TIPS Why is my piaf cold calling itself..

[doughall]

My server seems to be spamming itself.. I have masked the originating IP from the logs below, but the originating IP address is the public IP address of my server....... Can anyone shed any light?

-- Executing [*972598653155@from-sip-external:1] NoOp("SIP/188.XXX.XXX.XX-000001e6", "Received incoming SIP connection from unknown peer to *972598653155") in new stack
-- Executing [*972598653155@from-sip-external:2] Set("SIP/188.XXX.XXX.XX-000001e6", "DID=*972598653155") in new stack
-- Executing [*972598653155@from-sip-external:3] Goto("SIP/188.XXX.XXX.XX-000001e6", "s,1") in new stack
-- Goto (from-sip-external,s,1)
-- Executing [s@from-sip-external:1] GotoIf("SIP/188.XXX.XXX.XX-000001e6", "1?checklang:noanonymous") in new stack
-- Goto (from-sip-external,s,2)
-- Executing [s@from-sip-external:2] GotoIf("SIP/188.XXX.XXX.XX-000001e6", "0?setlanguage:from-trunk,*972598653155,1") in new stack
-- Goto (from-trunk,*972598653155,1)
-- Executing [*972598653155@from-trunk:1] Set("SIP/188.XXX.XXX.XX-000001e6", "__FROM_DID=*972598653155") in new stack
-- Executing [*972598653155@from-trunk:2] NoOp("SIP/188.XXX.XXX.XX-000001e6", "Received an unknown call with DID set to *972598653155") in new stack
-- Executing [*972598653155@from-trunk:3] Goto("SIP/188.XXX.XXX.XX-000001e6", "s,a2") in new stack
-- Goto (from-trunk,s,2)
-- Executing [s@from-trunk:2] Answer("SIP/188.XXX.XXX.XX-000001e6", "") in new stack
-- Executing [s@from-trunk:3] Wait("SIP/188.XXX.XXX.XX-000001e6", "2") in new stack
-- Executing [s@from-trunk:4] Playback("SIP/188.XXX.XXX.XX-000001e6", "ss-noservice") in new stack
-- <SIP/188.XXX.XXX.XX-000001e6> Playing 'ss-noservice.ulaw' (language 'en')
-- Executing [s@from-trunk:5] SayAlpha("SIP/188.XXX.XXX.XX-000001e6", "*972598653155") in new stack
-- <SIP/188.XXX.XXX.XX-000001e6> Playing 'digits/star.ulaw' (language 'en')
-- <SIP/188.XXX.XXX.XX-000001e6> Playing 'digits/9.ulaw' (language 'en')
-- <SIP/188.XXX.XXX.XX-000001e6> Playing 'digits/7.ulaw' (language 'en')
-- <SIP/188.XXX.XXX.XX-000001e6> Playing 'digits/2.ulaw' (language 'en')
-- <SIP/188.XXX.XXX.XX-000001e6> Playing 'digits/5.ulaw' (language 'en')
-- <SIP/188.XXX.XXX.XX-000001e6> Playing 'digits/9.ulaw' (language 'en')
-- <SIP/188.XXX.XXX.XX-000001e6> Playing 'digits/8.ulaw' (language 'en')
-- <SIP/188.XXX.XXX.XX-000001e6> Playing 'digits/6.ulaw' (language 'en')
-- <SIP/188.XXX.XXX.XX-000001e6> Playing 'digits/5.ulaw' (language 'en')
-- <SIP/188.XXX.XXX.XX-000001e6> Playing 'digits/3.ulaw' (language 'en')
-- <SIP/188.XXX.XXX.XX-000001e6> Playing 'digits/1.ulaw' (language 'en')
-- <SIP/188.XXX.XXX.XX-000001e6> Playing 'digits/5.ulaw' (language 'en')
-- <SIP/188.XXX.XXX.XX-000001e6> Playing 'digits/5.ulaw' (language 'en')
-- Executing [s@from-trunk:6] Hangup("SIP/188.XXX.XXX.XX-000001e6", "") in new stack
== Spawn extension (from-trunk, s, 6) exited non-zero on 'SIP/188.XXX.XXX.XX-000001e6'
-- Executing [h@from-trunk:1] Macro("SIP/188.XXX.XXX.XX-000001e6", "hangupcall,") in new stack
-- Executing [s@macro-hangupcall:1] GotoIf("SIP/188.XXX.XXX.XX-000001e6", "1?theend") in new stack
-- Goto (macro-hangupcall,s,3)
-- Executing [s@macro-hangupcall:3] ExecIf("SIP/188.XXX.XXX.XX-000001e6", "0?Set(CDR(recordingfile)=)") in new stack
-- Executing [s@macro-hangupcall:4] Hangup("SIP/188.XXX.XXX.XX-000001e6", "") in new stack
== Spawn extension (macro-hangupcall, s, 4) exited non-zero on 'SIP/188.XXX.XXX.XX-000001e6' in macro 'hangupcall'
== Spawn extension (from-trunk, h, 1) exited non-zero on 'SIP/188.XXX.XXX.XX-000001e6'

 

[Trimline2]

Review this thread, it may help. http://www.pbxinaflash.com/community/index.php?threads/weird-logs.15141/#post-97460

May sure you disable Allow SIP Guests.

 

[doughall]

Thanks.. I used to get those, but I have locked IPTABLES down to my office IP and the signalling IPs of my DID suppliers.. the originating IP is defo my public IP of the server. My thoughts are local attempts by the server. The originating IP when I get a call usually one of the signalling IPs I have in my IPTABLES. It's not affecting my performance of the server.. I was just curious.

 

[Trimline2]

What is : Received incoming SIP connection from unknown peer to *972598653155") in new stack ?

On my system, *97 is voicemail. Not sure if you have a DID of 259-865-3155, but that is where I would start my investigation.

 

[billsimon]

The IP you masked out is not (necessarily) the originating IP, as you claim. You'll need to turn on SIP debugs to find out where the calls are coming from with certainty. I think that's the point Trimline2 was making by referencing the post.

So let's say you do find that the calls are from within your own network. I doubt they are being originated by/through the PBX or you'd see logs of the call being placed as well. The logs you posted only show receipt of a call.