073479999@from-sip-external:1] NoOp(“SIP/113.105.153.251-00000265”,
“Received incoming SIP connection from unknown peer to 99541442073479999”)
in new stack
[Oct 12 09:41:47] VERBOSE[21627] pbx.c: — Executing
[99541442073479999@from-sip-external:2] Set(“SIP/113.105.153.251-00000265”,
“DID=99541442073479999”) in new stack
[Oct 12 09:41:47] VERBOSE[21627] pbx.c: — Executing
[99541442073479999@from-sip-external:3] Goto(“SIP/113.105.153.251-00000265”,
“s,1”) in new stack
[Oct 12 09:41:47] VERBOSE[21627] pbx.c: — Goto (from-sip-external,s,1)
[Oct 12 09:41:47] VERBOSE[21627] pbx.c: — Executing [s@from-sip-external:1]
GotoIf(“SIP/113.105.153.251-00000265”, “0?checklang:noanonymous”) in new
stack
[Oct 12 09:41:47] VERBOSE[21627] pbx.c: — Goto (from-sip-external,s,5)
[Oct 12 09:41:47] VERBOSE[21627] pbx.c: — Executing [s@from-sip-external:5]
Set(“SIP/113.105.153.251-00000265”, “TIMEOUT(absolute)=15”) in new stack
[Oct 12 09:41:47] VERBOSE[21627] func_timeout.c: Channel will hangup at
2010-10-12 09:42:02.042 PHT.
[Oct 12 09:41:47] VERBOSE[21627] pbx.c: — Executing [s@from-sip-external:6]
Answer(“SIP/113.105.153.251-00000265”, “”) in new stack

Please Advise.

Malvin

2 thoughts on - Receive Call from unknown user

  • Am 12.10.10 07:57, schrieb Malvin Rito:
    hello,

    if you look at the ip,where this calls come from, it say
    113.105.153.251 ->
    inetnum: 113.96.0.0 – 113.111.255.255
    netname: CHINANET-GD
    descr: CHINANET Guangdong province network
    descr: Data Communication Division
    descr: China Telecom

    so if you dont know someone in china, it would be a good idea to block
    this AND set allowguest=no to prevent this in future.

    best regards

    stefan schmidt