I recently found out some ‘anonymous calls’ appearing on my Asterisk box. It has appeared since yesterday.
When I checked my Asterisk logs by command ‘asterisk -vvvvvvvr’, I saw lot of strange logs like this:
== Using SIP RTP TOS bits 184
== Using SIP RTP CoS mark 5
-- Executing [900972595117934@from-sip-external:1] NoOp("SIP/203.250.x.x-0000003c", "Received incoming SIP connection from unknown peer to 900972595117934") in new stack
-- Executing [900972595117934@from-sip-external:2] Set("SIP/203.250.x.x-0000003c", "DID=900972595117934") in new stack
-- Executing [900972595117934@from-sip-external:3] Goto("SIP/203.250.x.x-0000003c", "s,1") in new stack
-- Goto (from-sip-external,s,1)
-- Executing [s@from-sip-external:1] GotoIf("SIP/203.250.x.x-0000003c", "0?checklang:noanonymous") in new stack
-- Goto (from-sip-external,s,5)
-- Executing [s@from-sip-external:5] Set("SIP/203.250.x.x-0000003c", "TIMEOUT(absolute)=15") in new stack
-- Channel will hangup at 2014-08-30 00:07:33.818 UTC.
-- Executing [s@from-sip-external:6] Log("SIP/203.250.x.x-0000003c", "WARNING,"Rejecting unknown SIP connection from 23.95.12.226"") in new stack
[2014-08-30 00:07:18] WARNING[15290][C-0000025e]: Ext. s:6 @ from-sip-external: "Rejecting unknown SIP connection from 23.95.12.226"
-- Executing [s@from-sip-external:7] Answer("SIP/203.250.x.x-0000003c", "") in new stack
-- Executing [s@from-sip-external:8] Wait("SIP/203.250.x.x-0000003c", "2") in new stack
-- Executing [s@from-sip-external:9] Playback("SIP/203.250.x.x-0000003c", "ss-noservice") in new stack
-- <SIP/203.250.x.x-0000003c> Playing 'ss-noservice.ulaw' (language 'en')
-- Executing [s@from-sip-external:10] PlayTones("SIP/203.250.x.x-0000003c", "congestion") in new stack
-- Executing [s@from-sip-external:11] Congestion("SIP/203.250.x.x-0000003c", "5") in new stack
== Spawn extension (from-sip-external, s, 11) exited non-zero on 'SIP/203.250.x.x-0000003c'
-- Executing [h@from-sip-external:1] Hangup("SIP/203.250.x.x-0000003c", "") in new stack
== Spawn extension (from-sip-external, h, 1) exited non-zero on 'SIP/203.250.x.x-0000003c'
[2014-08-30 00:07:50] WARNING[1870]: chan_sip.c:4169 retrans_pkt: Retransmission timeout reached on transmission 22ca7e32a4ba2b1b241ea89f66497b6a for seqno 1 (Critical Response) -- See https://wiki.asterisk.org/wiki/display/AST/SIP+Retransmissions
I’m sure at that time, there was no incoming calls to my Asterisk.
After that, I checked CDRs records, I saw many strange caller number (except 01023943787 in below image):
Could anyone give me some explains?