[asterisk-users] Why are the hackers scanning for these?

[sean darcy]

On Sun, Nov 7, 2010 at 10:00 AM, Cary Fitch <caryf at usawide.net> wrote:
>
>
>
>
> ________________________________
>
> From: asterisk-users-bounces at lists.digium.com
> [mailto:asterisk-users-bounces at lists.digium.com] On Behalf Of Dan Journo
> Sent: Sunday, November 07, 2010 8:33 AM
>
> To: Asterisk Users Mailing List - Non-Commercial Discussion
> Subject: Re: [asterisk-users] Why are the hackers scanning for these?
>
>
>
>> Here's some examples:
>
>>2648061411
>>3190339404
>
> I'm getting exactly the same. Odds of getting a working number, are like the
> odds of winning the lottery.
>
> My guess is they are either trying to find a voip trunk, or they are trying
> to make cold calls to the extensions on my system. Sales or something
> similar.
>
>
>
> We got pounded last weekend, but installed a list of distant IPs in IPTABLES
> and see nothing this weekend.
>
> We have no need to be contacted by any sites more than 2500 miles away, and
> not too many from within 2500 miles. ;-)
>
> Cary Fitch
>
>
>
> --
> _____________________________________________________________________
> -- Bandwidth and Colocation Provided by http://www.api-digital.com --
> New to Asterisk? Join us for a live introductory webinar every Thurs:
>               http://www.asterisk.org/hello
>
> asterisk-users mailing list
> To UNSUBSCRIBE or update options visit:
>   http://lists.digium.com/mailman/listinfo/asterisk-users
>

I've just switched my outbound ip address a week ago. Not static, but
dhcp on TimeWarner cable.  I've registered only with another of our
offices. The outbound calls are all pstn bound through Teliax.

But somehow my log is filling up with registration requests over this
new ip address from a bunch of addresses. How can these guys find my
new ip address? Or are they just scanning all ip addresses in
creation?

sean