[asterisk-users] Why are the hackers scanning for these?

[Cary Fitch]

My guess is they are looking for 10 digit phone numbers as extensions.

 

Are they all from 1 IP address or from many?  If from many, they are likely many serial scan or from a list of suspected VOIP numbers.  If from one, and that random, then from a list of suspected VOIP numbers.

 

Since you listed a phone number as part of your signature… I might guess hackers might soon add that number to a scan list.

 

It is one thing to randomly run 2,XXX-,XXXX to 999-999-9999, with skips for the “dead zones,” (0-XXX-XXX-XXXX) etc. but another to hit suspected VOIP numbers.

 

Cary Fitch

 

  _____  

From: asterisk-users-bounces at lists.digium.com [mailto:asterisk-users-bounces at lists.digium.com] On Behalf Of Steve Murphy
Sent: Sunday, November 07, 2010 8:12 AM
To: Asterisk Users Mailing List - Non-Commercial Discussion
Subject: [asterisk-users] Why are the hackers scanning for these?

 


Hey, I'm going thru logs, and I see some very common and interesting things
that the hackers are looking for.

In a whole bunch of scans, I've noticed that the first guess or two for sip accounts
is usually a 10-digit number. I'm asking myself, why these numbers? Are they looking
for a voip trunk? Or is it just like a serial number for the scan? What?

Here's some examples:

2648061411
3190339404
2685608247
3358171034
2092652562
2206598858

Just trying to follow the advice: "Know thy Enemy"

murf



Steve Murphy

ParseTree Corp.

57 Lane 17

Cody, WY 82414

✉  murf at parsetree.com

☎ 307-899-5535

 <http://www.wisestamp.com/email-install?utm_source=extension&utm_medium=email&utm_campaign=footer> Signature powered by  <http://www.wisestamp.com/email-install?utm_source=extension&utm_medium=email&utm_campaign=footer> WiseStamp 

  <http://s.wisestamp.com/pixel.png?p=mozilla&v=2.0.3&t=1289138760949&u=949715&e=4286> 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.digium.com/pipermail/asterisk-users/attachments/20101107/71badb8c/attachment.htm