[Freeswitch-users] Security - How can I prevent these calls?

14 Mar 2016


      I have a small setup for a small business that I've been testing; however,
it appears that someone has hacked there way into making calls ($30 worth
in just a few minutes). Can anyone provide me guidance on how to prevent
these calls? Below is my ACL and a partial log:


<configuration name="acl.conf" description="Network Lists">
  <network-lists>

    <list name="lan" default="allow">
      <node type="allow" cidr="192.168.0.0/24"/>
      <!--<node type="deny" cidr="192.168.42.42/32"/> -->
    </list>


    <list name="domains" default="deny">
      <!-- domain= is special it scans the domain from the directory to
build the ACL -->
      <node type="allow" domain="$${domain}"/>
      <node type="allow" cidr="192.168.0.0/24"/>
 <node type="allow" cidr="107.20.251.237/32" />
 <node type="allow" cidr="107.20.176.37/32" />
 <node type="allow" cidr="184.169.138.133/32" />
 <node type="allow" cidr="54.215.5.82/32" />
    </list>

  </network-lists>
</configuration>

3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:48.850490 [NOTICE]
switch_channel.c:1091 New Channel sofia/internal/10000000@192.168.0.10:5060
[3ff60ad1-2ac7-46e8-b841-03fff79f972e]
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:48.850490 [DEBUG]
switch_core_state_machine.c:473 (sofia/internal/10000000@192.168.0.10:5060)
Running State Change CS_NEW
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:48.850490 [DEBUG]
sofia.c:9244 sofia/internal/10000000@192.168.0.10:5060 receiving invite
from 46.166.160.136:5074 version: 1.7.0  64bit
2016-03-14 11:29:48.850490 [DEBUG] sofia.c:9411 IP 46.166.160.136 Rejected
by acl "domains". Falling back to Digest auth.
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:48.870521 [DEBUG]
switch_core_state_machine.c:492 (sofia/internal/10000000@192.168.0.10:5060)
State NEW
2016-03-14 11:29:48.870521 [DEBUG] sofia.c:2147 detaching session
3ff60ad1-2ac7-46e8-b841-03fff79f972e
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [WARNING]
switch_core_state_machine.c:576 3ff60ad1-2ac7-46e8-b841-03fff79f972e
sofia/internal/10000000@192.168.0.10:5060 Abandoned
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [NOTICE]
switch_core_state_machine.c:579 Hangup sofia/internal/
10000000@192.168.0.10:5060 [CS_NEW] [WRONG_CALL_STATE]
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG]
switch_core_state_machine.c:473 (sofia/internal/10000000@192.168.0.10:5060)
Running State Change CS_HANGUP
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG]
switch_core_state_machine.c:739 (sofia/internal/10000000@192.168.0.10:5060)
Callstate Change DOWN -> HANGUP
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG]
switch_core_state_machine.c:741 (sofia/internal/10000000@192.168.0.10:5060)
State HANGUP
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG]
mod_sofia.c:431 Channel sofia/internal/10000000@192.168.0.10:5060 hanging
up, cause: WRONG_CALL_STATE
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG]
switch_core_state_machine.c:60 sofia/internal/10000000@192.168.0.10:5060
Standard HANGUP, cause: WRONG_CALL_STATE
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG]
switch_core_state_machine.c:741 (sofia/internal/10000000@192.168.0.10:5060)
State HANGUP going to sleep
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG]
switch_core_state_machine.c:508 (sofia/internal/10000000@192.168.0.10:5060)
State Change CS_HANGUP -> CS_REPORTING
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG]
switch_core_state_machine.c:473 (sofia/internal/10000000@192.168.0.10:5060)
Running State Change CS_REPORTING
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG]
switch_core_state_machine.c:827 (sofia/internal/10000000@192.168.0.10:5060)
State REPORTING
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG]
switch_core_state_machine.c:104 sofia/internal/10000000@192.168.0.10:5060
Standard REPORTING, cause: WRONG_CALL_STATE
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG]
switch_core_state_machine.c:827 (sofia/internal/10000000@192.168.0.10:5060)
State REPORTING going to sleep
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG]
switch_core_state_machine.c:499 (sofia/internal/10000000@192.168.0.10:5060)
State Change CS_REPORTING -> CS_DESTROY
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG]
switch_core_session.c:1646 Session 384 (sofia/internal/
10000000@192.168.0.10:5060) Locked, Waiting on external entities
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [NOTICE]
switch_core_session.c:1664 Session 384 (sofia/internal/
10000000@192.168.0.10:5060) Ended
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [NOTICE]
switch_core_session.c:1668 Close Channel sofia/internal/
10000000@192.168.0.10:5060 [CS_DESTROY]
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG]
switch_core_state_machine.c:630 (sofia/internal/10000000@192.168.0.10:5060)
Running State Change CS_DESTROY
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG]
switch_core_state_machine.c:640 (sofia/internal/10000000@192.168.0.10:5060)
State DESTROY
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG]
mod_sofia.c:341 sofia/internal/10000000@192.168.0.10:5060 SOFIA DESTROY
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG]
switch_core_state_machine.c:111 sofia/internal/10000000@192.168.0.10:5060
Standard DESTROY
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG]
switch_core_state_machine.c:640 (sofia/internal/10000000@192.168.0.10:5060)
State DESTROY going to sleep
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG]
sofia.c:5974 Remote Reason: 16
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG]
sofia.c:6756 Channel sofia/external/4721935380 entering state
[terminated][480]
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [NOTICE]
sofia.c:7775 Hangup sofia/external/4721935380 [CS_EXCHANGE_MEDIA]
[NORMAL_CLEARING]
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG]
switch_ivr_bridge.c:705 sofia/external/4721935380 ending bridge by request
from read function
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG]
switch_ivr_bridge.c:778 BRIDGE THREAD DONE [sofia/external/4721935380]
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG]
switch_core_state_machine.c:542 (sofia/external/4721935380) State
EXCHANGE_MEDIA going to sleep
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG]
switch_core_state_machine.c:473 (sofia/external/4721935380) Running State
Change CS_HANGUP
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG]
switch_core_state_machine.c:739 (sofia/external/4721935380) Callstate
Change EARLY -> HANGUP
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG]
switch_core_state_machine.c:741 (sofia/external/4721935380) State HANGUP
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG]
mod_sofia.c:431 Channel sofia/external/4721935380 hanging up, cause:
NORMAL_CLEARING
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG]
switch_core_state_machine.c:60 sofia/external/4721935380 Standard HANGUP,
cause: NORMAL_CLEARING
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG]
switch_core_state_machine.c:741 (sofia/external/4721935380) State HANGUP
going to sleep
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG]
switch_core_state_machine.c:508 (sofia/external/4721935380) State Change
CS_HANGUP -> CS_REPORTING
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG]
switch_core_state_machine.c:473 (sofia/external/4721935380) Running State
Change CS_REPORTING
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG]
switch_core_state_machine.c:827 (sofia/external/4721935380) State REPORTING
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG]
switch_core_state_machine.c:104 sofia/external/4721935380 Standard
REPORTING, cause: NORMAL_CLEARING
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG]
switch_core_state_machine.c:827 (sofia/external/4721935380) State REPORTING
going to sleep
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG]
switch_core_state_machine.c:499 (sofia/external/4721935380) State Change
CS_REPORTING -> CS_DESTROY
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG]
switch_core_session.c:1646 Session 382 (sofia/external/4721935380) Locked,
Waiting on external entities
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG]
switch_ivr_bridge.c:778 BRIDGE THREAD DONE [sofia/external/
7070@76.188.116.163]
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [NOTICE]
switch_channel.c:4801 Hangup sofia/external/7070@76.188.116.163
[CS_EXECUTE] [NORMAL_CLEARING]
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.451379 [NOTICE]
switch_core_session.c:1664 Session 382 (sofia/external/4721935380) Ended
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.451379 [NOTICE]
switch_core_session.c:1668 Close Channel sofia/external/4721935380
[CS_DESTROY]
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG]
switch_core_session.c:2796 sofia/external/7070@76.188.116.163 skip receive
message [APPLICATION_EXEC_COMPLETE] (channel is hungup already)
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG]
switch_core_state_machine.c:539 (sofia/external/7070@76.188.116.163) State
EXECUTE going to sleep
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG]
switch_core_state_machine.c:473 (sofia/external/7070@76.188.116.163)
Running State Change CS_HANGUP
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.451379 [DEBUG]
switch_core_state_machine.c:630 (sofia/external/4721935380) Running State
Change CS_DESTROY
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.451379 [DEBUG]
switch_core_state_machine.c:640 (sofia/external/4721935380) State DESTROY
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG]
switch_core_state_machine.c:739 (sofia/external/7070@76.188.116.163)
Callstate Change EARLY -> HANGUP
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.451379 [DEBUG]
mod_sofia.c:341 sofia/external/4721935380 SOFIA DESTROY
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG]
switch_core_state_machine.c:741 (sofia/external/7070@76.188.116.163) State
HANGUP
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG]
mod_sofia.c:425 sofia/external/7070@76.188.116.163 Overriding SIP cause 480
with 480 from the other leg
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG]
mod_sofia.c:431 Channel sofia/external/7070@76.188.116.163 hanging up,
cause: NORMAL_CLEARING
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG]
mod_sofia.c:568 Responding to INVITE with: 480
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG]
switch_core_state_machine.c:60 sofia/external/7070@76.188.116.163 Standard
HANGUP, cause: NORMAL_CLEARING
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG]
switch_core_state_machine.c:741 (sofia/external/7070@76.188.116.163) State
HANGUP going to sleep
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG]
switch_core_state_machine.c:508 (sofia/external/7070@76.188.116.163) State
Change CS_HANGUP -> CS_REPORTING
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG]
switch_core_state_machine.c:473 (sofia/external/7070@76.188.116.163)
Running State Change CS_REPORTING
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG]
switch_core_state_machine.c:827 (sofia/external/7070@76.188.116.163) State
REPORTING
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG]
switch_core_state_machine.c:104 sofia/external/7070@76.188.116.163 Standard
REPORTING, cause: NORMAL_CLEARING
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG]
switch_core_state_machine.c:827 (sofia/external/7070@76.188.116.163) State
REPORTING going to sleep
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG]
switch_core_state_machine.c:499 (sofia/external/7070@76.188.116.163) State
Change CS_REPORTING -> CS_DESTROY
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG]
switch_core_session.c:1646 Session 381 (sofia/external/7070@76.188.116.163)
Locked, Waiting on external entities
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [NOTICE]
switch_core_session.c:1664 Session 381 (sofia/external/7070@76.188.116.163)
Ended
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [NOTICE]
switch_core_session.c:1668 Close Channel sofia/external/7070@76.188.116.163
[CS_DESTROY]
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG]
switch_core_state_machine.c:630 (sofia/external/7070@76.188.116.163)
Running State Change CS_DESTROY
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG]
switch_core_state_machine.c:640 (sofia/external/7070@76.188.116.163) State
DESTROY
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG]
mod_sofia.c:341 sofia/external/7070@76.188.116.163 SOFIA DESTROY
2016-03-14 11:30:05.530466 [DEBUG] switch_nat.c:568 unmapped public port
23574 protocol UDP to localport 23574
2016-03-14 11:30:06.650545 [DEBUG] switch_nat.c:568 unmapped public port
24394 protocol UDP to localport 24394
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:06.650545 [DEBUG]
switch_core_state_machine.c:111 sofia/external/7070@76.188.116.163 Standard
DESTROY
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:06.650545 [DEBUG]
switch_core_state_machine.c:640 (sofia/external/7070@76.188.116.163) State
DESTROY going to sleep
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:06.690512 [DEBUG]
switch_core_state_machine.c:111 sofia/external/4721935380 Standard DESTROY
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:06.690512 [DEBUG]
switch_core_state_machine.c:640 (sofia/external/4721935380) State DESTROY
going to sleep
2016-03-14 11:30:08.970671 [WARNING] sofia_reg.c:2874 Can't find user [
7070@76.188.116.163] from 104.245.99.71
You must define a domain called '76.188.116.163' in your directory and add
a user with the id="7070" attribute
and you must configure your device to use the proper domain in it's
authentication credentials.
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [NOTICE]
switch_channel.c:1091 New Channel sofia/external/7070@76.188.116.163
[351981a2-a412-49bb-a554-0df34a002f86]
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG]
switch_core_state_machine.c:473 (sofia/external/7070@76.188.116.163)
Running State Change CS_NEW
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG]
sofia.c:9244 sofia/external/7070@76.188.116.163 receiving invite from
104.245.99.71:6688 version: 1.7.0  64bit
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG]
sofia.c:6756 Channel sofia/external/7070@76.188.116.163 entering state
[received][100]
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG]
sofia.c:6766 Remote SDP:
351981a2-a412-49bb-a554-0df34a002f86 v=0
351981a2-a412-49bb-a554-0df34a002f86 o=- 21305208 21305221 IN IP4
104.245.99.71
351981a2-a412-49bb-a554-0df34a002f86 s=eyeBeam
351981a2-a412-49bb-a554-0df34a002f86 c=IN IP4 104.245.99.71
351981a2-a412-49bb-a554-0df34a002f86 t=0 0
351981a2-a412-49bb-a554-0df34a002f86 m=audio 6690 RTP/AVP 100 6 0 8 3 18 5
101
351981a2-a412-49bb-a554-0df34a002f86 a=rtpmap:100 speex/16000
351981a2-a412-49bb-a554-0df34a002f86 a=rtpmap:101 telephone-event/8000
351981a2-a412-49bb-a554-0df34a002f86 a=fmtp:101 0-15
351981a2-a412-49bb-a554-0df34a002f86 a=alt:1 1 : 8EB1B249 0000007D
104.245.99.71 6690
351981a2-a412-49bb-a554-0df34a002f86
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG]
sofia.c:7121 (sofia/external/7070@76.188.116.163) State Change CS_NEW ->
CS_INIT
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG]
switch_core_state_machine.c:492 (sofia/external/7070@76.188.116.163) State
NEW
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG]
switch_core_state_machine.c:473 (sofia/external/7070@76.188.116.163)
Running State Change CS_INIT
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG]
switch_core_state_machine.c:516 (sofia/external/7070@76.188.116.163) State
INIT
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG]
mod_sofia.c:88 sofia/external/7070@76.188.116.163 SOFIA INIT
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG]
switch_core_state_machine.c:40 sofia/external/7070@76.188.116.163 Standard
INIT
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG]
switch_core_state_machine.c:48 (sofia/external/7070@76.188.116.163) State
Change CS_INIT -> CS_ROUTING
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG]
switch_core_state_machine.c:516 (sofia/external/7070@76.188.116.163) State
INIT going to sleep
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG]
switch_core_state_machine.c:473 (sofia/external/7070@76.188.116.163)
Running State Change CS_ROUTING
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG]
switch_channel.c:2240 (sofia/external/7070@76.188.116.163) Callstate Change
DOWN -> RINGING
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG]
switch_core_state_machine.c:532 (sofia/external/7070@76.188.116.163) State
ROUTING
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG]
mod_sofia.c:141 sofia/external/7070@76.188.116.163 SOFIA ROUTING
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG]
switch_core_state_machine.c:166 sofia/external/7070@76.188.116.163 Standard
ROUTING
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [INFO]
mod_dialplan_xml.c:637 Processing 7070 <7070>->004721935380 in context
public
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/
7070@76.188.116.163 parsing [public->Calls to Plivo] continue=false
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/
7070@76.188.116.163 Regex (FAIL) [Calls to Plivo]
destination_number(004721935380) =~ /^(1{0,1}\d{10})$/ break=on-false
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/
7070@76.188.116.163 parsing [public->unloop] continue=false
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/
7070@76.188.116.163 Regex (PASS) [unloop] ${unroll_loops}(true) =~ /^true$/
break=on-false
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/
7070@76.188.116.163 Regex (FAIL) [unloop] ${sip_looped_call}() =~ /^true$/
break=on-false
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/
7070@76.188.116.163 parsing [public->outside_call] continue=true
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/
7070@76.188.116.163 Absolute Condition [outside_call]
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/
7070@76.188.116.163 Action set(outside_call=true)
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/
7070@76.188.116.163 Action export(RFC2822_DATE=${strftime(%a, %d %b %Y %T
%z)})
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/
7070@76.188.116.163 parsing [public->call_debug] continue=true
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/
7070@76.188.116.163 Regex (FAIL) [call_debug] ${call_debug}(false) =~
/^true$/ break=never
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/
7070@76.188.116.163 parsing [public->public_extensions] continue=false
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/
7070@76.188.116.163 Regex (FAIL) [public_extensions]
destination_number(004721935380) =~ /^(10[01][0-9])$/ break=on-false
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/
7070@76.188.116.163 parsing [public->group_dial_standard] continue=false
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/
7070@76.188.116.163 Regex (FAIL) [group_dial_standard]
destination_number(004721935380) =~ /^2000$/ break=on-false
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/
7070@76.188.116.163 parsing [public->public_did] continue=false
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/
7070@76.188.116.163 Regex (FAIL) [public_did]
destination_number(004721935380) =~ /^(5551212)$/ break=on-false
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG]
switch_core_state_machine.c:216 (sofia/external/7070@76.188.116.163) State
Change CS_ROUTING -> CS_EXECUTE
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG]
switch_core_state_machine.c:532 (sofia/external/7070@76.188.116.163) State
ROUTING going to sleep
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG]
switch_core_state_machine.c:473 (sofia/external/7070@76.188.116.163)
Running State Change CS_EXECUTE
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG]
switch_core_state_machine.c:539 (sofia/external/7070@76.188.116.163) State
EXECUTE
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG]
mod_sofia.c:196 sofia/external/7070@76.188.116.163 SOFIA EXECUTE
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG]
switch_core_state_machine.c:258 sofia/external/7070@76.188.116.163 Standard
EXECUTE
351981a2-a412-49bb-a554-0df34a002f86 EXECUTE sofia/external/
7070@76.188.116.163 set(outside_call=true)
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG]
mod_dptools.c:1498 SET sofia/external/7070@76.188.116.163
[outside_call]=[true]
351981a2-a412-49bb-a554-0df34a002f86 EXECUTE sofia/external/
7070@76.188.116.163 export(RFC2822_DATE=Mon, 14 Mar 2016 11:30:13 -0400)
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG]
switch_channel.c:1283 EXPORT (export_vars) [RFC2822_DATE]=[Mon, 14 Mar 2016
11:30:13 -0400]
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [NOTICE]
switch_core_state_machine.c:315 sofia/external/7070@76.188.116.163 has
executed the last dialplan instruction, hanging up.
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [NOTICE]
switch_core_state_machine.c:317 Hangup sofia/external/7070@76.188.116.163
[CS_EXECUTE] [NORMAL_CLEARING]
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG]
switch_core_state_machine.c:539 (sofia/external/7070@76.188.116.163) State
EXECUTE going to sleep
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG]
switch_core_state_machine.c:473 (sofia/external/7070@76.188.116.163)
Running State Change CS_HANGUP
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG]
switch_core_state_machine.c:739 (sofia/external/7070@76.188.116.163)
Callstate Change RINGING -> HANGUP
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG]
switch_core_state_machine.c:741 (sofia/external/7070@76.188.116.163) State
HANGUP
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG]
mod_sofia.c:431 Channel sofia/external/7070@76.188.116.163 hanging up,
cause: NORMAL_CLEARING
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG]
mod_sofia.c:568 Responding to INVITE with: 480
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG]
switch_core_state_machine.c:60 sofia/external/7070@76.188.116.163 Standard
HANGUP, cause: NORMAL_CLEARING
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG]
switch_core_state_machine.c:741 (sofia/external/7070@76.188.116.163) State
HANGUP going to sleep
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG]
switch_core_state_machine.c:508 (sofia/external/7070@76.188.116.163) State
Change CS_HANGUP -> CS_REPORTING
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG]
switch_core_state_machine.c:473 (sofia/external/7070@76.188.116.163)
Running State Change CS_REPORTING
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG]
switch_core_state_machine.c:827 (sofia/external/7070@76.188.116.163) State
REPORTING
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG]
switch_core_state_machine.c:104 sofia/external/7070@76.188.116.163 Standard
REPORTING, cause: NORMAL_CLEARING
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG]
switch_core_state_machine.c:827 (sofia/external/7070@76.188.116.163) State
REPORTING going to sleep
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG]
switch_core_state_machine.c:499 (sofia/external/7070@76.188.116.163) State
Change CS_REPORTING -> CS_DESTROY
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG]
switch_core_session.c:1646 Session 385 (sofia/external/7070@76.188.116.163)
Locked, Waiting on external entities
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [NOTICE]
switch_core_session.c:1664 Session 385 (sofia/external/7070@76.188.116.163)
Ended
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [NOTICE]
switch_core_session.c:1668 Close Channel sofia/external/7070@76.188.116.163
[CS_DESTROY]
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG]
switch_core_state_machine.c:630 (sofia/external/7070@76.188.116.163)
Running State Change CS_DESTROY
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG]
switch_core_state_machine.c:640 (sofia/external/7070@76.188.116.163) State
DESTROY
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG]
mod_sofia.c:341 sofia/external/7070@76.188.116.163 SOFIA DESTROY
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG]
switch_core_state_machine.c:111 sofia/external/7070@76.188.116.163 Standard
DESTROY
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG]
switch_core_state_machine.c:640 (sofia/external/7070@76.188.116.163) State
DESTROY going to sleep

[Freeswitch-users] Security - How can I prevent these calls?

Samuel Reamer