TIPS IP addresses showing up on phone after ringing

360andy

New Member
Joined
Jun 3, 2010
Messages
9
Reaction score
0
We are having a strange problem with our phones ringing and no one there then ip address is showing up in caller id on phone. The ip addresses are from a large variety of sources

We are using RentPBX (PBX in a Flash 2.0.6.2.4 (Brown with FreePBX 2.10) and have iptables setup to limit access. We get nothing in our log files that I can see. We have sent a support call to rentPBX and everything was setup as they suggested. FreePBX has Anonymous SIP feature in general setting disabled.

Here are some of the ip addresses

[7:04:48 PM] 87.229.55.141
[7:31:13 PM] 74.209.242.21
[7:42:37 PM] 204.144.140.185
[7:57:13 PM] 204.144.140.183
[8:37:11 PM] 194.244.157.142
[8:45:24 PM] 204.144.140.183
[9:07:04 PM] 94.103.157.90

Our Network is hosted my Charter Cable and they are no help

I must be missing something so any help would be appreciated.

Thanks

Andy
 

rossiv

Guru
Joined
Oct 26, 2008
Messages
2,624
Reaction score
139
That's a direct SIP call if I had to take a guess. Someone is probing your network.
 

randy7376

Defnyddiwr Gweithredol
Joined
Sep 29, 2010
Messages
864
Reaction score
144
In FreePBX, under "Asterisk SIP Settings", is "Allow SIP Guests" set to "No"? If not, set it to "No".

If you're trying to get Charter technical support to help you with this, don't bother. They're clueless. If you still have a problem with, we're going to need more details - an incoming call log would be helpful.
 

360andy

New Member
Joined
Jun 3, 2010
Messages
9
Reaction score
0
Here is a sample of the CDR report I am unclear about the sources 100 and 111.

21 is a normal extension. Thanks for your help.

CDR_log.png
 

randy7376

Defnyddiwr Gweithredol
Joined
Sep 29, 2010
Messages
864
Reaction score
144
The CDR report does not have any pertinent information related to your issue. This should be an incoming call log (sanitized of any personal information) that can be found in /var/log/asterisk/full.

As you didn't mention it, did you check the settings mentioned in the post above?
 

360andy

New Member
Joined
Jun 3, 2010
Messages
9
Reaction score
0
Here is a sample of the full log. I don't know how to load up the full log.

[3011972597915419@from-sip-external:1] NoOp("SIP/67.222.133.199-000001fa", "Received incoming SIP connection from unknown peer to 3011972597915419") in new stack
[2013-06-24 09:29:31] VERBOSE[13066] pbx.c: -- Executing [3011972597915419@from-sip-external:2] Set("SIP/67.222.133.199-000001fa", "DID=3011972597915419") in new stack
[2013-06-24 09:29:31] VERBOSE[13066] pbx.c: -- Executing [3011972597915419@from-sip-external:3] Goto("SIP/67.222.133.199-000001fa", "s,1") in new stack
[2013-06-24 09:29:31] VERBOSE[13066] pbx.c: -- Goto (from-sip-external,s,1)
[2013-06-24 09:29:31] VERBOSE[13066] pbx.c: -- Executing [s@from-sip-external:1] GotoIf("SIP/67.222.133.199-000001fa", "0?from-trunk,3011972597915419,1") in new stack
[2013-06-24 09:29:31] VERBOSE[13066] pbx.c: -- Executing [s@from-sip-external:2] Set("SIP/67.222.133.199-000001fa", "TIMEOUT(absolute)=15") in new stack
[2013-06-24 09:29:31] VERBOSE[13066] func_timeout.c: Channel will hangup at 2013-06-24 09:29:46.820 PDT.
[2013-06-24 09:29:31] VERBOSE[13066] pbx.c: -- Executing [s@from-sip-external:3] Answer("SIP/67.222.133.199-000001fa", "") in new stack
[2013-06-24 09:29:32] VERBOSE[13066] pbx.c: == Spawn extension (from-sip-external, s, 3) exited non-zero on 'SIP/67.222.133.199-000001fa'
[2013-06-24 09:29:32] VERBOSE[13066] pbx.c: -- Executing [h@from-sip-external:1] NoOp("SIP/67.222.133.199-000001fa", "Hangup") in new stack
[2013-06-24 09:29:32] VERBOSE[13066] pbx.c: -- Executing [h@from-sip-external:2] Set("SIP/67.222.133.199-000001fa", "DID=s") in new stack
[2013-06-24 09:29:32] VERBOSE[13066] pbx.c: -- Executing [h@from-sip-external:3] Goto("SIP/67.222.133.199-000001fa", "s,1") in new stack
[2013-06-24 09:29:32] VERBOSE[13066] pbx.c: -- Goto (from-sip-external,s,1)
[2013-06-24 09:29:32] VERBOSE[13066] pbx.c: -- Executing [s@from-sip-external:1] GotoIf("SIP/67.222.133.199-000001fa", "0?from-trunk,s,1") in new stack
[2013-06-24 09:29:32] VERBOSE[13066] pbx.c: -- Executing [s@from-sip-external:2] Set("SIP/67.222.133.199-000001fa", "TIMEOUT(absolute)=15") in new stack
[2013-06-24 09:29:32] VERBOSE[13066] func_timeout.c: Channel will hangup at 2013-06-24 09:29:47.155 PDT.
 

rentpbx

Guru
Joined
Nov 2, 2010
Messages
109
Reaction score
16
I suggest that everyone who experience this probe to look at TravelinMan3 as well. Blocking Anonymous SIP in general is fine. For better sleep at night. TravelinMan3 added one layer protection on top of Anonymous SIP. Please refer to http://nerdvittles.com/?p=815. Thanks to PIAF team for their extra attention to PBX security. And... yes it support Dynamic IP, please read through the article.

Br
RentPBX Team
 

Members online

No members online now.

Forum statistics

Threads
25,782
Messages
167,509
Members
19,202
Latest member
pbxnewguy
Get 3CX - Absolutely Free!

Link up your team and customers Phone System Live Chat Video Conferencing

Hosted or Self-managed. Up to 10 users free forever. No credit card. Try risk free.

3CX
A 3CX Account with that email already exists. You will be redirected to the Customer Portal to sign in or reset your password if you've forgotten it.
Top