asterisk2billing.org
http://forum.asterisk2billing.org/

please check witch type off hacking
http://forum.asterisk2billing.org/viewtopic.php?f=33&t=11279
Page 1 of 1

Author:  ziaabass [ Sun Mar 29, 2015 10:50 am ]
Post subject:  please check witch type off hacking

hi,
i am back again after 3 years
i install new system with a2billing v2.1.0 and asterisk 13
i understand my user when call like this

Code:
== Using SIP RTP CoS mark 5
    -- Executing [00923319600056@a2billing:1] NoOp("SIP/4080750574-00000015", "A2Billing Set Custom Var into CDRs table cc_call") in new stack
    -- Executing [00923319600056@a2billing:2] Set("SIP/4080750574-00000015", "A2B_CUSTOM1="XYZ1234567890"") in new stack
    -- Executing [00923319600056@a2billing:3] Set("SIP/4080750574-00000015", "A2B_CUSTOM2=8888") in new stack
    -- Executing [00923319600056@a2billing:4] Set("SIP/4080750574-00000015", "CDR(A2B_CUSTOM1)="XYZ1234567890"") in new stack
    -- Executing [00923319600056@a2billing:5] Set("SIP/4080750574-00000015", "CDR(A2B_CUSTOM2)=8888") in new stack
    -- Executing [00923319600056@a2billing:6] AGI("SIP/4080750574-00000015", "a2billing.php,1") in new stack
    -- Launched AGI Script /var/lib/asterisk/agi-bin/a2billing.php
    -- <SIP/4080750574-00000015> Playing 'prepaid-you-have.gsm' (escape_digits=#) (sample_offset 0) (language 'en')
    -- <SIP/4080750574-00000015> Playing 'digits/30.gsm' (language 'en')
    -- <SIP/4080750574-00000015> Playing 'dollars.gsm' (escape_digits=#) (sample_offset 0) (language 'en')
       > 0xb72229c8 -- Probation passed - setting RTP source address to 188.53.52.63:5196
       > 0xb72229c8 -- Probation passed - setting RTP source address to 188.53.52.63:5196
    -- <SIP/4080750574-00000015> Playing 'prepaid-refill_card_with_voucher.gsm' (language 'en')
    -- <SIP/4080750574-00000015> Playing 'prepaid-enter-dest.gsm' (language 'en')
    -- <SIP/4080750574-00000015> Playing 'prepaid-refill_card_with_voucher.gsm' (language 'en')
  == Using SIP RTP CoS mark 5


but see this i have no this type of user
so i think this is some one hack

Code:
== Using SIP RTP CoS mark 5
    -- Executing [33334100972598601692@a2billing:1] NoOp("SIP/188.63.88.68-00000031", "A2Billing Set Custom Var into CDRs table cc_call") in new stack
    -- Executing [33334100972598601692@a2billing:2] Set("SIP/188.63.88.68-00000031", "A2B_CUSTOM1="XYZ1234567890"") in new stack
    -- Executing [33334100972598601692@a2billing:3] Set("SIP/188.63.88.68-00000031", "A2B_CUSTOM2=8888") in new stack
    -- Executing [33334100972598601692@a2billing:4] Set("SIP/188.63.88.68-00000031", "CDR(A2B_CUSTOM1)="XYZ1234567890"") in new stack
    -- Executing [33334100972598601692@a2billing:5] Set("SIP/188.63.88.68-00000031", "CDR(A2B_CUSTOM2)=8888") in new stack
    -- Executing [33334100972598601692@a2billing:6] AGI("SIP/188.63.88.68-00000031", "a2billing.php,1") in new stack
    -- Launched AGI Script /var/lib/asterisk/agi-bin/a2billing.php
    -- <SIP/188.63.88.68-00000031> Playing 'prepaid-enter-pin-number.gsm' (language 'en')
    -- <SIP/188.63.88.68-00000031> Playing 'prepaid-no-card-entered.gsm' (escape_digits=#) (sample_offset 0) (language 'en')
    -- <SIP/188.63.88.68-00000031> Playing 'prepaid-enter-pin-number.gsm' (language 'en')
    -- <SIP/188.63.88.68-00000031> Playing 'prepaid-no-card-entered.gsm' (escape_digits=#) (sample_offset 0) (language 'en')
    -- <SIP/188.63.88.68-00000031> Playing 'prepaid-enter-pin-number.gsm' (language 'en')
    -- <SIP/188.63.88.68-00000031>AGI Script a2billing.php completed, returning 4
  == Spawn extension (a2billing, 33334100972598601692, 6) exited non-zero on 'SIP/188.63.88.68-00000031'
  == Using SIP RTP CoS mark 5


please see and give me sulotion how to blocked this

Author:  ziaabass [ Sun Mar 29, 2015 2:48 pm ]
Post subject:  Re: please check witch type off hacking

i have solve my self
just add in sip.conf

alwaysauthreject=yes
allowguest=no

its ok with this ishue

Author:  Garsiyra [ Wed Apr 22, 2015 9:30 am ]
Post subject:  Re: please check witch type off hacking

I want to discuss about it.

Page 1 of 1 All times are UTC
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group
http://www.phpbb.com/