My guess is they are looking for 10 digit phone numbers as extensions.
Are they all from 1 IP address or from many? If from many, they are likely many serial scan or from a list of suspected VOIP numbers. If from one, and that random, then from a list of suspected VOIP numbers. Since you listed a phone number as part of your signature… I might guess hackers might soon add that number to a scan list. It is one thing to randomly run 2,XXX-,XXXX to 999-999-9999, with skips for the “dead zones,” (0-XXX-XXX-XXXX) etc. but another to hit suspected VOIP numbers. Cary Fitch _____ From: asterisk-users-boun...@lists.digium.com [mailto:asterisk-users-boun...@lists.digium.com] On Behalf Of Steve Murphy Sent: Sunday, November 07, 2010 8:12 AM To: Asterisk Users Mailing List - Non-Commercial Discussion Subject: [asterisk-users] Why are the hackers scanning for these? Hey, I'm going thru logs, and I see some very common and interesting things that the hackers are looking for. In a whole bunch of scans, I've noticed that the first guess or two for sip accounts is usually a 10-digit number. I'm asking myself, why these numbers? Are they looking for a voip trunk? Or is it just like a serial number for the scan? What? Here's some examples: 2648061411 3190339404 2685608247 3358171034 2092652562 2206598858 Just trying to follow the advice: "Know thy Enemy" murf Steve Murphy ParseTree Corp. 57 Lane 17 Cody, WY 82414 ✉ m...@parsetree.com ☎ 307-899-5535 <http://www.wisestamp.com/email-install?utm_source=extension&utm_medium=email&utm_campaign=footer> Signature powered by <http://www.wisestamp.com/email-install?utm_source=extension&utm_medium=email&utm_campaign=footer> WiseStamp <http://s.wisestamp.com/pixel.png?p=mozilla&v=2.0.3&t=1289138760949&u=949715&e=4286>
-- _____________________________________________________________________ -- Bandwidth and Colocation Provided by http://www.api-digital.com -- New to Asterisk? Join us for a live introductory webinar every Thurs: http://www.asterisk.org/hello asterisk-users mailing list To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users
