[Freeswitch-users] Strange CDR entry

Tue May 14 06:57:58 MSD 2013

We saw that hitting our servers too quite often. Looks like some kind of 
automated program. The script tries to call these numbers. It never got 
successful though.

Thanks,
--
Muhammad Naseer Bhatti

I put the Who? in Mishehu wrote:
> I bet that DID is hosted by Jawal.  Jawal is a Palestinian telco, but 
> I think that 0598 is specifically cellular, so it's not limited to 
> Gaza.  I've seen these hitting other servers on the Interwebs as well...
>
> -Yossi
>
> On 05/13/2013 09:35 AM, Ken Rice wrote:
>> Ok look at the 3rd column... This is someone trying to figure out how 
>> to get calls thru your public context with various prefix codexs... 
>> Notices how all the calls end with 972598371070 <-- that’s the intl 
>> destination umber probably a phone in gaza (definitely in Isreali 
>> controlled areas, but I think I looked up this number or similar 
>> number in the past)
>>
>> To protect yourself, only allow calls to local extentsions from the 
>> public context...
>>
>>
>> On 5/13/13 2:49 AM, "Steven Ayre" <steveayre at gmail.com> wrote:
>>
>>     The call duration is 0 seconds so no they didn't get in. Any
>>     accepted call attempt will generate a CDR even if it was not
>>     answered.
>>
>>     They're coming in on the 'public' context which'll mean an
>>     unauthenticated call on the external profile. That would be the
>>     context allowing you to receive calls from strangers. Providing
>>     that context doesn't allow them to dial out via providers that
>>     charge you this isn't an issue.
>>
>>     -Steve
>>
>>
>>
>>
>>
>>
>>     On 13 May 2013 07:17, Bala Murugan Mahendran <b2m at a-cti.com> wrote:
>>
>>         I have lot of entries like 1000,1001,1002 and so on, Is
>>         someone trying to get inside? I believe they didn't in yet
>>         but how come we have cdr log like this?
>>
>>         "1004","1004","012972598371070","public","2013-05-12
>>         07:30:07","","2013-05-12
>>         07:30:07","0","0","NORMAL_CLEARING","c522fb02-bad5-11e2-8eaf-7bfd76dfd5d7","","","G729","G729"
>>         "1004","1004","013972598371070","public","2013-05-12
>>         07:30:07","","2013-05-12
>>         07:30:07","0","0","NORMAL_CLEARING","c5571b44-bad5-11e2-8eb3-7bfd76dfd5d7","","","G729","G729"
>>         "1004","1004","014972598371070","public","2013-05-12
>>         07:30:07","","2013-05-12
>>         07:30:07","0","0","NORMAL_CLEARING","c58eb428-bad5-11e2-8eb7-7bfd76dfd5d7","","","G729","G729"
>>         "1004","1004","010972598371070","public","2013-05-12
>>         07:30:08","","2013-05-12
>>         07:30:08","0","0","NORMAL_CLEARING","c5c42d4c-bad5-11e2-8ebb-7bfd76dfd5d7","","","G729","G729"
>>         "1004","1004","0061972598371070","public","2013-05-12
>>         07:30:08","","2013-05-12
>>         07:30:08","0","0","NORMAL_CLEARING","c5fe993c-bad5-11e2-8ebf-7bfd76dfd5d7","","","G729","G729"
>>         "1004","1004","0041972598371070","public","2013-05-12
>>         07:30:09","","2013-05-12
>>         07:30:09","0","0","NORMAL_CLEARING","c63f939c-bad5-11e2-8ec3-7bfd76dfd5d7","","","G729","G729"
>>         "1004","1004","000972598371070","public","2013-05-12
>>         07:30:09","","2013-05-12
>>         07:30:09","0","0","NORMAL_CLEARING","c67a9f5a-bad5-11e2-8ec7-7bfd76dfd5d7","","","G729","G729"
>>         "1004","1004","006972598371070","public","2013-05-12
>>         07:30:09","","2013-05-12
>>         07:30:09","0","0","NORMAL_CLEARING","c6afc2fc-bad5-11e2-8ecb-7bfd76dfd5d7","","","G729","G729"
>>         "1004","1004","002972598371070","public","2013-05-12
>>         07:30:10","","2013-05-12
>>         07:30:10","0","0","NORMAL_CLEARING","c6ec0b5e-bad5-11e2-8ecf-7bfd76dfd5d7","","","G729","G729"
>>         "1004","1004","810972598371070","public","2013-05-12
>>         07:29:49","","2013-05-12
>>         07:29:49","0","0","NORMAL_CLEARING","ba7999a4-bad5-11e2-8b6f-7bfd76dfd5d7","","","G729","G729"
>>
>>
>>         Thanks,
>>         Bala
>>
>>         _________________________________________________________________________
>>         Professional FreeSWITCH Consulting Services:
>>         consulting at freeswitch.org
>>         http://www.freeswitchsolutions.com
>>
>>         
>>         
>>
>>         Official FreeSWITCH Sites
>>         http://www.freeswitch.org
>>         http://wiki.freeswitch.org
>>         http://www.cluecon.com
>>
>>         FreeSWITCH-users mailing list
>>         FreeSWITCH-users at lists.freeswitch.org
>>         http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>>         UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
>>         http://www.freeswitch.org
>>
>>
>>
>>     ------------------------------------------------------------------------
>>     _________________________________________________________________________
>>     Professional FreeSWITCH Consulting Services:
>>     consulting at freeswitch.org
>>     http://www.freeswitchsolutions.com
>>
>>     
>>     
>>
>>     Official FreeSWITCH Sites
>>     http://www.freeswitch.org
>>     http://wiki.freeswitch.org
>>     http://www.cluecon.com
>>
>>     FreeSWITCH-users mailing list
>>     FreeSWITCH-users at lists.freeswitch.org
>>     http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>>     UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
>>     http://www.freeswitch.org
>>
>>
>> -- 
>> Ken
>> _http://www.FreeSWITCH.org
>> http://www.ClueCon.com
>> http://www.OSTAG.org
>> _irc.freenode.net #freeswitch
>>
>>
>> _________________________________________________________________________
>> Professional FreeSWITCH Consulting Services:
>> consulting at freeswitch.org
>> http://www.freeswitchsolutions.com
>>
>> 
>> 
>>
>> Official FreeSWITCH Sites
>> http://www.freeswitch.org
>> http://wiki.freeswitch.org
>> http://www.cluecon.com
>>
>> FreeSWITCH-users mailing list
>> FreeSWITCH-users at lists.freeswitch.org
>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
>> http://www.freeswitch.org
>
> _________________________________________________________________________
> Professional FreeSWITCH Consulting Services:
> consulting at freeswitch.org
> http://www.freeswitchsolutions.com
>
> 
> 
>
> Official FreeSWITCH Sites
> http://www.freeswitch.org
> http://wiki.freeswitch.org
> http://www.cluecon.com
>
> FreeSWITCH-users mailing list
> FreeSWITCH-users at lists.freeswitch.org
> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
> http://www.freeswitch.org
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.freeswitch.org/pipermail/freeswitch-users/attachments/20130514/83b44a60/attachment.html 