Bruce B
2012-Jan-02 19:57 UTC
[asterisk-users] Wired attack on Asterisk - Can anyone explain this?
Hello, Can anyone explain what this attack was trying to do? *19.19.19.19 *is my server IP and it seems that they are trying to use my server IP to initiate a SIP call to 199.16.208.29 or 199.16.208.30. Is that so? *Call Date Channel Source CLID DST Disposition Duration * 10/4/2011 19:58 SIP/19,19,19,19-0000061f 111222 199.16.208.29 199.16.208.30 <111222> s ANSWERED 3 10/4/2011 19:58 SIP/19,19,19,19-0000061f 111222 199.16.208.29 199.16.208.30 <111222> s ANSWERED 3 10/4/2011 19:58 SIP/19,19,19,19-00000620 101 199.16.208.29 199.16.208.30 <101> s ANSWERED 2 10/4/2011 19:58 SIP/19,19,19,19-00000620 101 199.16.208.29 199.16.208.30 <101> s ANSWERED 2 10/4/2011 19:58 SIP/19,19,19,19-00000621 1001 199.16.208.29 199.16.208.30 <1001> s ANSWERED 1 10/4/2011 19:58 SIP/19,19,19,19-00000621 1001 199.16.208.29 199.16.208.30 <1001> s ANSWERED 1 10/4/2011 19:59 SIP/19,19,19,19-00000622 200 199.16.208.29 199.16.208.30 <200> s ANSWERED 1 Thanks, -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.digium.com/pipermail/asterisk-users/attachments/20120102/b2628ab4/attachment.htm>