<html><body><span style="font-family:Verdana; color:#000000; font-size:10pt;"><div><br></div><div>Jim,</div><div><br></div><div>I do believe it is indeed a hack script. Once they find a voip port from a scan of your router, then to find a valid extension and then a valid password for it. </div><div><br></div><div>They have all the time in the world to do it. However, if you get many of these at the same time, it can slow the system down.<br></div><div><br></div><div>I have not seen many in a while but that's it. They may not actually be in china but probably are.<br></div><div>You might try to firewall/block the incoming IP.<br></div><div><br></div><div>...mike/kb8jnm</div><div><br> <div id="wmQuoteWrapper"> -------- Original Message --------<br> Subject: [App_rpt-users] What is this?<br> From: "Jim" <<a target="_blank" href="mailto:jimw7ry@gmail.com">jimw7ry@gmail.com</a>><br> Date: Sat, August 09, 2014 2:01 am<br> To: <<a target="_blank" href="mailto:app_rpt-users@ohnosec.org">app_rpt-users@ohnosec.org</a>><br> <br> <div dir="ltr"> <div style="FONT-SIZE: 12pt; FONT-FAMILY: 'Calibri'; COLOR: #000000"> <div>Can anyone tell me what this is? When I logged in, it just kept going and going scrolling line after line.</div> <div> </div> <div>Just looked up the IP and it’s from China. Someone trying to hack is my guess. Any way to stop it?</div> <div> </div> <div> </div> <div>Thanks!</div> <div>73</div> <div>Jim W7RY</div> <div> </div> <div> </div> <div>Aug 8 22:56:49] NOTICE[2291]: chan_sip.c:15628 handle_request_register: Registration from '"3857747"<sip:3857747@192.168.1.40:5060>' failed for '182.98.238.222' - No matching peer found</div> <div>[Aug 8 22:56:49] NOTICE[2291]: chan_sip.c:15628 handle_request_register: Registration from '"3857748"<sip:3857748@192.168.1.40:5060>' failed for '182.98.238.222' - No matching peer found</div> <div>[Aug 8 22:56:49] NOTICE[2291]: chan_sip.c:15628 handle_request_register: Registration from '"3857749"<sip:3857749@192.168.1.40:5060>' failed for '182.98.238.222' - No matching peer found</div> <div>[Aug 8 22:56:49] NOTICE[2291]: chan_sip.c:15628 handle_request_register: Registration from '"385775"<sip:385775@192.168.1.40:5060>' failed for '182.98.238.222' - No matching peer found</div> <div>[Aug 8 22:56:49] NOTICE[2291]: chan_sip.c:15628 handle_request_register: Registration from '"3857750"<sip:3857750@192.168.1.40:5060>' failed for '182.98.238.222' - No matching peer found</div> <div>[Aug 8 22:56:49] NOTICE[2291]: chan_sip.c:15628 handle_request_register: Registration from '"3857751"<sip:3857751@192.168.1.40:5060>' failed for '182.98.238.222' - No matching peer found</div> <div>[Aug 8 22:56:49] NOTICE[2291]: chan_sip.c:15628 handle_request_register: Registration from '"3857752"<sip:3857752@192.168.1.40:5060>' failed for '182.98.238.222' - No matching peer found</div> <div>[Aug 8 22:56:49] NOTICE[2291]: chan_sip.c:15628 handle_request_register: Registration from '"3857753"<sip:3857753@192.168.1.40:5060>' failed for '182.98.238.222' - No matching peer found</div> <div>[Aug 8 22:56:49] NOTICE[2291]: chan_sip.c:15628 handle_request_register: Registration from '"3857754"<sip:3857754@192.168.1.40:5060>' failed for '182.98.238.222' - No matching peer found</div> <div>[Aug 8 22:56:49] NOTICE[2291]: chan_sip.c:15628 handle_request_register: Registration from '"3857755"<sip:3857755@192.168.1.40:5060>' failed for '182.98.238.222' - No matching peer found</div> <div>[Aug 8 22:56:49] NOTICE[2291]: chan_sip.c:15628 handle_request_register: Registration from '"3857756"<sip:3857756@192.168.1.40:5060>' failed for '182.98.238.222' - No matching peer found</div></div></div> <br><br> <hr style="border:none; color:#909090; background-color:#B0B0B0; height: 1px; width: 99%;"> <table style="border-collapse:collapse;border:none;"> <tbody><tr> <td style="border:none;padding:0px 15px 0px 8px"> <a target="_blank" href="http://www.avast.com/"> <img src="http://static.avast.com/emails/avast-mail-stamp.png" border="0"> </a> </td> <td> <div style="color:#3d4d5a; font-family:"Calibri","Verdana","Arial","Helvetica"; font-size:12pt;"> This email is free from viruses and malware because <a target="_blank" href="http://www.avast.com/">avast! Antivirus</a> protection is active. </div> </td> </tr> </tbody></table> <br> <hr>_______________________________________________<br> App_rpt-users mailing list<br> <a target="_blank" href="mailto:App_rpt-users@ohnosec.org">App_rpt-users@ohnosec.org</a><br> <a target="_blank" href="http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users">http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users</a><br> <br> To unsubscribe from this list please visit <a target="_blank" href="http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users">http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users</a> and scroll down to the bottom of the page. Enter your email address and press the "Unsubscribe or edit options button"<br> You do not need a password to unsubscribe, you can do it via email confirmation. If you have trouble unsubscribing, please send a message to the list detailing the problem. </div> </div></span></body></html>