<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
I've got a strange situation that started yesterday -- I have a ton<br>
of calls listed in the log for number = 18883629704<br>
<br>
It initially looked like I was getting an incoming call on Zap/4 (LD<br>
trunk) from 18883629704, which was going to an extension at Zap/2, <br>
and then trying to dial out again back to the 18883629704 number <br>
(the 'dial' application was called, with the argument <br>
Zap/4/18883629704).<br>
<br>
I found one reference to on Google to this number under the topic <br>
"<strong>New ECM technique</strong>", describing what looks like some
kind <br>
of attack on some unknown system (the domain is down, but it<br>
was in the google cache)..<br>
<br>
The outgoing attempts weren't working (apparently because they<br>
were coming in on the same trunk that's used for LD outgoing),<br>
but it was still disconcerting...<br>
<br>
So I tried to block receiving any calls from 18883629704 in<br>
the dialplan by giving them the congestion application, and also<br>
blocking outgoing calls to it the same way, as<br>
<br>
exten => s/3202594099,1,Congestion <br>
exten => s/8883629704,1,Congestion<br>
exten => s,1,Answer()<br>
exten => s,2,NoOp(INCOMING call at ${DATETIME} from ${CALLERID}:
Name: ${CALLERIDNAME}, Number: ${CALLERIDNUM})<br>
exten => s,3,DigitTimeout(10) <br>
exten => s,4,ResponseTimeout(20) <br>
exten => s,5,Background(splash)<br>
...<br>
<br>
and <br>
<br>
exten => 18883629704,1,Hangup()<br>
<br>
in the [outgoing] context. <br>
<br>
But I'm still getting these things, every 45 minutes or so, in pairs<br>
about a minute or so apart. At least now they're not trying to dial<br>
out, and the hangup seems to be working, but why is there all<br>
this activity? And why am I getting the incoming digits that it's <br>
trying to dial? It looks like they're not getting the congestion thing<br>
at all?<br>
<br>
I put the logging into verbose debug mode, and got the following,<br>
which doesn't make a lot of sense. Shouldn't there be a log<br>
entry for the Zap/4 (incoming trunk) call before it gets rung to the <br>
Zap/2 (station) extension? <br>
<br>
Thanks in advance for any help!<br>
<br>
rj<br>
<br>
<br>
2005-02-20 14:05:46 DEBUG[28229]: Monitor doohicky got event
Ring/Answered on channel 2<br>
2005-02-20 14:05:46 DEBUG[28229]: Device 'Zap/2' changed to state '2'<br>
2005-02-20 14:05:46 DEBUG[28229]: Device 'Zap/2' changed to state '2'<br>
2005-02-20 14:05:48 DEBUG[28229]: DTMF digit: 1 on Zap/2-1<br>
2005-02-20 14:05:48 DEBUG[28229]: DTMF digit: 8 on Zap/2-1<br>
2005-02-20 14:05:48 DEBUG[28229]: DTMF digit: 8 on Zap/2-1<br>
2005-02-20 14:05:48 DEBUG[28229]: DTMF digit: 8 on Zap/2-1<br>
2005-02-20 14:05:48 DEBUG[28229]: DTMF digit: 3 on Zap/2-1<br>
2005-02-20 14:05:48 DEBUG[28229]: DTMF digit: 6 on Zap/2-1<br>
2005-02-20 14:05:49 DEBUG[28229]: DTMF digit: 2 on Zap/2-1<br>
2005-02-20 14:05:49 DEBUG[28229]: DTMF digit: 9 on Zap/2-1<br>
2005-02-20 14:05:49 DEBUG[28229]: DTMF digit: 7 on Zap/2-1<br>
2005-02-20 14:05:49 DEBUG[28229]: DTMF digit: 0 on Zap/2-1<br>
2005-02-20 14:05:49 DEBUG[28229]: DTMF digit: 4 on Zap/2-1<br>
2005-02-20 14:05:49 DEBUG[28229]: Enabled echo cancellation on channel 2<br>
2005-02-20 14:05:49 DEBUG[28229]: Launching 'Hangup'<br>
2005-02-20 14:05:49 DEBUG[28229]: Spawn extension
(default,18883629704,1) exited non-zero on 'Zap/2-1'<br>
2005-02-20 14:05:49 DEBUG[28229]: Hanging up channel 'Zap/2-1'<br>
2005-02-20 14:05:49 DEBUG[28229]: zt_hangup(Zap/2-1)<br>
2005-02-20 14:05:49 DEBUG[28229]: Hangup: channel: 2 index = 0, normal
= 16, callwait = -1, thirdcall = -1<br>
2005-02-20 14:05:49 DEBUG[28229]: disabled echo cancellation on channel
2<br>
2005-02-20 14:05:49 DEBUG[28229]: Set option TDD MODE, value: OFF(0) on
Zap/2-1<br>
2005-02-20 14:05:49 DEBUG[28229]: Updated conferencing on 2, with 0
conference users<br>
2005-02-20 14:05:49 DEBUG[28229]: Device 'Zap/2' changed to state '0'<br>
2005-02-20 14:05:49 DEBUG[28229]: Device 'Zap/2' changed to state '0'<br>
2005-02-20 14:05:50 DEBUG[28229]: Monitor doohicky got event Hook
Transition Complete on channel 2<br>
2005-02-20 14:05:54 DEBUG[28229]: Monitor doohicky got event On hook on
channel 2<br>
2005-02-20 14:05:54 DEBUG[28229]: disabled echo cancellation on channel
2<br>
2005-02-20 14:06:06 DEBUG[28229]: Monitor doohicky got event
Ring/Answered on channel 2<br>
2005-02-20 14:06:06 DEBUG[28229]: Device 'Zap/2' changed to state '2'<br>
2005-02-20 14:06:06 DEBUG[28229]: Device 'Zap/2' changed to state '2'<br>
2005-02-20 14:06:08 DEBUG[28229]: DTMF digit: 1 on Zap/2-1<br>
2005-02-20 14:06:08 DEBUG[28229]: DTMF digit: 8 on Zap/2-1<br>
2005-02-20 14:06:08 DEBUG[28229]: DTMF digit: 8 on Zap/2-1<br>
2005-02-20 14:06:08 DEBUG[28229]: DTMF digit: 8 on Zap/2-1<br>
2005-02-20 14:06:09 DEBUG[28229]: DTMF digit: 3 on Zap/2-1<br>
2005-02-20 14:06:09 DEBUG[28229]: DTMF digit: 6 on Zap/2-1<br>
2005-02-20 14:06:09 DEBUG[28229]: DTMF digit: 2 on Zap/2-1<br>
2005-02-20 14:06:09 DEBUG[28229]: DTMF digit: 9 on Zap/2-1<br>
2005-02-20 14:06:09 DEBUG[28229]: DTMF digit: 7 on Zap/2-1<br>
2005-02-20 14:06:10 DEBUG[28229]: DTMF digit: 0 on Zap/2-1<br>
2005-02-20 14:06:10 DEBUG[28229]: DTMF digit: 4 on Zap/2-1<br>
2005-02-20 14:06:10 DEBUG[28229]: Enabled echo cancellation on channel 2<br>
2005-02-20 14:06:10 DEBUG[28229]: Launching 'Hangup'<br>
2005-02-20 14:06:10 DEBUG[28229]: Spawn extension
(default,18883629704,1) exited non-zero on 'Zap/2-1'<br>
2005-02-20 14:06:10 DEBUG[28229]: Hanging up channel 'Zap/2-1'<br>
2005-02-20 14:06:10 DEBUG[28229]: zt_hangup(Zap/2-1)<br>
2005-02-20 14:06:10 DEBUG[28229]: Hangup: channel: 2 index = 0, normal
= 16, callwait = -1, thirdcall = -1<br>
2005-02-20 14:06:10 DEBUG[28229]: disabled echo cancellation on channel
2<br>
2005-02-20 14:06:10 DEBUG[28229]: Set option TDD MODE, value: OFF(0) on
Zap/2-1<br>
2005-02-20 14:06:10 DEBUG[28229]: Updated conferencing on 2, with 0
conference users<br>
2005-02-20 14:06:10 DEBUG[28229]: Device 'Zap/2' changed to state '0'<br>
2005-02-20 14:06:10 DEBUG[28229]: Device 'Zap/2' changed to state '0'<br>
2005-02-20 14:06:10 DEBUG[28229]: Monitor doohicky got event Hook
Transition Complete on channel 2<br>
2005-02-20 14:06:15 DEBUG[28229]: Monitor doohicky got event On hook on
channel 2<br>
2005-02-20 14:06:15 DEBUG[28229]: disabled echo cancellation on channel
2<br>
<br>
<blockquote cite="midChameleon.1105497873.adar0@vegas" type="cite">
<pre wrap="">
</pre>
</blockquote>
<br>
<br>
</body>
</html>