Неидентифицированный ночной вызов

  • Автор темы Автор темы os_gs
  • Дата начала Дата начала

os_gs

Customer
Регистрация
3 Сен 2021
Сообщения
8
Добрый день, всем
Сегодня ночью (03,.09.2021) случилось непонятное.
Утром позвонил неизвестный мобильный на мой рабочий (городской номер) и сказал, что у него был пропущенный вызов ночью в 02:43
Начал смотреть логи и обнаружил что, была активность, прилагаю логи.
Прошу направить, помочь выявить в чем же все таки дело.

Чтоб картина стала более яснее, на iPhone установлено приложение 3CX, которое по 3CX-туннелю подключается АТС. Имеется внутренний номер, привязанный к городскому. От провайдера, городской номер получаю по приватному транку - IP
Привожу некоторые логи, что имеются

События SIP
03.09.2021 2:43:40 - NAT/ALG check:L:9.1[Line:10001<<+7560605] REQUEST 'INVITE' - some of SIP/SDP headers may contain inconsistent information or modified by intermediate hop Media session IP ('c=' attribute) is not equal to the IP specified in contact header:
Media session IP:10.144.22.6 Contact IP:10.40.1.10
Media session IP ('c=' attribute) is not equal to the SIP packet source(IP:port):
Media session IP: 10.144.22.6 Received from: 10.40.1.10


IP-адрес 10.144.22.6 я не знаю чей. Провайдер ничего не сообщает.
IP-адрес 10.40.1.10 - адрес PBX провайдера

Далее увидел в логе 3CXMediaServer это

#Date: 2021/09/03
02:43:40.650|00000ba4| Info|MSEndPoint.cpp(2635): 10:[MS210000] C:9.1:Offer received. RTP connection: 10.144.22.6:8288(8289)
02:43:40.677|00000ba4| Info|MSEndPoint.cpp(1909): 10:[MS210002] C:9.2:Offer provided. Connection(transcoding mode): 127.0.0.1:7034(7035)
02:43:40.679|00000ba4| Info|MSEndPoint.cpp(1909): 10:[MS210002] C:9.3:Offer provided. Connection(transcoding mode): 10.36.0.1:7036(7037)
02:43:44.455|00000b90| Warn|RTPReceiver.cpp(440): 5:MediaProxy:VRTP receiver for [email protected]:5482(C:9.1) has no assigned socket
02:43:44.455|00000b90| Warn|RTPReceiver.cpp(440): 5:MediaProxy:VRTCP receiver for [email protected]:5482(C:9.1) has no assigned socket
02:43:44.455|00000b90| Warn|RTPReceiver.cpp(440): 5:MediaProxy:T38 receiver for [email protected]:5482(C:9.1) has no assigned socket
02:43:44.455|00000b90| Warn|RTPReceiver.cpp(440): 5:MediaProxy:T38_ receiver for [email protected]:5482(C:9.1) has no assigned socket
02:43:44.514|00000b90| Warn|RTPReceiver.cpp(440): 5:MediaProxy:VRTP receiver for [email protected]:5482(C:9.3) has no assigned socket
02:43:44.515|00000b90| Warn|RTPReceiver.cpp(440): 5:MediaProxy:VRTCP receiver for [email protected]:5482(C:9.3) has no assigned socket
02:43:44.515|00000b90| Warn|RTPReceiver.cpp(440): 5:MediaProxy:T38 receiver for [email protected]:5482(C:9.3) has no assigned socket
02:43:44.515|00000b90| Warn|RTPReceiver.cpp(440): 5:MediaProxy:T38_ receiver for [email protected]:5482(C:9.3) has no assigned socket
02:43:44.707|00000b90| Warn|RTPReceiver.cpp(440): 5:MediaProxy:VRTP receiver for [email protected]:5482(C:9.2) has no assigned socket
02:43:44.707|00000b90| Warn|RTPReceiver.cpp(440): 5:MediaProxy:VRTCP receiver for [email protected]:5482(C:9.2) has no assigned socket
02:43:44.707|00000b90| Warn|RTPReceiver.cpp(440): 5:MediaProxy:T38 receiver for [email protected]:5482(C:9.2) has no assigned socket
02:43:44.707|00000b90| Warn|RTPReceiver.cpp(440): 5:MediaProxy:T38_ receiver for [email protected]:5482(C:9.2) has no assigned socket

И тут этот же адрес 10.144.22.6

Но больше смутило это, тут подключение по туннелю с сети МТС, но вероятно что это был мой телефон, но очень странно что приложение на телефоне врядли могло само позвонить...


02:43:43.064|00001300| Info|TCPSide.cpp(278): 1<-::ffff:95.153.162.190:10158:748: Created; num.conn=1
02:43:43.064|00001300| Info|ConnMgr.cpp(923): 1<-::ffff:95.153.162.190:10158:748: Waiting For first packet
02:43:43.064|00000a7c| Info|ConnMgr.cpp(1152): IncomingTCP: Added 1<-::ffff:95.153.162.190:10158:748
02:43:43.064|00000a80| Info|ConnMgr.cpp(1402): OutgoingTCP: Added 1<-::ffff:95.153.162.190:10158:748
02:43:43.064|00000a84| Info|ConnMgr.cpp(1569): TimerActions: Added 1<-::ffff:95.153.162.190:10158:748
02:43:43.064|00000a78| Info|ConnMgr.cpp(1137): IncomingSlaveUDP: skip to ADD connection 1<-::ffff:95.153.162.190:10158:748. It has no input channel for this handler.
02:43:43.074|00000a7c| Info|Tunnel.cpp(193): ** Starting incoming tunnel connection ClientTunnel(123456); tunnel uid = clnt.0-3f015133-24ea-4848-984f-d8da893931f4_1066446
02:43:43.074|00000a7c| Info|Tunnel.cpp(194): ** Connection from clnt.0-3f015133-24ea-4848-984f-d8da893931f4_1066446
02:43:43.074|00000a7c| Info|Bridge.cpp(357): 1<-::ffff:95.153.162.190:10158:748: has been accepted by master-only Tunnel 'ClientTunnel'(123456) from clnt.0-3f015133-24ea-4848-984f-d8da893931f4_1066446
02:43:43.075|00000a7c| Info|ConnMgr.cpp(882): 1<-::ffff:95.153.162.190:10158:748: Accepted connection request. identifying as '123456'(localhost)
02:43:43.075|00000a7c| Info|ConnMgr.cpp(900): 1<-::ffff:95.153.162.190:10158:748: Added to common pool of master UDP handler. with UDP token clnt.0-3f015133-24ea-4848-984f-d8da893931f4_1066446$1
02:43:43.226|00001300| Info|TCPSide.cpp(278): 2<-::ffff:95.153.162.190:30302:368: Created; num.conn=2
02:43:43.226|00001300| Info|ConnMgr.cpp(923): 2<-::ffff:95.153.162.190:30302:368: Waiting For first packet
02:43:43.226|00000a84| Info|ConnMgr.cpp(1569): TimerActions: Added 2<-::ffff:95.153.162.190:30302:368
02:43:43.226|00000a78| Info|ConnMgr.cpp(1137): IncomingSlaveUDP: skip to ADD connection 2<-::ffff:95.153.162.190:30302:368. It has no input channel for this handler.
02:43:43.275|00000a7c| Info|ConnMgr.cpp(1152): IncomingTCP: Added 2<-::ffff:95.153.162.190:30302:368
02:43:43.275|00000a7c| Info|Tunnel.cpp(193): ** Starting incoming tunnel connection ClientTunnel(123456); tunnel uid = clnt.0-xwfzfhs8it2p3dwuwkasrvedie0s4akf_216351
02:43:43.275|00000a7c| Info|Tunnel.cpp(194): ** Connection from clnt.0-xwfzfhs8it2p3dwuwkasrvedie0s4akf_216351
02:43:43.275|00000a7c| Info|Bridge.cpp(357): 2<-::ffff:95.153.162.190:30302:368: has been accepted by master-only Tunnel 'ClientTunnel'(123456) from clnt.0-xwfzfhs8it2p3dwuwkasrvedie0s4akf_216351
02:43:43.275|00000a7c| Info|ConnMgr.cpp(882): 2<-::ffff:95.153.162.190:30302:368: Accepted connection request. identifying as '123456'(
iPhoneOS)
02:43:43.275|00000a7c| Info|ConnMgr.cpp(900): 2<-::ffff:95.153.162.190:30302:368: Added to common pool of master UDP handler. with UDP token clnt.0-xwfzfhs8it2p3dwuwkasrvedie0s4akf_216351$2
02:43:43.566|00000a80| Info|ConnMgr.cpp(1402): OutgoingTCP: Added 2<-::ffff:95.153.162.190:30302:368
02:43:44.065|00000a84| Info|TCPSide.cpp(1013): 1<-::ffff:95.153.162.190:10158:748 initiating UDP activation
02:43:44.065|00000a80| Info|Multiplexer.cpp(837): 1<-::ffff:95.153.162.190:10158:748: Start sending of keep alive packets
02:43:44.163|00000a7c| Info|Bridge.cpp(487): Got ClientSecureTunnelRequest0 from tunnel's connection clnt.0-3f015133-24ea-4848-984f-d8da893931f4_1066446
02:43:44.169|00000a7c| Info|TLSTransp.cpp(414): TLS read ahead is set to 0
02:43:44.170|00000a7c| Info|TLSTransp.cpp(459): Performing TLS handshake on socket 748@TLS(HS)
02:43:44.227|00000a84| Info|TCPSide.cpp(1013): 2<-::ffff:95.153.162.190:30302:368 initiating UDP activation
02:43:44.227|00000a80| Info|Multiplexer.cpp(837): 2<-::ffff:95.153.162.190:30302:368: Start sending of keep alive packets
02:43:44.433|00000a7c| Info|TLSTransp.cpp(495): TLS connection is accepted on socket 748@TLS(HS)
02:43:44.433|00000a7c| Info|TCPSide.cpp(369): TLS established, authorization is not required
02:43:44.433|00000a7c| Info|TLSTransp.cpp(522): TLS connection has finished handshake on socket 748@TLS(Up)
02:43:44.433|00000a7c| Info|Bridge.cpp(487): Got ClientSecureTunnelRequest0 from tunnel's connection clnt.0-xwfzfhs8it2p3dwuwkasrvedie0s4akf_216351
02:43:44.433|00000a7c| Info|TLSTransp.cpp(414): TLS read ahead is set to 0
02:43:44.433|00000a7c| Info|TLSTransp.cpp(459): Performing TLS handshake on socket 368@TLS(HS)
02:43:45.246|00000a7c| Info|TLSTransp.cpp(495): TLS connection is accepted on socket 368@TLS(HS)
02:43:45.246|00000a7c| Info|TCPSide.cpp(369): TLS established, authorization is not required
02:43:45.246|00000a7c| Info|TLSTransp.cpp(522): TLS connection has finished handshake on socket 368@TLS(Up)
02:43:45.322|000012f4| Info|ConnMgr.cpp(434): 1<-::ffff:95.153.162.190:10158:748: received UDPA confirmation from slave. Send unreliable response and prepare UDP channel
02:43:45.322|000012f4| Info|TCPSide.cpp(440): 1<-::ffff:95.153.162.190:10158:748: Master UDP channel has been redirected to dest=::ffff:95.153.162.190:10158
02:43:45.402|00000a7c| Info|Multiplexer.cpp(619): 1<-::ffff:95.153.162.190:10158:748: Master UDP channel is activated with clnt.0-3f015133-24ea-4848-984f-d8da893931f4_1066446$1
02:43:45.451|000012f4| Info|ConnMgr.cpp(434): 2<-::ffff:95.153.162.190:30302:368: received UDPA confirmation from slave. Send unreliable response and prepare UDP channel
02:43:45.451|000012f4| Info|TCPSide.cpp(440): 2<-::ffff:95.153.162.190:30302:368: Master UDP channel has been redirected to dest=::ffff:95.153.162.190:30302
02:43:45.552|00000a7c|Error|TLSTransp.cpp(563): TLS connection read has returned socket error: 0
02:43:45.552|00000a7c|Error|ConnMgr.cpp(1292): IncomingTCP: Connection 1<-::ffff:95.153.162.190:10158:748 read failure
02:43:45.552|00000a7c| Info|ConnMgr.cpp(1305): IncomingTCP: Removing 1<-::ffff:95.153.162.190:10158:748 . reason - processing failed (closed or failed connection)
02:43:45.552|00000a7c| Info|Tunnel.cpp(391): !! Tunnel 'ClientTunnel'(123456) had no activity for 10 sec (or generic transport error)
02:43:45.553|00000a7c| Info|Tunnel.cpp(331): Forcing termination of localhost
02:43:45.553|00000a84| Info|ConnMgr.cpp(1576): TimerActions: Removed 1<-::ffff:95.153.162.190:10158:748
02:43:45.553|00000a7c| Info|Tunnel.cpp(391): !! Tunnel 'ClientTunnel'(123456) had no activity for 10 sec (or generic transport error)
02:43:45.553|00000a78| Info|ConnMgr.cpp(1137): IncomingSlaveUDP: skip to DELETE connection 1<-::ffff:95.153.162.190:10158:748. It has no input channel for this handler.
02:43:45.553|00000a7c| Warn|Bridge.cpp(466): Currently mapped connection with id=clnt.0-3f015133-24ea-4848-984f-d8da893931f4_1066446 doesn't match to one being removed, ignore removal
02:43:45.553|00000a78| Info|ConnMgr.cpp(1137): IncomingSlaveUDP: skip to DELETE connection 1<-::ffff:95.153.162.190:10158:748. It has no input channel for this handler.
02:43:45.553|00000a7c| Warn|ConnMgr.cpp(1213): IncomingTCP: 1<-::ffff:95.153.162.190:10158:748 requested remove
02:43:45.553|00000a7c| Info|ConnMgr.cpp(1159): IncomingTCP: Removed 1<-::ffff:95.153.162.190:10158:748
02:43:45.553|00000a7c| Info|ConnMgr.cpp(1159): IncomingTCP: Removed 1<-::ffff:95.153.162.190:10158:748
02:43:45.622|00000a7c| Info|Multiplexer.cpp(619): 2<-::ffff:95.153.162.190:30302:368: Master UDP channel is activated with clnt.0-xwfzfhs8it2p3dwuwkasrvedie0s4akf_216351$2
02:43:45.868|00000a80| Info|ConnMgr.cpp(1408): OutgoingTCP: Removed 1<-::ffff:95.153.162.190:10158:748
02:43:45.868|00000a80| Info|ConnMgr.cpp(1408): OutgoingTCP: Removed 1<-::ffff:95.153.162.190:10158:748
02:43:45.868|00000a80| Info|TCPSide.cpp(300): 1<-::ffff:95.153.162.190:10158:748: Destroyed; num.conn=1
02:43:45.868|00000a80| Info|TLSTransp.cpp(436): TLS broke
02:43:45.868|00000a80| Info|Tunnel.cpp(212): Destroying Tunnel 123456
02:43:45.868|00000a80| Info|Tunnel.cpp(331): Forcing termination of localhost
02:44:15.137|00000a7c|Error|TLSTransp.cpp(563): TLS connection read has returned socket error: 0
02:44:15.137|00000a7c|Error|ConnMgr.cpp(1292): IncomingTCP: Connection 2<-::ffff:95.153.162.190:30302:368 read failure
02:44:15.137|00000a7c| Info|ConnMgr.cpp(1305): IncomingTCP: Removing 2<-::ffff:95.153.162.190:30302:368 . reason - processing failed (closed or failed connection)
02:44:15.137|00000a7c| Info|Tunnel.cpp(391): !! Tunnel 'ClientTunnel'(123456) had no activity for 10 sec (or generic transport error)
02:44:15.137|00000a7c| Info|Tunnel.cpp(331): Forcing termination of iPhoneOS
02:44:15.138|00000a7c| Info|Tunnel.cpp(391): !! Tunnel 'ClientTunnel'(123456) had no activity for 10 sec (or generic transport error)
02:44:15.137|00000a84| Info|ConnMgr.cpp(1576): TimerActions: Removed 2<-::ffff:95.153.162.190:30302:368
02:44:15.138|00000a78| Info|ConnMgr.cpp(1137): IncomingSlaveUDP: skip to DELETE connection 2<-::ffff:95.153.162.190:30302:368. It has no input channel for this handler.
02:44:15.138|00000a7c| Warn|Bridge.cpp(466): Currently mapped connection with id=clnt.0-xwfzfhs8it2p3dwuwkasrvedie0s4akf_216351 doesn't match to one being removed, ignore removal
02:44:15.138|00000a78| Info|ConnMgr.cpp(1137): IncomingSlaveUDP: skip to DELETE connection 2<-::ffff:95.153.162.190:30302:368. It has no input channel for this handler.
02:44:15.138|00000a7c| Warn|ConnMgr.cpp(1213): IncomingTCP: 2<-::ffff:95.153.162.190:30302:368 requested remove
02:44:15.138|00000a7c| Info|ConnMgr.cpp(1159): IncomingTCP: Removed 2<-::ffff:95.153.162.190:30302:368
02:44:15.138|00000a7c| Info|ConnMgr.cpp(1159): IncomingTCP: Removed 2<-::ffff:95.153.162.190:30302:368
02:44:15.239|00000a80| Info|ConnMgr.cpp(1408): OutgoingTCP: Removed 2<-::ffff:95.153.162.190:30302:368
02:44:15.239|00000a80| Info|ConnMgr.cpp(1408): OutgoingTCP: Removed 2<-::ffff:95.153.162.190:30302:368
02:44:15.239|00000a80| Info|TCPSide.cpp(300): 2<-::ffff:95.153.162.190:30302:368: Destroyed; num.conn=0
02:44:15.239|00000a80| Info|TLSTransp.cpp(436): TLS broke
02:44:15.239|00000a80| Info|Tunnel.cpp(212): Destroying Tunnel 123456
02:44:15.239|00000a80| Info|Tunnel.cpp(331): Forcing termination of iPhoneOS
02:44:34.582|00001204| Info|Stack.cpp(390): SIP Stats:
 
10.144.22.6 - это частная сеть. Поменяйте пароль на своем номере. Можете в 3CX также заблокировать этот адрес и посмотреть, что будет.
 
Это-то я сделаю легко. но мучает вопрос, кто как и почему набрала на мобильный номер, который вообще не светиться в логах!
если только информация о вызове
 
Я не думаю, что Вам надо что-то в логах искать.
Просто посмотрите историю звонков (на сервере)
Если там нет исходящего звонка то и искать Вам нечего - такого звонка не существует и никогда не существовало.
Судя по логам, которые Вы предоставили, в истории увидите входящий звонок по линии 10001 (от провайдера) с номера +7560605 и то, что звонок был отправлен на такой-то внутренний номер и всё что с ним далее произошло.

P.S. если звонок был, то он будет и в истории звонков и в логах. Если его там нет - то и звонок никакого отношения к АТС не имеет.
 
Последнее редактирование:

Для администраторов

Статистика форума

Темы
44.771
Сообщения
233.695
Пользователи
78.502
Новый пользователь
Hasepups
#