I have been receiving a lot of 'calls' from CLI 'MeucciSolutions' today.  These have been coming direct, not over the SIP trunk.  I'm locking down the firewall to disallow any IPs that are not part of the SIP trunk service but i'd thought i'd post in case someone else runs into these strange calls.

asterisk call logs look like this:


2009-05-11 04:05:25 MeucciSolutions vms5000 SIP/93.190.143.10-b7701c80   SIP/5997-09d60700
2009-05-11 04:26:22 MeucciSolutions vms5000 SIP/93.190.143.10-b7701c00   SIP/5997-09d606d8
2009-05-11 05:50:26 MeucciSolutions vms5000 SIP/93.190.143.10-b7724028   SIP/5997-09d60c30
2009-05-11 05:49:37 MeucciSolutions vms5000 SIP/93.190.143.10-b7701c00   SIP/5997-b7727848
2009-05-11 07:02:14 MeucciSolutions vms5000 SIP/93.190.143.10-b7701c00   SIP/5997-09d5b5f8


Looking up "Meucci Solutions" on the internet leads you to a real company which does "VoIP QoS monitoring" so its easy to dismiss the call as a legit one...  but their website has a link http://www.meucci-solutions.com/complaints.asp?id=1 on the front page to a 'nuisance calls' complaint email address - i guess they are trying to track down the culprits but i expect that will be hard if its a virus/trojan.

There is also a thread on the lsingshot forums discussing similar calls: http://forums.slingshot.co.nz/viewtopic.php?f=4&t=2443&view=previous