Can anyone tell me what this is? When I logged in, it just kept going and going scrolling line after line. Just looked up the IP and it’s from China. Someone trying to hack is my guess. Any way to stop it? Thanks! 73 Jim W7RY Aug 8 22:56:49] NOTICE[2291]: chan_sip.c:15628 handle_request_register: Registration from '"3857747"<sip:3857747@192.168.1.40:5060>' failed for '182.98.238.222' - No matching peer found [Aug 8 22:56:49] NOTICE[2291]: chan_sip.c:15628 handle_request_register: Registration from '"3857748"<sip:3857748@192.168.1.40:5060>' failed for '182.98.238.222' - No matching peer found [Aug 8 22:56:49] NOTICE[2291]: chan_sip.c:15628 handle_request_register: Registration from '"3857749"<sip:3857749@192.168.1.40:5060>' failed for '182.98.238.222' - No matching peer found [Aug 8 22:56:49] NOTICE[2291]: chan_sip.c:15628 handle_request_register: Registration from '"385775"<sip:385775@192.168.1.40:5060>' failed for '182.98.238.222' - No matching peer found [Aug 8 22:56:49] NOTICE[2291]: chan_sip.c:15628 handle_request_register: Registration from '"3857750"<sip:3857750@192.168.1.40:5060>' failed for '182.98.238.222' - No matching peer found [Aug 8 22:56:49] NOTICE[2291]: chan_sip.c:15628 handle_request_register: Registration from '"3857751"<sip:3857751@192.168.1.40:5060>' failed for '182.98.238.222' - No matching peer found [Aug 8 22:56:49] NOTICE[2291]: chan_sip.c:15628 handle_request_register: Registration from '"3857752"<sip:3857752@192.168.1.40:5060>' failed for '182.98.238.222' - No matching peer found [Aug 8 22:56:49] NOTICE[2291]: chan_sip.c:15628 handle_request_register: Registration from '"3857753"<sip:3857753@192.168.1.40:5060>' failed for '182.98.238.222' - No matching peer found [Aug 8 22:56:49] NOTICE[2291]: chan_sip.c:15628 handle_request_register: Registration from '"3857754"<sip:3857754@192.168.1.40:5060>' failed for '182.98.238.222' - No matching peer found [Aug 8 22:56:49] NOTICE[2291]: chan_sip.c:15628 handle_request_register: Registration from '"3857755"<sip:3857755@192.168.1.40:5060>' failed for '182.98.238.222' - No matching peer found [Aug 8 22:56:49] NOTICE[2291]: chan_sip.c:15628 handle_request_register: Registration from '"3857756"<sip:3857756@192.168.1.40:5060>' failed for '182.98.238.222' - No matching peer found --- This email is free from viruses and malware because avast! Antivirus protection is active. http://www.avast.com
Looks like you are right, someone trying to access your sip service on port 5060, might close that if you have a router, or change it, if you do use the port... Or use iptables, etc in Linux, or a multitude of other apps... "Got Root?" How many software engineers does it take to change a light bulb? *None. It's a hardware problem.* Unix is user friendly. It's just very particular about who it's friends are. WINDOWS: Will Install Needless Data On Whole System MICROSOFT: Most Intelligent Customers Realize Our Software Only Fools Teenagers. A ntennas P oorly P laced L acks E ngineering The best way to accelerate a computer running Windows is at 9.81 m/s². *"I get paid to support Windows, I use Linux to get work done."* On Fri, Aug 8, 2014 at 11:01 PM, Jim <jimw7ry@gmail.com> wrote:
Can anyone tell me what this is? When I logged in, it just kept going and going scrolling line after line.
Just looked up the IP and it’s from China. Someone trying to hack is my guess. Any way to stop it?
Thanks! 73 Jim W7RY
Aug 8 22:56:49] NOTICE[2291]: chan_sip.c:15628 handle_request_register: Registration from '"3857747"<sip:3857747@192.168.1.40:5060>' failed for '182.98.238.222' - No matching peer found [Aug 8 22:56:49] NOTICE[2291]: chan_sip.c:15628 handle_request_register: Registration from '"3857748"<sip:3857748@192.168.1.40:5060>' failed for '182.98.238.222' - No matching peer found [Aug 8 22:56:49] NOTICE[2291]: chan_sip.c:15628 handle_request_register: Registration from '"3857749"<sip:3857749@192.168.1.40:5060>' failed for '182.98.238.222' - No matching peer found [Aug 8 22:56:49] NOTICE[2291]: chan_sip.c:15628 handle_request_register: Registration from '"385775"<sip:385775@192.168.1.40:5060>' failed for '182.98.238.222' - No matching peer found [Aug 8 22:56:49] NOTICE[2291]: chan_sip.c:15628 handle_request_register: Registration from '"3857750"<sip:3857750@192.168.1.40:5060>' failed for '182.98.238.222' - No matching peer found [Aug 8 22:56:49] NOTICE[2291]: chan_sip.c:15628 handle_request_register: Registration from '"3857751"<sip:3857751@192.168.1.40:5060>' failed for '182.98.238.222' - No matching peer found [Aug 8 22:56:49] NOTICE[2291]: chan_sip.c:15628 handle_request_register: Registration from '"3857752"<sip:3857752@192.168.1.40:5060>' failed for '182.98.238.222' - No matching peer found [Aug 8 22:56:49] NOTICE[2291]: chan_sip.c:15628 handle_request_register: Registration from '"3857753"<sip:3857753@192.168.1.40:5060>' failed for '182.98.238.222' - No matching peer found [Aug 8 22:56:49] NOTICE[2291]: chan_sip.c:15628 handle_request_register: Registration from '"3857754"<sip:3857754@192.168.1.40:5060>' failed for '182.98.238.222' - No matching peer found [Aug 8 22:56:49] NOTICE[2291]: chan_sip.c:15628 handle_request_register: Registration from '"3857755"<sip:3857755@192.168.1.40:5060>' failed for '182.98.238.222' - No matching peer found [Aug 8 22:56:49] NOTICE[2291]: chan_sip.c:15628 handle_request_register: Registration from '"3857756"<sip:3857756@192.168.1.40:5060>' failed for '182.98.238.222' - No matching peer found
------------------------------ <http://www.avast.com/>
This email is free from viruses and malware because avast! Antivirus <http://www.avast.com/> protection is active.
_______________________________________________ App_rpt-users mailing list App_rpt-users@ohnosec.org http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users
To unsubscribe from this list please visit http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users and scroll down to the bottom of the page. Enter your email address and press the "Unsubscribe or edit options button" You do not need a password to unsubscribe, you can do it via email confirmation. If you have trouble unsubscribing, please send a message to the list detailing the problem.
Assuming you aren’t connecting SIP phones or trunks, just delete or rename /etc/asterisk/sip.conf
On Aug 8, 2014, at 11:01 PM, Jim <jimw7ry@gmail.com> wrote:
Can anyone tell me what this is? When I logged in, it just kept going and going scrolling line after line.
Just looked up the IP and it’s from China. Someone trying to hack is my guess. Any way to stop it?
Thanks! 73 Jim W7RY
Aug 8 22:56:49] NOTICE[2291]: chan_sip.c:15628 handle_request_register: Registration from '"3857747"<sip:3857747@192.168.1.40:5060>' failed for '182.98.238.222' - No matching peer found [Aug 8 22:56:49] NOTICE[2291]: chan_sip.c:15628 handle_request_register: Registration from '"3857748"<sip:3857748@192.168.1.40:5060>' failed for '182.98.238.222' - No matching peer found [Aug 8 22:56:49] NOTICE[2291]: chan_sip.c:15628 handle_request_register: Registration from '"3857749"<sip:3857749@192.168.1.40:5060>' failed for '182.98.238.222' - No matching peer found [Aug 8 22:56:49] NOTICE[2291]: chan_sip.c:15628 handle_request_register: Registration from '"385775"<sip:385775@192.168.1.40:5060>' failed for '182.98.238.222' - No matching peer found [Aug 8 22:56:49] NOTICE[2291]: chan_sip.c:15628 handle_request_register: Registration from '"3857750"<sip:3857750@192.168.1.40:5060>' failed for '182.98.238.222' - No matching peer found [Aug 8 22:56:49] NOTICE[2291]: chan_sip.c:15628 handle_request_register: Registration from '"3857751"<sip:3857751@192.168.1.40:5060>' failed for '182.98.238.222' - No matching peer found [Aug 8 22:56:49] NOTICE[2291]: chan_sip.c:15628 handle_request_register: Registration from '"3857752"<sip:3857752@192.168.1.40:5060>' failed for '182.98.238.222' - No matching peer found [Aug 8 22:56:49] NOTICE[2291]: chan_sip.c:15628 handle_request_register: Registration from '"3857753"<sip:3857753@192.168.1.40:5060>' failed for '182.98.238.222' - No matching peer found [Aug 8 22:56:49] NOTICE[2291]: chan_sip.c:15628 handle_request_register: Registration from '"3857754"<sip:3857754@192.168.1.40:5060>' failed for '182.98.238.222' - No matching peer found [Aug 8 22:56:49] NOTICE[2291]: chan_sip.c:15628 handle_request_register: Registration from '"3857755"<sip:3857755@192.168.1.40:5060>' failed for '182.98.238.222' - No matching peer found [Aug 8 22:56:49] NOTICE[2291]: chan_sip.c:15628 handle_request_register: Registration from '"3857756"<sip:3857756@192.168.1.40:5060>' failed for '182.98.238.222' - No matching peer found
This email is free from viruses and malware because avast! Antivirus protection is active.
_______________________________________________ App_rpt-users mailing list App_rpt-users@ohnosec.org http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users
To unsubscribe from this list please visit http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users and scroll down to the bottom of the page. Enter your email address and press the "Unsubscribe or edit options button" You do not need a password to unsubscribe, you can do it via email confirmation. If you have trouble unsubscribing, please send a message to the list detailing the problem.
I’m not connecting to SIP phones or trunks... And that fixed it! They were still at it this morning! Not anymore! Thanks! Jim W7RY From: Tim Sawyer Sent: Saturday, August 09, 2014 6:50 AM To: Jim Cc: app_rpt-users@ohnosec.org Subject: Re: [App_rpt-users] What is this? Assuming you aren’t connecting SIP phones or trunks, just delete or rename /etc/asterisk/sip.conf On Aug 8, 2014, at 11:01 PM, Jim <jimw7ry@gmail.com> wrote: Can anyone tell me what this is? When I logged in, it just kept going and going scrolling line after line. Just looked up the IP and it’s from China. Someone trying to hack is my guess. Any way to stop it? Thanks! 73 Jim W7RY Aug 8 22:56:49] NOTICE[2291]: chan_sip.c:15628 handle_request_register: Registration from '"3857747"<sip:3857747@192.168.1.40:5060>' failed for '182.98.238.222' - No matching peer found [Aug 8 22:56:49] NOTICE[2291]: chan_sip.c:15628 handle_request_register: Registration from '"3857748"<sip:3857748@192.168.1.40:5060>' failed for '182.98.238.222' - No matching peer found [Aug 8 22:56:49] NOTICE[2291]: chan_sip.c:15628 handle_request_register: Registration from '"3857749"<sip:3857749@192.168.1.40:5060>' failed for '182.98.238.222' - No matching peer found [Aug 8 22:56:49] NOTICE[2291]: chan_sip.c:15628 handle_request_register: Registration from '"385775"<sip:385775@192.168.1.40:5060>' failed for '182.98.238.222' - No matching peer found [Aug 8 22:56:49] NOTICE[2291]: chan_sip.c:15628 handle_request_register: Registration from '"3857750"<sip:3857750@192.168.1.40:5060>' failed for '182.98.238.222' - No matching peer found [Aug 8 22:56:49] NOTICE[2291]: chan_sip.c:15628 handle_request_register: Registration from '"3857751"<sip:3857751@192.168.1.40:5060>' failed for '182.98.238.222' - No matching peer found [Aug 8 22:56:49] NOTICE[2291]: chan_sip.c:15628 handle_request_register: Registration from '"3857752"<sip:3857752@192.168.1.40:5060>' failed for '182.98.238.222' - No matching peer found [Aug 8 22:56:49] NOTICE[2291]: chan_sip.c:15628 handle_request_register: Registration from '"3857753"<sip:3857753@192.168.1.40:5060>' failed for '182.98.238.222' - No matching peer found [Aug 8 22:56:49] NOTICE[2291]: chan_sip.c:15628 handle_request_register: Registration from '"3857754"<sip:3857754@192.168.1.40:5060>' failed for '182.98.238.222' - No matching peer found [Aug 8 22:56:49] NOTICE[2291]: chan_sip.c:15628 handle_request_register: Registration from '"3857755"<sip:3857755@192.168.1.40:5060>' failed for '182.98.238.222' - No matching peer found [Aug 8 22:56:49] NOTICE[2291]: chan_sip.c:15628 handle_request_register: Registration from '"3857756"<sip:3857756@192.168.1.40:5060>' failed for '182.98.238.222' - No matching peer found ------------------------------------------------------------------------------ This email is free from viruses and malware because avast! Antivirus protection is active. _______________________________________________ App_rpt-users mailing list App_rpt-users@ohnosec.org http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users To unsubscribe from this list please visit http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users and scroll down to the bottom of the page. Enter your email address and press the "Unsubscribe or edit options button" You do not need a password to unsubscribe, you can do it via email confirmation. If you have trouble unsubscribing, please send a message to the list detailing the problem. --- This email is free from viruses and malware because avast! Antivirus protection is active. http://www.avast.com
It’s the bad guys from Chi-com land trying to open the back door. https://ipdb.at/ip/182.98.238.222 I’ve seen these literally thousands per minute till the exhaust the block of numbers they are trying to access. Can slow down your internet access if it gets too intense, hasn’t been an issue since I dropped DSL George J Csahanin W2DB Cedar Park, TX 512-401-2630 home 401-338-0568 cel From: Jim Sent: Saturday, August 09, 2014 1:01 AM To: app_rpt-users@ohnosec.org Subject: [App_rpt-users] What is this? Can anyone tell me what this is? When I logged in, it just kept going and going scrolling line after line. Just looked up the IP and it’s from China. Someone trying to hack is my guess. Any way to stop it? Thanks! 73 Jim W7RY Aug 8 22:56:49] NOTICE[2291]: chan_sip.c:15628 handle_request_register: Registration from '"3857747"<sip:3857747@192.168.1.40:5060>' failed for '182.98.238.222' - No matching peer found [Aug 8 22:56:49] NOTICE[2291]: chan_sip.c:15628 handle_request_register: Registration from '"3857748"<sip:3857748@192.168.1.40:5060>' failed for '182.98.238.222' - No matching peer found [Aug 8 22:56:49] NOTICE[2291]: chan_sip.c:15628 handle_request_register: Registration from '"3857749"<sip:3857749@192.168.1.40:5060>' failed for '182.98.238.222' - No matching peer found [Aug 8 22:56:49] NOTICE[2291]: chan_sip.c:15628 handle_request_register: Registration from '"385775"<sip:385775@192.168.1.40:5060>' failed for '182.98.238.222' - No matching peer found [Aug 8 22:56:49] NOTICE[2291]: chan_sip.c:15628 handle_request_register: Registration from '"3857750"<sip:3857750@192.168.1.40:5060>' failed for '182.98.238.222' - No matching peer found [Aug 8 22:56:49] NOTICE[2291]: chan_sip.c:15628 handle_request_register: Registration from '"3857751"<sip:3857751@192.168.1.40:5060>' failed for '182.98.238.222' - No matching peer found [Aug 8 22:56:49] NOTICE[2291]: chan_sip.c:15628 handle_request_register: Registration from '"3857752"<sip:3857752@192.168.1.40:5060>' failed for '182.98.238.222' - No matching peer found [Aug 8 22:56:49] NOTICE[2291]: chan_sip.c:15628 handle_request_register: Registration from '"3857753"<sip:3857753@192.168.1.40:5060>' failed for '182.98.238.222' - No matching peer found [Aug 8 22:56:49] NOTICE[2291]: chan_sip.c:15628 handle_request_register: Registration from '"3857754"<sip:3857754@192.168.1.40:5060>' failed for '182.98.238.222' - No matching peer found [Aug 8 22:56:49] NOTICE[2291]: chan_sip.c:15628 handle_request_register: Registration from '"3857755"<sip:3857755@192.168.1.40:5060>' failed for '182.98.238.222' - No matching peer found [Aug 8 22:56:49] NOTICE[2291]: chan_sip.c:15628 handle_request_register: Registration from '"3857756"<sip:3857756@192.168.1.40:5060>' failed for '182.98.238.222' - No matching peer found -------------------------------------------------------------------------------- This email is free from viruses and malware because avast! Antivirus protection is active.
participants (4)
-
George Csahanin -
Jim -
Mark Johnston -
Tim Sawyer