Seems like anonymous SIP calls which end up in from-sip-external context with a dead end. This is usually how hackers start their hack attempts.
Zeeshan A Zakaria -- www.ilovetovoip.com On 2010-10-02 3:05 PM, "bruce bruce" <[email protected]> wrote: Hi Everyone, Like always, here are IPs from China that try to hack an Asterisk server. Can someone please explain what is happening or what the hacker is trying to reach: 02/10/2010 11:10 SIP/113.105.152.51-000000fb sip "sip" <sip> s ANSWERED 13 02/10/2010 11:10 SIP/113.105.152.51-000000fe sip "sip" <sip> s ANSWERED 13 02/10/2010 11:10 SIP/113.105.152.51-000000fc sip "sip" <sip> s ANSWERED 13 02/10/2010 11:10 SIP/113.105.152.51-000000fd sip "sip" <sip> s ANSWERED 13 02/10/2010 11:10 SIP/113.105.152.51-000000ff sip "sip" <sip> s ANSWERED 13 02/10/2010 11:10 SIP/113.105.152.51-00000100 sip "sip" <sip> s ANSWERED 13 02/10/2010 11:17 SIP/222.73.204.198-00000101 sip "sip" <sip> s ANSWERED 13 02/10/2010 11:17 SIP/222.73.204.198-00000102 sip "sip" <sip> s ANSWERED 13 02/10/2010 11:17 SIP/222.73.204.198-00000103 sip "sip" <sip> s ANSWERED 13 02/10/2010 11:17 SIP/222.73.204.198-00000104 sip "sip" <sip> s ANSWERED 13 02/10/2010 11:17 SIP/222.73.204.198-00000105 sip "sip" <sip> s ANSWERED 13 02/10/2010 11:17 SIP/222.73.204.198-00000106 sip "sip" <sip> s ANSWERED 13 02/10/2010 11:17 SIP/222.73.204.198-00000107 sip "sip" <sip> s ANSWERED 13 02/10/2010 11:17 SIP/222.73.204.198-00000108 sip "sip" <sip> s ANSWERED 13 02/10/2010 11:17 SIP/222.73.204.198-00000109 sip "sip" <sip> s ANSWERED 13 Thanks -- _____________________________________________________________________ -- Bandwidth and Colocation Provided by http://www.api-digital.com -- New to Asterisk? Join us for a live introductory webinar every Thurs: http://www.asterisk.org/hello asterisk-users mailing list To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users
-- _____________________________________________________________________ -- Bandwidth and Colocation Provided by http://www.api-digital.com -- New to Asterisk? Join us for a live introductory webinar every Thurs: http://www.asterisk.org/hello asterisk-users mailing list To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users
