Bruce B
2012-Jan-02 19:57 UTC
[asterisk-users] Wired attack on Asterisk - Can anyone explain this?
Hello,
Can anyone explain what this attack was trying to do? *19.19.19.19 *is my
server IP and it seems that they are trying to use my server IP to initiate
a SIP call to 199.16.208.29 or 199.16.208.30. Is that so?
*Call Date Channel Source CLID
DST
Disposition Duration * 10/4/2011 19:58 SIP/19,19,19,19-0000061f
111222 199.16.208.29 199.16.208.30 <111222> s ANSWERED 3 10/4/2011
19:58
SIP/19,19,19,19-0000061f 111222 199.16.208.29 199.16.208.30
<111222> s ANSWERED 3 10/4/2011 19:58 SIP/19,19,19,19-00000620 101
199.16.208.29
199.16.208.30 <101> s ANSWERED 2 10/4/2011 19:58
SIP/19,19,19,19-00000620 101 199.16.208.29 199.16.208.30 <101>
s ANSWERED 2 10/4/2011 19:58 SIP/19,19,19,19-00000621 1001 199.16.208.29
199.16.208.30 <1001> s ANSWERED 1 10/4/2011 19:58
SIP/19,19,19,19-00000621 1001 199.16.208.29 199.16.208.30 <1001>
s
ANSWERED 1 10/4/2011 19:59 SIP/19,19,19,19-00000622 200 199.16.208.29
199.16.208.30 <200> s ANSWERED 1
Thanks,
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://lists.digium.com/pipermail/asterisk-users/attachments/20120102/b2628ab4/attachment.htm>