Buy or Renew
Buy or Renew
Cisco + Splunk: It’s a new day for your data. Learn more.
 
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
cancel
Start a conversation
350
Views
0
Helpful
2
Replies

unkown call send out via my pstn port

eric31773177
Level 1
Level 1

‎03-14-2014 07:33 AM

Dear Sir

 

I am using Cisco 2821 ISR router with CME, i found out some SIP call from somewhere via my router, how can i block it? teh following is the log from my syslog server.

 

362451310.10.10.2local7-notice2014-03-14 22:12:322 * Mar 14 14:12:32.612: %VOIPAAA-5-VOIP_CALL_HISTORY: CallLegType 2, ConnectionId 8499FC8CAAB911E3806ADE9D1E09EF4E, SetupTime 22:12:32.172 HK Fri Mar 14 2014, PeerAddress 101, PeerSubAddress , DisconnectCause 1 , DisconnectText unassigned number (1), ConnectTime 22:12:32.612 HK Fri Mar 14 2014, DisconnectTime 22:12:32.612 HK Fri Mar 14 2014, CallOrigin 2, ChargedUnits 0, InfoType 2, TransmitPackets 0, TransmitBytes 0, ReceivePackets 0, ReceiveBytes 0
362451510.10.10.2local7-notice2014-03-14 22:12:322 * Mar 14 14:12:32.612: %VOIPAAA-5-VOIP_FEAT_HISTORY: FEAT_VSA=fn:TWC,ft:03/14/2014 22:12:32.168,cgn:101,cdn:00806707203878,frs:0,fid:39,fcid:8499FC8CAAB911E3806ADE9D1E09EF4E,legID:1B,bguid:8499FC8CAAB911E3806ADE9D1E09EF4E
362450910.10.10.2local7-notice2014-03-14 22:12:312 * Mar 14 14:12:31.260: %VOIPAAA-5-VOIP_CALL_HISTORY: CallLegType 2, ConnectionId 83CD8303AAB911E38065DE9D1E09EF4E, SetupTime 22:12:30.830 HK Fri Mar 14 2014, PeerAddress 101, PeerSubAddress , DisconnectCause 1 , DisconnectText unassigned number (1), ConnectTime 22:12:31.260 HK Fri Mar 14 2014, DisconnectTime 22:12:31.260 HK Fri Mar 14 2014, CallOrigin 2, ChargedUnits 0, InfoType 2, TransmitPackets 0, TransmitBytes 0, ReceivePackets 0, ReceiveBytes 0
362451110.10.10.2local7-notice2014-03-14 22:12:312 * Mar 14 14:12:31.260: %VOIPAAA-5-VOIP_FEAT_HISTORY: FEAT_VSA=fn:TWC,ft:03/14/2014 22:12:30.828,cgn:101,cdn:00806707203878,frs:0,fid:38,fcid:83CD8303AAB911E38065DE9D1E09EF4E,legID:1A,bguid:83CD8303AAB911E38065DE9D1E09EF4E
362450310.10.10.2local7-notice2014-03-14 22:12:292 * Mar 14 14:12:29.684: %VOIPAAA-5-VOIP_CALL_HISTORY: CallLegType 2, ConnectionId 82D9FAF3AAB911E38060DE9D1E09EF4E, SetupTime 22:12:29.234 HK Fri Mar 14 2014, PeerAddress 101, PeerSubAddress , DisconnectCause 1 , DisconnectText unassigned number (1), ConnectTime 22:12:29.684 HK Fri Mar 14 2014, DisconnectTime 22:12:29.684 HK Fri Mar 14 2014, CallOrigin 2, ChargedUnits 0, InfoType 2, TransmitPackets 0, TransmitBytes 0, ReceivePackets 0, ReceiveBytes 0
362450510.10.10.2local7-notice2014-03-14 22:12:292 * Mar 14 14:12:29.684: %VOIPAAA-5-VOIP_FEAT_HISTORY: FEAT_VSA=fn:TWC,ft:03/14/2014 22:12:29.232,cgn:101,cdn:00806707203878,frs:0,fid:37,fcid:82D9FAF3AAB911E38060DE9D1E09EF4E,legID:19,bguid:82D9FAF3AAB911E38060DE9D1E09EF4E
362449910.10.10.2local7-notice2014-03-14 22:12:282 * Mar 14 14:12:27.988: %VOIPAAA-5-VOIP_CALL_HISTORY: CallLegType 2, ConnectionId 81D99FCDAAB911E3805BDE9D1E09EF4E, SetupTime 22:12:27.548 HK Fri Mar 14 2014, PeerAddress 101, PeerSubAddress , DisconnectCause 1 , DisconnectText unassigned number (1), ConnectTime 22:12:27.988 HK Fri Mar 14 2014, DisconnectTime 22:12:27.988 HK Fri Mar 14 2014, CallOrigin 2, ChargedUnits 0, InfoType 2, TransmitPackets 0, TransmitBytes 0, ReceivePackets 0, ReceiveBytes 0
362450110.10.10.2local7-notice2014-03-14 22:12:282 * Mar 14 14:12:27.988: %VOIPAAA-5-VOIP_FEAT_HISTORY: FEAT_VSA=fn:TWC,ft:03/14/2014 22:12:27.552,cgn:101,cdn:00806707203878,frs:0,fid:36,fcid:81D99FCDAAB911E3805BDE9D1E09EF4E,legID:18,bguid:81D99FCDAAB911E3805BDE9D1E09EF4E
362449510.10.10.2local7-notice2014-03-14 22:12:262 * Mar 14 14:12:26.560: %VOIPAAA-5-VOIP_CALL_HISTORY: CallLegType 2, ConnectionId 80FFBB10AAB911E38056DE9D1E09EF4E, SetupTime 22:12:26.120 HK Fri Mar 14 2014, PeerAddress 101, PeerSubAddress , DisconnectCause 1 , DisconnectText unassigned number (1), ConnectTime 22:12:26.560 HK Fri Mar 14 2014, DisconnectTime 22:12:26.560 HK Fri Mar 14 2014, CallOrigin 2, ChargedUnits 0, InfoType 2, TransmitPackets 0, TransmitBytes 0, ReceivePackets 0, ReceiveBytes 0
362449710.10.10.2local7-notice2014-03-14 22:12:262 * Mar 14 14:12:26.560: %VOIPAAA-5-VOIP_FEAT_HISTORY: FEAT_VSA=fn:TWC,ft:03/14/2014 22:12:26.124,cgn:101,cdn:00806707203878,frs:0,fid:35,fcid:80FFBB10AAB911E38056DE9D1E09EF4E,legID:17,bguid:80FFBB10AAB911E38056DE9D1E09EF4E
362449010.10.10.2local7-notice2014-03-14 22:12:242 * Mar 14 14:12:24.696: %VOIPAAA-5-VOIP_CALL_HISTORY: CallLegType 2, ConnectionId 7FE521A0AAB911E38051DE9D1E09EF4E, SetupTime 22:12:24.266 HK Fri Mar 14 2014, PeerAddress 101, PeerSubAddress , DisconnectCause 1 , DisconnectText unassigned number (1), ConnectTime 22:12:24.696 HK Fri Mar 14 2014, DisconnectTime 22:12:24.696 HK Fri Mar 14 2014, CallOrigin 2, ChargedUnits 0, InfoType 2, TransmitPackets 0, TransmitBytes 0, ReceivePackets 0, ReceiveBytes 0
362449210.10.10.2local7-notice2014-03-14 22:12:242 * Mar 14 14:12:24.696: %VOIPAAA-5-VOIP_FEAT_HISTORY: FEAT_VSA=fn:TWC,ft:03/14/2014 22:12:24.268,cgn:101,cdn:00806707203878,frs:0,fid:34,fcid:7FE521A0AAB911E38051DE9D1E09EF4E,legID:16,bguid:7FE521A0AAB911E38051DE9D1E09EF4E
362448210.10.10.2local7-notice2014-03-14 22:12:232 * Mar 14 14:12:22.940: %VOIPAAA-5-VOIP_CALL_HISTORY: CallLegType 2, ConnectionId 7ED44BE1AAB911E3804CDE9D1E09EF4E, SetupTime 22:12:22.480 HK Fri Mar 14 2014, PeerAddress 101, PeerSubAddress , DisconnectCause 1 , DisconnectText unassigned number (1), ConnectTime 22:12:22.940 HK Fri Mar 14 2014, DisconnectTime 22:12:22.940 HK Fri Mar 14 2014, CallOrigin 2, ChargedUnits 0, InfoType 2, TransmitPackets 0, TransmitBytes 0, ReceivePackets 0, ReceiveBytes 0
362448410.10.10.2local7-notice2014-03-14 22:12:232 * Mar 14 14:12:22.940: %VOIPAAA-5-VOIP_FEAT_HISTORY: FEAT_VSA=fn:TWC,ft:03/14/2014 22:12:22.484,cgn:101,cdn:00806707203878,frs:0,fid:33,fcid:7ED44BE1AAB911E3804CDE9D1E09EF4E,legID:15,bguid:7ED44BE1AAB911E3804CDE9D1E09EF4E
362287510.10.10.2local7-notice2014-03-14 22:03:522 * Mar 14 14:03:52.099: %VOIPAAA-5-VOIP_CALL_HISTORY: CallLegType 2, ConnectionId 42FDAFD5AAB811E38046DE9D1E09EF4E, SetupTime 22:03:32.589 HK Fri Mar 14 2014, PeerAddress 1000, PeerSubAddress , DisconnectCause 1 , DisconnectText unassigned number (1), ConnectTime 22:03:52.099 HK Fri Mar 14 2014, DisconnectTime 22:03:52.099 HK Fri Mar 14 2014, CallOrigin 2, ChargedUnits 0, InfoType 2, TransmitPackets 0, TransmitBytes 0, ReceivePackets 0, ReceiveBytes 0
362287710.10.10.2local7-notice2014-03-14 22:03:522 * Mar 14 14:03:52.099: %VOIPAAA-5-VOIP_FEAT_HISTORY: FEAT_VSA=fn:TWC,ft:03/14/2014 22:03:32.591,cgn:1000,cdn:0972597751891,frs:0,fid:32,fcid:42FDAFD5AAB811E38046DE9D1E09EF4E,legID:14,bguid:42FDAFD5AAB811E38046DE9D1E09EF4E
362252710.10.10.2local7-notice2014-03-14 22:01:522 * Mar 14 14:01:52.661: %VOIPAAA-5-VOIP_FEAT_HISTORY: FEAT_VSA=fn:TWC,ft:03/14/2014 22:01:46.609,cgn:18001,cdn:92339233,frs:0,fid:31,fcid:FCECFE55AAB711E38041DE9D1E09EF4E,legID:13,bguid:FCECFE55AAB711E38041DE9D1E09EF4E

 

 

Thanks.

 

 

Eric

Labels:
0 Helpful
2 Replies 2

eric31773177
Level 1
Level 1

‎03-14-2014 07:39 AM

there is the connection

 

tcp 124.244.202.47:5060   10.10.1.3:5060        ---                   ---
udp 124.244.202.47:5060   10.10.1.3:5060        82.205.31.174:23921   82.205.31.174:23921
udp 124.244.202.47:5060   10.10.1.3:5060        ---                   ---

0 Helpful

Manish Prasad
Level 5
Level 5
In response to eric31773177

‎03-15-2014 02:51 AM

Use ip address trusted list under voice service voip.

http://www.cisco.com/c/en/us/support/docs/voice/call-routing-dial-plans/112083-tollfraud-ios.html

 

Thanks

Manish

0 Helpful
Customers Also Viewed These Support Documents