<p>Seems like anonymous SIP calls which end up in from-sip-external context with a dead end. This is usually how hackers start their hack attempts.<br></p>
<p>Zeeshan A Zakaria</p>
<p>--<br>
<a href="http://www.ilovetovoip.com">www.ilovetovoip.com</a></p>
<p><blockquote type="cite">On 2010-10-02 3:05 PM, "bruce bruce" <<a href="mailto:bruceb444@gmail.com">bruceb444@gmail.com</a>> wrote:<br><br>Hi Everyone,<div><br></div><div>Like always, here are IPs from China that try to hack an Asterisk server. Can someone please explain what is happening or what the hacker is trying to reach:</div>
<div><br></div><div>
02/10/2010 11:10
SIP/113.105.152.51-000000fb
sip
"sip" <sip>
s
ANSWERED
13
02/10/2010 11:10
SIP/113.105.152.51-000000fe
sip
"sip" <sip>
s
ANSWERED
13
02/10/2010 11:10
SIP/113.105.152.51-000000fc
sip
"sip" <sip>
s
ANSWERED
13
02/10/2010 11:10
SIP/113.105.152.51-000000fd
sip
"sip" <sip>
s
ANSWERED
13
02/10/2010 11:10
SIP/113.105.152.51-000000ff
sip
"sip" <sip>
s
ANSWERED
13
02/10/2010 11:10
SIP/113.105.152.51-00000100
sip
"sip" <sip>
s
ANSWERED
13
02/10/2010 11:17
SIP/222.73.204.198-00000101
sip
"sip" <sip>
s
ANSWERED
13
02/10/2010 11:17
SIP/222.73.204.198-00000102
sip
"sip" <sip>
s
ANSWERED
13
02/10/2010 11:17
SIP/222.73.204.198-00000103
sip
"sip" <sip>
s
ANSWERED
13
02/10/2010 11:17
SIP/222.73.204.198-00000104
sip
"sip" <sip>
s
ANSWERED
13
02/10/2010 11:17
SIP/222.73.204.198-00000105
sip
"sip" <sip>
s
ANSWERED
13
02/10/2010 11:17
SIP/222.73.204.198-00000106
sip
"sip" <sip>
s
ANSWERED
13
02/10/2010 11:17
SIP/222.73.204.198-00000107
sip
"sip" <sip>
s
ANSWERED
13
02/10/2010 11:17
SIP/222.73.204.198-00000108
sip
"sip" <sip>
s
ANSWERED
13
02/10/2010 11:17
SIP/222.73.204.198-00000109
sip
"sip" <sip>
s
ANSWERED
13<br><br><br><div style="text-align:left">Thanks</div></div>
<br>--<br>
_____________________________________________________________________<br>
-- Bandwidth and Colocation Provided by <a href="http://www.api-digital.com" target="_blank">http://www.api-digital.com</a> --<br>
New to Asterisk? Join us for a live introductory webinar every Thurs:<br>
<a href="http://www.asterisk.org/hello" target="_blank">http://www.asterisk.org/hello</a><br>
<br>
asterisk-users mailing list<br>
To UNSUBSCRIBE or update options visit:<br>
<a href="http://lists.digium.com/mailman/listinfo/asterisk-users" target="_blank">http://lists.digium.com/mailman/listinfo/asterisk-users</a><br></blockquote></p>