03-14-2014 07:33 AM
Dear Sir
I am using Cisco 2821 ISR router with CME, i found out some SIP call from somewhere via my router, how can i block it? teh following is the log from my syslog server.
3624513 | 10.10.10.2 | local7-notice | 2014-03-14 22:12:32 | 2 * Mar 14 14:12:32.612: %VOIPAAA-5-VOIP_CALL_HISTORY: CallLegType 2, ConnectionId 8499FC8CAAB911E3806ADE9D1E09EF4E, SetupTime 22:12:32.172 HK Fri Mar 14 2014, PeerAddress 101, PeerSubAddress , DisconnectCause 1 , DisconnectText unassigned number (1), ConnectTime 22:12:32.612 HK Fri Mar 14 2014, DisconnectTime 22:12:32.612 HK Fri Mar 14 2014, CallOrigin 2, ChargedUnits 0, InfoType 2, TransmitPackets 0, TransmitBytes 0, ReceivePackets 0, ReceiveBytes 0 |
3624515 | 10.10.10.2 | local7-notice | 2014-03-14 22:12:32 | 2 * Mar 14 14:12:32.612: %VOIPAAA-5-VOIP_FEAT_HISTORY: FEAT_VSA=fn:TWC,ft:03/14/2014 22:12:32.168,cgn:101,cdn:00806707203878,frs:0,fid:39,fcid:8499FC8CAAB911E3806ADE9D1E09EF4E,legID:1B,bguid:8499FC8CAAB911E3806ADE9D1E09EF4E |
3624509 | 10.10.10.2 | local7-notice | 2014-03-14 22:12:31 | 2 * Mar 14 14:12:31.260: %VOIPAAA-5-VOIP_CALL_HISTORY: CallLegType 2, ConnectionId 83CD8303AAB911E38065DE9D1E09EF4E, SetupTime 22:12:30.830 HK Fri Mar 14 2014, PeerAddress 101, PeerSubAddress , DisconnectCause 1 , DisconnectText unassigned number (1), ConnectTime 22:12:31.260 HK Fri Mar 14 2014, DisconnectTime 22:12:31.260 HK Fri Mar 14 2014, CallOrigin 2, ChargedUnits 0, InfoType 2, TransmitPackets 0, TransmitBytes 0, ReceivePackets 0, ReceiveBytes 0 |
3624511 | 10.10.10.2 | local7-notice | 2014-03-14 22:12:31 | 2 * Mar 14 14:12:31.260: %VOIPAAA-5-VOIP_FEAT_HISTORY: FEAT_VSA=fn:TWC,ft:03/14/2014 22:12:30.828,cgn:101,cdn:00806707203878,frs:0,fid:38,fcid:83CD8303AAB911E38065DE9D1E09EF4E,legID:1A,bguid:83CD8303AAB911E38065DE9D1E09EF4E |
3624503 | 10.10.10.2 | local7-notice | 2014-03-14 22:12:29 | 2 * Mar 14 14:12:29.684: %VOIPAAA-5-VOIP_CALL_HISTORY: CallLegType 2, ConnectionId 82D9FAF3AAB911E38060DE9D1E09EF4E, SetupTime 22:12:29.234 HK Fri Mar 14 2014, PeerAddress 101, PeerSubAddress , DisconnectCause 1 , DisconnectText unassigned number (1), ConnectTime 22:12:29.684 HK Fri Mar 14 2014, DisconnectTime 22:12:29.684 HK Fri Mar 14 2014, CallOrigin 2, ChargedUnits 0, InfoType 2, TransmitPackets 0, TransmitBytes 0, ReceivePackets 0, ReceiveBytes 0 |
3624505 | 10.10.10.2 | local7-notice | 2014-03-14 22:12:29 | 2 * Mar 14 14:12:29.684: %VOIPAAA-5-VOIP_FEAT_HISTORY: FEAT_VSA=fn:TWC,ft:03/14/2014 22:12:29.232,cgn:101,cdn:00806707203878,frs:0,fid:37,fcid:82D9FAF3AAB911E38060DE9D1E09EF4E,legID:19,bguid:82D9FAF3AAB911E38060DE9D1E09EF4E |
3624499 | 10.10.10.2 | local7-notice | 2014-03-14 22:12:28 | 2 * Mar 14 14:12:27.988: %VOIPAAA-5-VOIP_CALL_HISTORY: CallLegType 2, ConnectionId 81D99FCDAAB911E3805BDE9D1E09EF4E, SetupTime 22:12:27.548 HK Fri Mar 14 2014, PeerAddress 101, PeerSubAddress , DisconnectCause 1 , DisconnectText unassigned number (1), ConnectTime 22:12:27.988 HK Fri Mar 14 2014, DisconnectTime 22:12:27.988 HK Fri Mar 14 2014, CallOrigin 2, ChargedUnits 0, InfoType 2, TransmitPackets 0, TransmitBytes 0, ReceivePackets 0, ReceiveBytes 0 |
3624501 | 10.10.10.2 | local7-notice | 2014-03-14 22:12:28 | 2 * Mar 14 14:12:27.988: %VOIPAAA-5-VOIP_FEAT_HISTORY: FEAT_VSA=fn:TWC,ft:03/14/2014 22:12:27.552,cgn:101,cdn:00806707203878,frs:0,fid:36,fcid:81D99FCDAAB911E3805BDE9D1E09EF4E,legID:18,bguid:81D99FCDAAB911E3805BDE9D1E09EF4E |
3624495 | 10.10.10.2 | local7-notice | 2014-03-14 22:12:26 | 2 * Mar 14 14:12:26.560: %VOIPAAA-5-VOIP_CALL_HISTORY: CallLegType 2, ConnectionId 80FFBB10AAB911E38056DE9D1E09EF4E, SetupTime 22:12:26.120 HK Fri Mar 14 2014, PeerAddress 101, PeerSubAddress , DisconnectCause 1 , DisconnectText unassigned number (1), ConnectTime 22:12:26.560 HK Fri Mar 14 2014, DisconnectTime 22:12:26.560 HK Fri Mar 14 2014, CallOrigin 2, ChargedUnits 0, InfoType 2, TransmitPackets 0, TransmitBytes 0, ReceivePackets 0, ReceiveBytes 0 |
3624497 | 10.10.10.2 | local7-notice | 2014-03-14 22:12:26 | 2 * Mar 14 14:12:26.560: %VOIPAAA-5-VOIP_FEAT_HISTORY: FEAT_VSA=fn:TWC,ft:03/14/2014 22:12:26.124,cgn:101,cdn:00806707203878,frs:0,fid:35,fcid:80FFBB10AAB911E38056DE9D1E09EF4E,legID:17,bguid:80FFBB10AAB911E38056DE9D1E09EF4E |
3624490 | 10.10.10.2 | local7-notice | 2014-03-14 22:12:24 | 2 * Mar 14 14:12:24.696: %VOIPAAA-5-VOIP_CALL_HISTORY: CallLegType 2, ConnectionId 7FE521A0AAB911E38051DE9D1E09EF4E, SetupTime 22:12:24.266 HK Fri Mar 14 2014, PeerAddress 101, PeerSubAddress , DisconnectCause 1 , DisconnectText unassigned number (1), ConnectTime 22:12:24.696 HK Fri Mar 14 2014, DisconnectTime 22:12:24.696 HK Fri Mar 14 2014, CallOrigin 2, ChargedUnits 0, InfoType 2, TransmitPackets 0, TransmitBytes 0, ReceivePackets 0, ReceiveBytes 0 |
3624492 | 10.10.10.2 | local7-notice | 2014-03-14 22:12:24 | 2 * Mar 14 14:12:24.696: %VOIPAAA-5-VOIP_FEAT_HISTORY: FEAT_VSA=fn:TWC,ft:03/14/2014 22:12:24.268,cgn:101,cdn:00806707203878,frs:0,fid:34,fcid:7FE521A0AAB911E38051DE9D1E09EF4E,legID:16,bguid:7FE521A0AAB911E38051DE9D1E09EF4E |
3624482 | 10.10.10.2 | local7-notice | 2014-03-14 22:12:23 | 2 * Mar 14 14:12:22.940: %VOIPAAA-5-VOIP_CALL_HISTORY: CallLegType 2, ConnectionId 7ED44BE1AAB911E3804CDE9D1E09EF4E, SetupTime 22:12:22.480 HK Fri Mar 14 2014, PeerAddress 101, PeerSubAddress , DisconnectCause 1 , DisconnectText unassigned number (1), ConnectTime 22:12:22.940 HK Fri Mar 14 2014, DisconnectTime 22:12:22.940 HK Fri Mar 14 2014, CallOrigin 2, ChargedUnits 0, InfoType 2, TransmitPackets 0, TransmitBytes 0, ReceivePackets 0, ReceiveBytes 0 |
3624484 | 10.10.10.2 | local7-notice | 2014-03-14 22:12:23 | 2 * Mar 14 14:12:22.940: %VOIPAAA-5-VOIP_FEAT_HISTORY: FEAT_VSA=fn:TWC,ft:03/14/2014 22:12:22.484,cgn:101,cdn:00806707203878,frs:0,fid:33,fcid:7ED44BE1AAB911E3804CDE9D1E09EF4E,legID:15,bguid:7ED44BE1AAB911E3804CDE9D1E09EF4E |
3622875 | 10.10.10.2 | local7-notice | 2014-03-14 22:03:52 | 2 * Mar 14 14:03:52.099: %VOIPAAA-5-VOIP_CALL_HISTORY: CallLegType 2, ConnectionId 42FDAFD5AAB811E38046DE9D1E09EF4E, SetupTime 22:03:32.589 HK Fri Mar 14 2014, PeerAddress 1000, PeerSubAddress , DisconnectCause 1 , DisconnectText unassigned number (1), ConnectTime 22:03:52.099 HK Fri Mar 14 2014, DisconnectTime 22:03:52.099 HK Fri Mar 14 2014, CallOrigin 2, ChargedUnits 0, InfoType 2, TransmitPackets 0, TransmitBytes 0, ReceivePackets 0, ReceiveBytes 0 |
3622877 | 10.10.10.2 | local7-notice | 2014-03-14 22:03:52 | 2 * Mar 14 14:03:52.099: %VOIPAAA-5-VOIP_FEAT_HISTORY: FEAT_VSA=fn:TWC,ft:03/14/2014 22:03:32.591,cgn:1000,cdn:0972597751891,frs:0,fid:32,fcid:42FDAFD5AAB811E38046DE9D1E09EF4E,legID:14,bguid:42FDAFD5AAB811E38046DE9D1E09EF4E |
3622527 | 10.10.10.2 | local7-notice | 2014-03-14 22:01:52 | 2 * Mar 14 14:01:52.661: %VOIPAAA-5-VOIP_FEAT_HISTORY: FEAT_VSA=fn:TWC,ft:03/14/2014 22:01:46.609,cgn:18001,cdn:92339233,frs:0,fid:31,fcid:FCECFE55AAB711E38041DE9D1E09EF4E,legID:13,bguid:FCECFE55AAB711E38041DE9D1E09EF4E |
Thanks.
Eric
03-14-2014 07:39 AM
there is the connection
tcp 124.244.202.47:5060 10.10.1.3:5060 --- ---
udp 124.244.202.47:5060 10.10.1.3:5060 82.205.31.174:23921 82.205.31.174:23921
udp 124.244.202.47:5060 10.10.1.3:5060 --- ---
03-15-2014 02:51 AM
Use ip address trusted list under voice service voip.
http://www.cisco.com/c/en/us/support/docs/voice/call-routing-dial-plans/112083-tollfraud-ios.html
Thanks
Manish
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide