Attackers get Answer, with no-anonymous allowed?

Hi, I’m getting some calls in my logs, from unauthorized users, coming from-sip-external.

I don’t allow anonymous SIP from external.

The attackers get an Answer, then a hangup. But why do they get an answer at all, is there something wrong with my setup?

Any help appreciated.

Freepbx version is 2.5.2.3

The relevant log looks like:

[Aug 5 07:02:25] VERBOSE[13554] logger.c: -- Executing [[email protected]:1] NoOp("SIP/5060-b7705808", "Received incoming SIP connection from unknown peer to 001318769221000") in new stack [Aug 5 07:02:25] VERBOSE[13554] logger.c: -- Executing [[email protected]:2] Set("SIP/5060-b7705808", "DID=001318769221000") in new stack [Aug 5 07:02:25] VERBOSE[13554] logger.c: -- Executing [[email protected]:3] Goto("SIP/5060-b7705808", "s|1") in new stack [Aug 5 07:02:25] VERBOSE[13554] logger.c: -- Goto (from-sip-external,s,1) [Aug 5 07:02:25] VERBOSE[13554] logger.c: -- Executing [[email protected]:1] GotoIf("SIP/5060-b7705808", "0?from-trunk|001318769221000|1") in new stack [Aug 5 07:02:25] VERBOSE[13554] logger.c: -- Executing [[email protected]:2] Set("SIP/5060-b7705808", "TIMEOUT(absolute)=15") in new stack [Aug 5 07:02:25] VERBOSE[13554] logger.c: -- Channel will hangup at 2010-08-04 21:02:40 UTC. [Aug 5 07:02:25] VERBOSE[13554] logger.c: -- Executing [[email protected]:3] Answer("SIP/5060-b7705808", "") in new stack [Aug 5 07:02:25] VERBOSE[13554] logger.c: -- Executing [[email protected]:4] Wait("SIP/5060-b7705808", "2") in new stack [Aug 5 07:02:25] VERBOSE[13554] logger.c: == Spawn extension (from-sip-external, s, 4) exited non-zero on 'SIP/5060-b7705808' [Aug 5 07:02:25] VERBOSE[13554] logger.c: -- Executing [[email protected]:1] NoOp("SIP/5060-b7705808", "Hangup") in new stack [Aug 5 07:02:25] VERBOSE[13554] logger.c: -- Executing [[email protected]:2] Set("SIP/5060-b7705808", "DID=s") in new stack [Aug 5 07:02:25] VERBOSE[13554] logger.c: -- Executing [[email protected]:3] Goto("SIP/5060-b7705808", "s|1") in new stack [Aug 5 07:02:25] VERBOSE[13554] logger.c: -- Goto (from-sip-external,s,1) [Aug 5 07:02:25] VERBOSE[13554] logger.c: -- Executing [[email protected]:1] GotoIf("SIP/5060-b7705808", "0?from-trunk|s|1") in new stack [Aug 5 07:02:25] VERBOSE[13554] logger.c: -- Executing [[email protected]:2] Set("SIP/5060-b7705808", "TIMEOUT(absolute)=15") in new stack [Aug 5 07:02:25] VERBOSE[13554] logger.c: -- Channel will hangup at 2010-08-04 21:02:40 UTC. [Aug 5 07:02:25] VERBOSE[13554] logger.c: -- Executing [[email protected]:3] Answer("SIP/5060-b7705808", "") in new stack [Aug 5 07:02:25] VERBOSE[13554] logger.c: == Spawn extension (from-sip-external, s, 3) exited non-zero on 'SIP/5060-b7705808'