<html><head>
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
</head><body bgcolor="#FFFFFF" text="#000000"><br>
We saw that hitting our servers too quite often. Looks like some kind of
automated program. The script tries to call these numbers. It never got
successful though.<br>
<div class="moz-signature"><br>
Thanks,<br>
--<br>
Muhammad Naseer Bhatti<br>
<br>
</div>
<br>
<br>
I put the Who? in Mishehu wrote:
<blockquote cite="mid:5191799A.1010000@freeswitch.org" type="cite">
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
<div class="moz-cite-prefix">I bet that DID is hosted by Jawal.
Jawal is a Palestinian telco, but I think that 0598 is
specifically cellular, so it's not limited to Gaza. I've seen
these hitting other servers on the Interwebs as well...<br>
<br>
-Yossi<br>
<br>
On 05/13/2013 09:35 AM, Ken Rice wrote:<br>
</div>
<blockquote cite="mid:CDB66453.714CB%25krice@freeswitch.org"
type="cite"><title>Re: [Freeswitch-users] Strange CDR entry</title>
<font face="Monaco, Courier New"><span style="font-size:11pt">Ok
look at the 3rd column... This is someone trying to figure out
how to get calls thru your public context with various prefix
codexs... Notices how all the calls end with 972598371070
<-- that’s the intl destination umber probably a phone in
gaza (definitely in Isreali controlled areas, but I think I
looked up this number or similar number in the past)<br>
<br>
To protect yourself, only allow calls to local extentsions
from the public context... <br>
<br>
<br>
On 5/13/13 2:49 AM, "Steven Ayre" <<a
moz-do-not-send="true" href="steveayre@gmail.com">steveayre@gmail.com</a>>
wrote:<br>
<br>
</span></font>
<blockquote><font face="Monaco, Courier New"><span
style="font-size:11pt">The call duration is 0 seconds so no
they didn't get in. Any accepted call attempt will generate
a CDR even if it was not answered.<br>
<br>
They're coming in on the 'public' context which'll mean an
unauthenticated call on the external profile. That would be
the context allowing you to receive calls from strangers.
Providing that context doesn't allow them to dial out via
providers that charge you this isn't an issue.<br>
<br>
-Steve<br>
<br>
<br>
<br>
<br>
<br>
<br>
On 13 May 2013 07:17, Bala Murugan Mahendran <<a
moz-do-not-send="true" href="b2m@a-cti.com">b2m@a-cti.com</a>>
wrote:<br>
</span></font>
<blockquote><font face="Monaco, Courier New"><span
style="font-size:11pt">I have lot of entries like
1000,1001,1002 and so on, Is someone trying to get inside?
I believe they didn't in yet but how come we have cdr log
like this?<br>
<br>
"1004","1004","012972598371070","public","2013-05-12
07:30:07","","2013-05-12
07:30:07","0","0","NORMAL_CLEARING","c522fb02-bad5-11e2-8eaf-7bfd76dfd5d7","","","G729","G729"<br>
"1004","1004","013972598371070","public","2013-05-12
07:30:07","","2013-05-12
07:30:07","0","0","NORMAL_CLEARING","c5571b44-bad5-11e2-8eb3-7bfd76dfd5d7","","","G729","G729"<br>
"1004","1004","014972598371070","public","2013-05-12
07:30:07","","2013-05-12
07:30:07","0","0","NORMAL_CLEARING","c58eb428-bad5-11e2-8eb7-7bfd76dfd5d7","","","G729","G729"<br>
"1004","1004","010972598371070","public","2013-05-12
07:30:08","","2013-05-12
07:30:08","0","0","NORMAL_CLEARING","c5c42d4c-bad5-11e2-8ebb-7bfd76dfd5d7","","","G729","G729"<br>
"1004","1004","0061972598371070","public","2013-05-12
07:30:08","","2013-05-12
07:30:08","0","0","NORMAL_CLEARING","c5fe993c-bad5-11e2-8ebf-7bfd76dfd5d7","","","G729","G729"<br>
"1004","1004","0041972598371070","public","2013-05-12
07:30:09","","2013-05-12
07:30:09","0","0","NORMAL_CLEARING","c63f939c-bad5-11e2-8ec3-7bfd76dfd5d7","","","G729","G729"<br>
"1004","1004","000972598371070","public","2013-05-12
07:30:09","","2013-05-12
07:30:09","0","0","NORMAL_CLEARING","c67a9f5a-bad5-11e2-8ec7-7bfd76dfd5d7","","","G729","G729"<br>
"1004","1004","006972598371070","public","2013-05-12
07:30:09","","2013-05-12
07:30:09","0","0","NORMAL_CLEARING","c6afc2fc-bad5-11e2-8ecb-7bfd76dfd5d7","","","G729","G729"<br>
"1004","1004","002972598371070","public","2013-05-12
07:30:10","","2013-05-12
07:30:10","0","0","NORMAL_CLEARING","c6ec0b5e-bad5-11e2-8ecf-7bfd76dfd5d7","","","G729","G729"<br>
"1004","1004","810972598371070","public","2013-05-12
07:29:49","","2013-05-12
07:29:49","0","0","NORMAL_CLEARING","ba7999a4-bad5-11e2-8b6f-7bfd76dfd5d7","","","G729","G729"<br>
<br>
<br>
Thanks,<br>
Bala<br>
<br>
_________________________________________________________________________<br>
Professional FreeSWITCH Consulting Services:<br>
<a moz-do-not-send="true" href="consulting@freeswitch.org">consulting@freeswitch.org</a><br>
<a moz-do-not-send="true"
href="http://www.freeswitchsolutions.com">http://www.freeswitchsolutions.com</a><br>
<br>
FreeSWITCH-powered IP PBX: The CudaTel Communication
Server<br>
<a moz-do-not-send="true" href="http://www.cudatel.com">http://www.cudatel.com</a><br>
<br>
Official FreeSWITCH Sites<br>
<a moz-do-not-send="true" href="http://www.freeswitch.org">http://www.freeswitch.org</a><br>
<a moz-do-not-send="true"
href="http://wiki.freeswitch.org">http://wiki.freeswitch.org</a><br>
<a moz-do-not-send="true" href="http://www.cluecon.com">http://www.cluecon.com</a><br>
<br>
FreeSWITCH-users mailing list<br>
<a moz-do-not-send="true"
href="FreeSWITCH-users@lists.freeswitch.org">FreeSWITCH-users@lists.freeswitch.org</a><br>
<a moz-do-not-send="true"
href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br>
UNSUBSCRIBE:<a moz-do-not-send="true"
href="http://lists.freeswitch.org/mailman/options/freeswitch-users">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br>
<a moz-do-not-send="true" href="http://www.freeswitch.org">http://www.freeswitch.org</a><br>
<br>
</span></font></blockquote>
<font face="Monaco, Courier New"><span style="font-size:11pt"><br>
<br>
<hr align="CENTER" size="3" width="95%"></span></font><font
size="2"><font face="Consolas, Courier New, Courier"><span
style="font-size:10pt">_________________________________________________________________________<br>
Professional FreeSWITCH Consulting Services:<br>
<a moz-do-not-send="true" href="consulting@freeswitch.org">consulting@freeswitch.org</a><br>
<a moz-do-not-send="true"
href="http://www.freeswitchsolutions.com">http://www.freeswitchsolutions.com</a><br>
<br>
FreeSWITCH-powered IP PBX: The CudaTel Communication
Server<br>
<a moz-do-not-send="true" href="http://www.cudatel.com">http://www.cudatel.com</a><br>
<br>
Official FreeSWITCH Sites<br>
<a moz-do-not-send="true" href="http://www.freeswitch.org">http://www.freeswitch.org</a><br>
<a moz-do-not-send="true"
href="http://wiki.freeswitch.org">http://wiki.freeswitch.org</a><br>
<a moz-do-not-send="true" href="http://www.cluecon.com">http://www.cluecon.com</a><br>
<br>
FreeSWITCH-users mailing list<br>
<a moz-do-not-send="true"
href="FreeSWITCH-users@lists.freeswitch.org">FreeSWITCH-users@lists.freeswitch.org</a><br>
<a moz-do-not-send="true"
href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br>
UNSUBSCRIBE:<a moz-do-not-send="true"
href="http://lists.freeswitch.org/mailman/options/freeswitch-users">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br>
<a moz-do-not-send="true" href="http://www.freeswitch.org">http://www.freeswitch.org</a><br>
</span></font></font></blockquote>
<font size="2"><font face="Consolas, Courier New, Courier"><span
style="font-size:10pt"><br>
</span></font></font><font face="Monaco, Courier New"><span
style="font-size:11pt">-- <br>
Ken<br>
<font color="#0000FF"><u><a moz-do-not-send="true"
href="http://www.FreeSWITCH.org">http://www.FreeSWITCH.org</a><br>
<a moz-do-not-send="true" href="http://www.ClueCon.com">http://www.ClueCon.com</a><br>
<a moz-do-not-send="true" href="http://www.OSTAG.org">http://www.OSTAG.org</a><br>
</u></font>irc.freenode.net #freeswitch<br>
</span></font>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
<a moz-do-not-send="true" class="moz-txt-link-abbreviated" href="mailto:consulting@freeswitch.org">consulting@freeswitch.org</a>
<a moz-do-not-send="true" class="moz-txt-link-freetext" href="http://www.freeswitchsolutions.com">http://www.freeswitchsolutions.com</a>
FreeSWITCH-powered IP PBX: The CudaTel Communication Server
<a moz-do-not-send="true" class="moz-txt-link-freetext" href="http://www.cudatel.com">http://www.cudatel.com</a>
Official FreeSWITCH Sites
<a moz-do-not-send="true" class="moz-txt-link-freetext" href="http://www.freeswitch.org">http://www.freeswitch.org</a>
<a moz-do-not-send="true" class="moz-txt-link-freetext" href="http://wiki.freeswitch.org">http://wiki.freeswitch.org</a>
<a moz-do-not-send="true" class="moz-txt-link-freetext" href="http://www.cluecon.com">http://www.cluecon.com</a>
FreeSWITCH-users mailing list
<a moz-do-not-send="true" class="moz-txt-link-abbreviated" href="mailto:FreeSWITCH-users@lists.freeswitch.org">FreeSWITCH-users@lists.freeswitch.org</a>
<a moz-do-not-send="true" class="moz-txt-link-freetext" href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a>
UNSUBSCRIBE:<a moz-do-not-send="true" class="moz-txt-link-freetext" href="http://lists.freeswitch.org/mailman/options/freeswitch-users">http://lists.freeswitch.org/mailman/options/freeswitch-users</a>
<a moz-do-not-send="true" class="moz-txt-link-freetext" href="http://www.freeswitch.org">http://www.freeswitch.org</a>
</pre></blockquote>
<br>
<pre wrap="">_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
<a class="moz-txt-link-abbreviated" href="mailto:consulting@freeswitch.org">consulting@freeswitch.org</a>
<a class="moz-txt-link-freetext" href="http://www.freeswitchsolutions.com">http://www.freeswitchsolutions.com</a>
FreeSWITCH-powered IP PBX: The CudaTel Communication Server
<a class="moz-txt-link-freetext" href="http://www.cudatel.com">http://www.cudatel.com</a>
Official FreeSWITCH Sites
<a class="moz-txt-link-freetext" href="http://www.freeswitch.org">http://www.freeswitch.org</a>
<a class="moz-txt-link-freetext" href="http://wiki.freeswitch.org">http://wiki.freeswitch.org</a>
<a class="moz-txt-link-freetext" href="http://www.cluecon.com">http://www.cluecon.com</a>
FreeSWITCH-users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:FreeSWITCH-users@lists.freeswitch.org">FreeSWITCH-users@lists.freeswitch.org</a>
<a class="moz-txt-link-freetext" href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a>
UNSUBSCRIBE:<a class="moz-txt-link-freetext" href="http://lists.freeswitch.org/mailman/options/freeswitch-users">http://lists.freeswitch.org/mailman/options/freeswitch-users</a>
<a class="moz-txt-link-freetext" href="http://www.freeswitch.org">http://www.freeswitch.org</a>
</pre>
</blockquote>
</body></html>