[asterisk-dev] Better logging for SIP attacks

Philip Prindeville philipp_subx at redfish-solutions.com
Fri Jul 22 00:51:58 CDT 2011


I'm looking at the following:

Jul 15 16:39:31 pbx local0.notice asterisk[5760]: NOTICE[5794]: chan_sip.c:21372 in handle_request_invite: Call from '' to extension '000442070661000' rejected because extension not found in context 'INVALID'.
Jul 15 17:20:04 pbx local0.notice asterisk[5760]: NOTICE[5794]: chan_sip.c:21372 in handle_request_invite: Call from '' to extension '000442070661000' rejected because extension not found in context 'INVALID'.
Jul 15 17:21:08 pbx local0.notice asterisk[5760]: NOTICE[5794]: chan_sip.c:21372 in handle_request_invite: Call from '' to extension '00442070661000' rejected because extension not found in context 'INVALID'.
Jul 15 17:22:31 pbx local0.notice asterisk[5760]: NOTICE[5794]: chan_sip.c:21372 in handle_request_invite: Call from '' to extension '0000442070661000' rejected because extension not found in context 'INVALID'.
Jul 15 17:23:36 pbx local0.notice asterisk[5760]: NOTICE[5794]: chan_sip.c:21372 in handle_request_invite: Call from '' to extension '001442070661000' rejected because extension not found in context 'INVALID'.
Jul 15 17:24:40 pbx local0.notice asterisk[5760]: NOTICE[5794]: chan_sip.c:21372 in handle_request_invite: Call from '' to extension '0011442070661000' rejected because extension not found in context 'INVALID'.
Jul 15 17:25:44 pbx local0.notice asterisk[5760]: NOTICE[5794]: chan_sip.c:21372 in handle_request_invite: Call from '' to extension '011442070661000' rejected because extension not found in context 'INVALID'.
Jul 15 17:26:47 pbx local0.notice asterisk[5760]: NOTICE[5794]: chan_sip.c:21372 in handle_request_invite: Call from '' to extension '00011442070661000' rejected because extension not found in context 'INVALID'.
Jul 15 17:27:50 pbx local0.notice asterisk[5760]: NOTICE[5794]: chan_sip.c:21372 in handle_request_invite: Call from '' to extension '9011442070661000' rejected because extension not found in context 'INVALID'.
Jul 15 17:28:54 pbx local0.notice asterisk[5760]: NOTICE[5794]: chan_sip.c:21372 in handle_request_invite: Call from '' to extension '9011442070661000' rejected because extension not found in context 'INVALID'.
Jul 15 17:30:00 pbx local0.notice asterisk[5760]: NOTICE[5794]: chan_sip.c:21372 in handle_request_invite: Call from '' to extension '900442070661000' rejected because extension not found in context 'INVALID'.
Jul 15 17:31:03 pbx local0.notice asterisk[5760]: NOTICE[5794]: chan_sip.c:21372 in handle_request_invite: Call from '' to extension '90442070661000' rejected because extension not found in context 'INVALID'.
Jul 15 20:27:17 pbx local0.notice asterisk[5760]: NOTICE[5794]: chan_sip.c:21372 in handle_request_invite: Call from '' to extension '000442070661000' rejected because extension not found in context 'INVALID'.
Jul 15 20:28:19 pbx local0.notice asterisk[5760]: NOTICE[5794]: chan_sip.c:21372 in handle_request_invite: Call from '' to extension '00442070661000' rejected because extension not found in context 'INVALID'.
Jul 15 20:29:24 pbx local0.notice asterisk[5760]: NOTICE[5794]: chan_sip.c:21372 in handle_request_invite: Call from '' to extension '0000442070661000' rejected because extension not found in context 'INVALID'.
Jul 15 20:30:27 pbx local0.notice asterisk[5760]: NOTICE[5794]: chan_sip.c:21372 in handle_request_invite: Call from '' to extension '001442070661000' rejected because extension not found in context 'INVALID'.
Jul 15 20:31:31 pbx local0.notice asterisk[5760]: NOTICE[5794]: chan_sip.c:21372 in handle_request_invite: Call from '' to extension '0011442070661000' rejected because extension not found in context 'INVALID'.
Jul 15 20:32:34 pbx local0.notice asterisk[5760]: NOTICE[5794]: chan_sip.c:21372 in handle_request_invite: Call from '' to extension '011442070661000' rejected because extension not found in context 'INVALID'.
Jul 15 20:33:37 pbx local0.notice asterisk[5760]: NOTICE[5794]: chan_sip.c:21372 in handle_request_invite: Call from '' to extension '00011442070661000' rejected because extension not found in context 'INVALID'.
Jul 15 20:35:18 pbx local0.notice asterisk[5760]: NOTICE[5794]: chan_sip.c:21372 in handle_request_invite: Call from '' to extension '9011442070661000' rejected because extension not found in context 'INVALID'.
Jul 15 20:36:26 pbx local0.notice asterisk[5760]: NOTICE[5794]: chan_sip.c:21372 in handle_request_invite: Call from '' to extension '9011442070661000' rejected because extension not found in context 'INVALID'.
Jul 15 20:37:32 pbx local0.notice asterisk[5760]: NOTICE[5794]: chan_sip.c:21372 in handle_request_invite: Call from '' to extension '900442070661000' rejected because extension not found in context 'INVALID'.
Jul 15 20:38:34 pbx local0.notice asterisk[5760]: NOTICE[5794]: chan_sip.c:21372 in handle_request_invite: Call from '' to extension '90442070661000' rejected because extension not found in context 'INVALID'.
Jul 15 20:39:37 pbx local0.notice asterisk[5760]: NOTICE[5794]: chan_sip.c:21372 in handle_request_invite: Call from '' to extension '9810442070661000' rejected because extension not found in context 'INVALID'.
Jul 15 20:40:40 pbx local0.notice asterisk[5760]: NOTICE[5794]: chan_sip.c:21372 in handle_request_invite: Call from '' to extension '810442070661000' rejected because extension not found in context 'INVALID'.
Jul 15 20:41:43 pbx local0.notice asterisk[5760]: NOTICE[5794]: chan_sip.c:21372 in handle_request_invite: Call from '' to extension '9442070661000' rejected because extension not found in context 'INVALID'.
Jul 15 20:42:48 pbx local0.notice asterisk[5760]: NOTICE[5794]: chan_sip.c:21372 in handle_request_invite: Call from '' to extension '856442070661000' rejected because extension not found in context 'INVALID'.
Jul 15 20:43:50 pbx local0.notice asterisk[5760]: NOTICE[5794]: chan_sip.c:21372 in handle_request_invite: Call from '' to extension '1011442070661000' rejected because extension not found in context 'INVALID'.
Jul 15 20:44:54 pbx local0.notice asterisk[5760]: NOTICE[5794]: chan_sip.c:21372 in handle_request_invite: Call from '' to extension '2011442070661000' rejected because extension not found in context 'INVALID'.
Jul 15 20:45:56 pbx local0.notice asterisk[5760]: NOTICE[5794]: chan_sip.c:21372 in handle_request_invite: Call from '' to extension '3011442070661000' rejected because extension not found in context 'INVALID'.
Jul 15 20:47:00 pbx local0.notice asterisk[5760]: NOTICE[5794]: chan_sip.c:21372 in handle_request_invite: Call from '' to extension '4011442070661000' rejected because extension not found in context 'INVALID'.
Jul 15 20:48:04 pbx local0.notice asterisk[5760]: NOTICE[5794]: chan_sip.c:21372 in handle_request_invite: Call from '' to extension '5011442070661000' rejected because extension not found in context 'INVALID'.
Jul 15 20:49:09 pbx local0.notice asterisk[5760]: NOTICE[5794]: chan_sip.c:21372 in handle_request_invite: Call from '' to extension '6011442070661000' rejected because extension not found in context 'INVALID'.
Jul 15 20:50:15 pbx local0.notice asterisk[5760]: NOTICE[5794]: chan_sip.c:21372 in handle_request_invite: Call from '' to extension '7011442070661000' rejected because extension not found in context 'INVALID'.
Jul 15 20:51:20 pbx local0.notice asterisk[5760]: NOTICE[5794]: chan_sip.c:21372 in handle_request_invite: Call from '' to extension '8011442070661000' rejected because extension not found in context 'INVALID'.
Jul 15 20:52:23 pbx local0.notice asterisk[5760]: NOTICE[5794]: chan_sip.c:21372 in handle_request_invite: Call from '' to extension '100442070661000' rejected because extension not found in context 'INVALID'.
Jul 15 20:53:35 pbx local0.notice asterisk[5760]: NOTICE[5794]: chan_sip.c:21372 in handle_request_invite: Call from '' to extension '300442070661000' rejected because extension not found in context 'INVALID'.
Jul 15 20:54:46 pbx local0.notice asterisk[5760]: NOTICE[5794]: chan_sip.c:21372 in handle_request_invite: Call from '' to extension '400442070661000' rejected because extension not found in context 'INVALID'.
Jul 15 20:55:55 pbx local0.notice asterisk[5760]: NOTICE[5794]: chan_sip.c:21372 in handle_request_invite: Call from '' to extension '500442070661000' rejected because extension not found in context 'INVALID'.
Jul 15 20:57:02 pbx local0.notice asterisk[5760]: NOTICE[5794]: chan_sip.c:21372 in handle_request_invite: Call from '' to extension '600442070661000' rejected because extension not found in context 'INVALID'.
Jul 15 20:58:07 pbx local0.notice asterisk[5760]: NOTICE[5794]: chan_sip.c:21372 in handle_request_invite: Call from '' to extension '700442070661000' rejected because extension not found in context 'INVALID'.
Jul 15 20:59:10 pbx local0.notice asterisk[5760]: NOTICE[5794]: chan_sip.c:21372 in handle_request_invite: Call from '' to extension '800442070661000' rejected because extension not found in context 'INVALID'.
Jul 15 21:00:14 pbx local0.notice asterisk[5760]: NOTICE[5794]: chan_sip.c:21372 in handle_request_invite: Call from '' to extension '+00442070661000' rejected because extension not found in context 'INVALID'.
Jul 15 21:01:17 pbx local0.notice asterisk[5760]: NOTICE[5794]: chan_sip.c:21372 in handle_request_invite: Call from '' to extension '+011442070661000' rejected because extension not found in context 'INVALID'.
Jul 15 21:02:21 pbx local0.notice asterisk[5760]: NOTICE[5794]: chan_sip.c:21372 in handle_request_invite: Call from '' to extension '+900442070661000' rejected because extension not found in context 'INVALID'.
Jul 15 21:04:22 pbx local0.notice asterisk[5760]: NOTICE[5794]: chan_sip.c:21372 in handle_request_invite: Call from '' to extension '+810442070661000' rejected because extension not found in context 'INVALID'.
Jul 15 21:04:27 pbx local0.notice asterisk[5760]: NOTICE[5794]: chan_sip.c:21372 in handle_request_invite: Call from '' to extension '+9810442070661000' rejected because extension not found in context 'INVALID'.
Jul 15 21:05:31 pbx local0.notice asterisk[5760]: NOTICE[5794]: chan_sip.c:21372 in handle_request_invite: Call from '' to extension '+856442070661000' rejected because extension not found in context 'INVALID'.
Jul 15 21:06:36 pbx local0.notice asterisk[5760]: NOTICE[5794]: chan_sip.c:21372 in handle_request_invite: Call from '' to extension '+9856442070661000' rejected because extension not found in context 'INVALID'.
Jul 15 21:07:39 pbx local0.notice asterisk[5760]: NOTICE[5794]: chan_sip.c:21372 in handle_request_invite: Call from '' to extension '+0011442070661000' rejected because extension not found in context 'INVALID'.
Jul 15 21:08:44 pbx local0.notice asterisk[5760]: NOTICE[5794]: chan_sip.c:21372 in handle_request_invite: Call from '' to extension '+000442070661000' rejected because extension not found in context 'INVALID'.
Jul 15 21:09:50 pbx local0.notice asterisk[5760]: NOTICE[5794]: chan_sip.c:21372 in handle_request_invite: Call from '' to extension '+0442070661000' rejected because extension not found in context 'INVALID'.
Jul 15 21:10:54 pbx local0.notice asterisk[5760]: NOTICE[5794]: chan_sip.c:21372 in handle_request_invite: Call from '' to extension '+442070661000' rejected because extension not found in context 'INVALID'.
Jul 15 21:12:06 pbx local0.notice asterisk[5760]: NOTICE[5794]: chan_sip.c:21372 in handle_request_invite: Call from '' to extension '*442070661000' rejected because extension not found in context 'INVALID'.
Jul 15 21:13:16 pbx local0.notice asterisk[5760]: NOTICE[5794]: chan_sip.c:21372 in handle_request_invite: Call from '' to extension '#442070661000' rejected because extension not found in context 'INVALID'.
Jul 15 21:15:20 pbx local0.notice asterisk[5760]: NOTICE[5794]: chan_sip.c:21372 in handle_request_invite: Call from '' to extension '**442070661000' rejected because extension not found in context 'INVALID'.
Jul 15 21:15:25 pbx local0.notice asterisk[5760]: NOTICE[5794]: chan_sip.c:21372 in handle_request_invite: Call from '' to extension 'test442070661000' rejected because extension not found in context 'INVALID'.
Jul 15 21:16:33 pbx local0.notice asterisk[5760]: NOTICE[5794]: chan_sip.c:21372 in handle_request_invite: Call from '' to extension '1000442070661000' rejected because extension not found in context 'INVALID'.
Jul 15 21:17:35 pbx local0.notice asterisk[5760]: NOTICE[5794]: chan_sip.c:21372 in handle_request_invite: Call from '' to extension '3000442070661000' rejected because extension not found in context 'INVALID'.
Jul 15 21:18:40 pbx local0.notice asterisk[5760]: NOTICE[5794]: chan_sip.c:21372 in handle_request_invite: Call from '' to extension '4000442070661000' rejected because extension not found in context 'INVALID'.
Jul 15 21:19:44 pbx local0.notice asterisk[5760]: NOTICE[5794]: chan_sip.c:21372 in handle_request_invite: Call from '' to extension '5000442070661000' rejected because extension not found in context 'INVALID'.
Jul 15 21:20:48 pbx local0.notice asterisk[5760]: NOTICE[5794]: chan_sip.c:21372 in handle_request_invite: Call from '' to extension '6000442070661000' rejected because extension not found in context 'INVALID'.
Jul 15 21:21:52 pbx local0.notice asterisk[5760]: NOTICE[5794]: chan_sip.c:21372 in handle_request_invite: Call from '' to extension '7000442070661000' rejected because extension not found in context 'INVALID'.
Jul 15 21:22:56 pbx local0.notice asterisk[5760]: NOTICE[5794]: chan_sip.c:21372 in handle_request_invite: Call from '' to extension '8000442070661000' rejected because extension not found in context 'INVALID'.
Jul 15 21:24:02 pbx local0.notice asterisk[5760]: NOTICE[5794]: chan_sip.c:21372 in handle_request_invite: Call from '' to extension '9000442070661000' rejected because extension not found in context 'INVALID'.
Jul 15 21:25:06 pbx local0.notice asterisk[5760]: NOTICE[5794]: chan_sip.c:21372 in handle_request_invite: Call from '' to extension '1111442070661000' rejected because extension not found in context 'INVALID'.
Jul 15 21:26:12 pbx local0.notice asterisk[5760]: NOTICE[5794]: chan_sip.c:21372 in handle_request_invite: Call from '' to extension '2222442070661000' rejected because extension not found in context 'INVALID'.
Jul 15 21:27:17 pbx local0.notice asterisk[5760]: NOTICE[5794]: chan_sip.c:21372 in handle_request_invite: Call from '' to extension '3333442070661000' rejected because extension not found in context 'INVALID'.
Jul 15 21:28:22 pbx local0.notice asterisk[5760]: NOTICE[5794]: chan_sip.c:21372 in handle_request_invite: Call from '' to extension '4444442070661000' rejected because extension not found in context 'INVALID'.
Jul 15 21:29:26 pbx local0.notice asterisk[5760]: NOTICE[5794]: chan_sip.c:21372 in handle_request_invite: Call from '' to extension '5555442070661000' rejected because extension not found in context 'INVALID'.
Jul 15 21:30:33 pbx local0.notice asterisk[5760]: NOTICE[5794]: chan_sip.c:21372 in handle_request_invite: Call from '' to extension '6666442070661000' rejected because extension not found in context 'INVALID'.
Jul 15 21:31:42 pbx local0.notice asterisk[5760]: NOTICE[5794]: chan_sip.c:21372 in handle_request_invite: Call from '' to extension '7777442070661000' rejected because extension not found in context 'INVALID'.
Jul 15 21:32:48 pbx local0.notice asterisk[5760]: NOTICE[5794]: chan_sip.c:21372 in handle_request_invite: Call from '' to extension '8888442070661000' rejected because extension not found in context 'INVALID'.
Jul 15 21:33:54 pbx local0.notice asterisk[5760]: NOTICE[5794]: chan_sip.c:21372 in handle_request_invite: Call from '' to extension '9999442070661000' rejected because extension not found in context 'INVALID'.
Jul 15 21:35:01 pbx local0.notice asterisk[5760]: NOTICE[5794]: chan_sip.c:21372 in handle_request_invite: Call from '' to extension '1337442070661000' rejected because extension not found in context 'INVALID'.
Jul 15 21:36:08 pbx local0.notice asterisk[5760]: NOTICE[5794]: chan_sip.c:21372 in handle_request_invite: Call from '' to extension '011011442070661000' rejected because extension not found in context 'INVALID'.
Jul 15 21:37:13 pbx local0.notice asterisk[5760]: NOTICE[5794]: chan_sip.c:21372 in handle_request_invite: Call from '' to extension '911442070661000' rejected because extension not found in context 'INVALID'.
Jul 15 21:38:18 pbx local0.notice asterisk[5760]: NOTICE[5794]: chan_sip.c:21372 in handle_request_invite: Call from '' to extension '11442070661000' rejected because extension not found in context 'INVALID'.
Jul 15 21:39:25 pbx local0.notice asterisk[5760]: NOTICE[5794]: chan_sip.c:21372 in handle_request_invite: Call from '' to extension '1442070661000' rejected because extension not found in context 'INVALID'.
Jul 15 21:40:28 pbx local0.notice asterisk[5760]: NOTICE[5794]: chan_sip.c:21372 in handle_request_invite: Call from '' to extension '00011442070661000' rejected because extension not found in context 'INVALID'.
Jul 15 21:41:33 pbx local0.notice asterisk[5760]: NOTICE[5794]: chan_sip.c:21372 in handle_request_invite: Call from '' to extension '01100442070661000' rejected because extension not found in context 'INVALID'.
Jul 15 21:42:38 pbx local0.notice asterisk[5760]: NOTICE[5794]: chan_sip.c:21372 in handle_request_invite: Call from '' to extension '442070661000' rejected because extension not found in context 'INVALID'.
Jul 16 04:15:26 pbx local0.notice asterisk[5760]: NOTICE[5794]: chan_sip.c:21372 in handle_request_invite: Call from '' to extension '000442070661000' rejected because extension not found in context 'INVALID'.
Jul 16 05:33:55 pbx local0.notice asterisk[5760]: NOTICE[5794]: chan_sip.c:21372 in handle_request_invite: Call from '' to extension '00442070661000' rejected because extension not found in context 'INVALID'.
Jul 16 06:52:17 pbx local0.notice asterisk[5760]: NOTICE[5794]: chan_sip.c:21372 in handle_request_invite: Call from '' to extension '0000442070661000' rejected because extension not found in context 'INVALID'.
Jul 16 09:06:33 pbx local0.notice asterisk[5760]: NOTICE[5794]: chan_sip.c:21372 in handle_request_invite: Call from '' to extension '001442070661000' rejected because extension not found in context 'INVALID'.
Jul 16 14:07:32 pbx local0.notice asterisk[5760]: NOTICE[5794]: chan_sip.c:21372 in handle_request_invite: Call from '' to extension '0011442070661000' rejected because extension not found in context 'INVALID'.
Jul 16 20:32:52 pbx local0.notice asterisk[5760]: NOTICE[5794]: chan_sip.c:21372 in handle_request_invite: Call from '' to extension '011442070661000' rejected because extension not found in context 'INVALID'.


And thinking that without an IP address, I can't contact the abuser's ISP, but to get that I'd have to turn on SIP debugging, which on a fairly busy switch would just be too noisy.

Should more information be logged with this?

-Philip



More information about the asterisk-dev mailing list