<HTML><HEAD>
<META content="text/html charset=utf-8" http-equiv=Content-Type></HEAD>
<BODY
style="WORD-WRAP: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space"
dir=ltr>
<DIV dir=ltr>
<DIV style="FONT-SIZE: 12pt; FONT-FAMILY: 'Calibri'; COLOR: #000000">
<DIV>I’m not connecting to SIP phones or trunks...</DIV>
<DIV> </DIV>
<DIV>And that fixed it!</DIV>
<DIV>They were still at it this morning! Not anymore!</DIV>
<DIV> </DIV>
<DIV>Thanks!</DIV>
<DIV>Jim W7RY</DIV>
<DIV> </DIV>
<DIV
style='FONT-SIZE: small; TEXT-DECORATION: none; FONT-FAMILY: "Calibri"; FONT-WEIGHT: normal; COLOR: #000000; FONT-STYLE: normal; DISPLAY: inline'>
<DIV style="FONT: 10pt tahoma">
<DIV><FONT size=3 face=Calibri></FONT> </DIV>
<DIV style="BACKGROUND: #f5f5f5">
<DIV style="font-color: black"><B>From:</B> <A title=tim.sawyer@mac.com
href="mailto:tim.sawyer@mac.com">Tim Sawyer</A> </DIV>
<DIV><B>Sent:</B> Saturday, August 09, 2014 6:50 AM</DIV>
<DIV><B>To:</B> <A title=jimw7ry@gmail.com
href="mailto:jimw7ry@gmail.com">Jim</A> </DIV>
<DIV><B>Cc:</B> <A title=app_rpt-users@ohnosec.org
href="mailto:app_rpt-users@ohnosec.org">app_rpt-users@ohnosec.org</A> </DIV>
<DIV><B>Subject:</B> Re: [App_rpt-users] What is this?</DIV></DIV></DIV>
<DIV> </DIV></DIV>
<DIV
style='FONT-SIZE: small; TEXT-DECORATION: none; FONT-FAMILY: "Calibri"; FONT-WEIGHT: normal; COLOR: #000000; FONT-STYLE: normal; DISPLAY: inline'>Assuming
you aren’t connecting SIP phones or trunks, just delete or rename
/etc/asterisk/sip.conf
<DIV>
<DIV> </DIV>
<DIV>
<BLOCKQUOTE type="cite">
<DIV>On Aug 8, 2014, at 11:01 PM, Jim <<A
href="mailto:jimw7ry@gmail.com">jimw7ry@gmail.com</A>> wrote:</DIV>
<DIV> </DIV>
<DIV>
<DIV dir=ltr>
<DIV dir=ltr>
<DIV style="FONT-SIZE: 12pt; FONT-FAMILY: calibri">
<DIV>Can anyone tell me what this is? When I logged in, it just kept going and
going scrolling line after line.</DIV>
<DIV> </DIV>
<DIV>Just looked up the IP and it’s from China. Someone trying to hack is my
guess. Any way to stop it?</DIV>
<DIV> </DIV>
<DIV> </DIV>
<DIV>Thanks!</DIV>
<DIV>73</DIV>
<DIV>Jim W7RY</DIV>
<DIV> </DIV>
<DIV> </DIV>
<DIV>Aug 8 22:56:49] NOTICE[2291]: chan_sip.c:15628
handle_request_register: Registration from '"3857747"<<A
href="sip:3857747@192.168.1.40:5060">sip:3857747@192.168.1.40:5060</A>>'
failed for '182.98.238.222' - No matching peer found</DIV>
<DIV>[Aug 8 22:56:49] NOTICE[2291]: chan_sip.c:15628
handle_request_register: Registration from '"3857748"<<A
href="sip:3857748@192.168.1.40:5060">sip:3857748@192.168.1.40:5060</A>>'
failed for '182.98.238.222' - No matching peer found</DIV>
<DIV>[Aug 8 22:56:49] NOTICE[2291]: chan_sip.c:15628
handle_request_register: Registration from '"3857749"<<A
href="sip:3857749@192.168.1.40:5060">sip:3857749@192.168.1.40:5060</A>>'
failed for '182.98.238.222' - No matching peer found</DIV>
<DIV>[Aug 8 22:56:49] NOTICE[2291]: chan_sip.c:15628
handle_request_register: Registration from '"385775"<<A
href="sip:385775@192.168.1.40:5060">sip:385775@192.168.1.40:5060</A>>'
failed for '182.98.238.222' - No matching peer found</DIV>
<DIV>[Aug 8 22:56:49] NOTICE[2291]: chan_sip.c:15628
handle_request_register: Registration from '"3857750"<<A
href="sip:3857750@192.168.1.40:5060">sip:3857750@192.168.1.40:5060</A>>'
failed for '182.98.238.222' - No matching peer found</DIV>
<DIV>[Aug 8 22:56:49] NOTICE[2291]: chan_sip.c:15628
handle_request_register: Registration from '"3857751"<<A
href="sip:3857751@192.168.1.40:5060">sip:3857751@192.168.1.40:5060</A>>'
failed for '182.98.238.222' - No matching peer found</DIV>
<DIV>[Aug 8 22:56:49] NOTICE[2291]: chan_sip.c:15628
handle_request_register: Registration from '"3857752"<<A
href="sip:3857752@192.168.1.40:5060">sip:3857752@192.168.1.40:5060</A>>'
failed for '182.98.238.222' - No matching peer found</DIV>
<DIV>[Aug 8 22:56:49] NOTICE[2291]: chan_sip.c:15628
handle_request_register: Registration from '"3857753"<<A
href="sip:3857753@192.168.1.40:5060">sip:3857753@192.168.1.40:5060</A>>'
failed for '182.98.238.222' - No matching peer found</DIV>
<DIV>[Aug 8 22:56:49] NOTICE[2291]: chan_sip.c:15628
handle_request_register: Registration from '"3857754"<<A
href="sip:3857754@192.168.1.40:5060">sip:3857754@192.168.1.40:5060</A>>'
failed for '182.98.238.222' - No matching peer found</DIV>
<DIV>[Aug 8 22:56:49] NOTICE[2291]: chan_sip.c:15628
handle_request_register: Registration from '"3857755"<<A
href="sip:3857755@192.168.1.40:5060">sip:3857755@192.168.1.40:5060</A>>'
failed for '182.98.238.222' - No matching peer found</DIV>
<DIV>[Aug 8 22:56:49] NOTICE[2291]: chan_sip.c:15628
handle_request_register: Registration from '"3857756"<<A
href="sip:3857756@192.168.1.40:5060">sip:3857756@192.168.1.40:5060</A>>'
failed for '182.98.238.222' - No matching peer found</DIV></DIV></DIV><BR><BR>
<HR
style="BORDER-TOP: medium none; HEIGHT: 1px; BORDER-RIGHT: medium none; WIDTH: 99%; BORDER-BOTTOM: medium none; COLOR: #909090; BORDER-LEFT: medium none; BACKGROUND-COLOR: #b0b0b0">
<TABLE
style="BORDER-TOP: medium none; BORDER-RIGHT: medium none; BORDER-COLLAPSE: collapse; BORDER-BOTTOM: medium none; COLOR: #000000; BORDER-LEFT: medium none">
<TBODY>
<TR>
<TD
style="BORDER-TOP: medium none; BORDER-RIGHT: medium none; BORDER-BOTTOM: medium none; PADDING-BOTTOM: 0px; PADDING-TOP: 0px; PADDING-LEFT: 8px; BORDER-LEFT: medium none; PADDING-RIGHT: 15px"><A
href="http://www.avast.com/"><IMG border=0
src="http://static.avast.com/emails/avast-mail-stamp.png"> </A></TD>
<TD>
<P
style='FONT-SIZE: 12pt; FONT-FAMILY: "Calibri","Verdana","Arial","Helvetica"; COLOR: #3d4d5a'>This
email is free from viruses and malware because <A
href="http://www.avast.com/">avast! Antivirus</A> protection is active.
</P></TD></TR></TBODY></TABLE><BR></DIV>_______________________________________________<BR>App_rpt-users
mailing list<BR><A
href="mailto:App_rpt-users@ohnosec.org">App_rpt-users@ohnosec.org</A><BR>http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users<BR><BR>To
unsubscribe from this list please visit
http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users and scroll down to
the bottom of the page. Enter your email address and press the "Unsubscribe or
edit options button"<BR>You do not need a password to unsubscribe, you can do
it via email confirmation. If you have trouble unsubscribing, please send a
message to the list detailing the problem. </DIV></BLOCKQUOTE></DIV>
<DIV> </DIV></DIV></DIV></DIV></DIV>
<br /><br />
<hr style='border:none; color:#909090; background-color:#B0B0B0; height: 1px; width: 99%;' />
<table style='border-collapse:collapse;border:none;'>
<tr>
<td style='border:none;padding:0px 15px 0px 8px'>
<a href="http://www.avast.com/">
<img border=0 src="http://static.avast.com/emails/avast-mail-stamp.png" />
</a>
</td>
<td>
<p style='color:#3d4d5a; font-family:"Calibri","Verdana","Arial","Helvetica"; font-size:12pt;'>
This email is free from viruses and malware because <a href="http://www.avast.com/">avast! Antivirus</a> protection is active.
</p>
</td>
</tr>
</table>
<br />
</BODY></HTML>