On 11/28/2012 11:52 PM, Steve Totaro wrote:

You're not serious right ?

That is just the center of the country since no better location is available.
On Wed, Nov 28, 2012 at 7:45 PM, J Gao <j...@veecall.com> wrote:
This morning someone tried to make sip call through my Asterisk. My server
just drop these calls and record them in CDR with IP address:

         2012-11-28 06:30:51     SIP/216...      1000    "1000" <1000>
Hangup   999011972592249388     ANSWERED        00:01   Hacker:
168.63.67.239
2.      2012-11-28 06:30:49     SIP/216...      1000    "1000" <1000>
Hangup   88011972592249388      ANSWERED        00:01   Hacker:
168.63.67.239
3.      2012-11-28 06:30:46     SIP/216...      1000    "1000" <1000>
Answer   99011972592249388      ANSWERED        00:02
4.      2012-11-28 06:30:43     SIP/216...      1000    "1000" <1000>
Answer   1011972592249388       ANSWERED        00:02
5.      2012-11-28 06:30:39     SIP/216...      1000    "1000" <1000>
Hangup   2011972592249388       ANSWERED        00:00   Hacker:
168.63.67.239
6.      2012-11-28 06:30:33     SIP/216...      1000    "1000" <1000>
Hangup   7011972592249388       ANSWERED        00:01   Hacker:
168.63.67.239
7.      2012-11-28 06:30:30     SIP/216...      1000    "1000" <1000>
Answer   8011972592249388       ANSWERED        00:03
8.      2012-11-28 06:30:27     SIP/216...      1000    "1000" <1000>
Hangup   9011972592249388       ANSWERED        00:06   Hacker:
168.63.67.239
9.      2012-11-28 06:30:25     SIP/216...      1000    "1000" <1000>
Answer   011972592249388       ANSWERED        00:07

Now I noticed something interesting: The hacker's IP address: 168.63.67.239

whois gave me:
NetRange:       168.61.0.0 - 168.63.255.255
CIDR:           168.61.0.0/16, 168.62.0.0/15
OriginAS:
NetName:        MSFT-EP
NetHandle:      NET-168-61-0-0-1
Parent:         NET-168-0-0-0-0
NetType:        Direct Assignment
RegDate:        2011-06-22
Updated:        2012-10-16
Ref:            http://whois.arin.net/rest/net/NET-168-61-0-0-1

OrgName:        Microsoft Corp
OrgId:          MSFT-Z
Address:        One Microsoft Way
City:           Redmond
StateProv:      WA
PostalCode:     98052
Country:        US
RegDate:        2011-06-22
Updated:        2011-06-22
Ref:            http://whois.arin.net/rest/org/MSFT-Z


hmmmmmmm.... Did I just hacked by Micro$oft?

Gao

http://iplocation.truevue.org/168.63.67.239.html

--
_____________________________________________________________________
-- Bandwidth and Colocation Provided by http://www.api-digital.com --
New to Asterisk? Join us for a live introductory webinar every Thurs:
                http://www.asterisk.org/hello

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
    http://lists.digium.com/mailman/listinfo/asterisk-users


--
_____________________________________________________________________
-- Bandwidth and Colocation Provided by http://www.api-digital.com --
New to Asterisk? Join us for a live introductory webinar every Thurs:
              http://www.asterisk.org/hello

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
  http://lists.digium.com/mailman/listinfo/asterisk-users

Reply via email to