How to find out where the errors in the asterisk logs come from?

Question

Asterisk

Hello.
We have an openvox vs-gw1600 gateway with 3 active boards.
In the asterisk logs on the gateway: The following
lines are added every second:

[Feb  7 11:37:09] VERBOSE[10988] manager.c:   == Connect attempt from '127.0.0.1' unable to authenticate
[Feb  7 11:37:10] NOTICE[11014] manager.c: 127.0.0.1 tried to authenticate with nonexistent user 'admin'
[Feb  7 11:37:10] NOTICE[11014] manager.c: 127.0.0.1 failed to authenticate as 'admin'
[Feb  7 11:37:11] VERBOSE[11014] manager.c:   == Connect attempt from '127.0.0.1' unable to authenticate
[Feb  7 11:37:11] NOTICE[11015] manager.c: 127.0.0.1 tried to authenticate with nonexistent user 'event'
[Feb  7 11:37:11] NOTICE[11015] manager.c: 127.0.0.1 failed to authenticate as 'event'

How can I find out what is causing these errors?

Answer 1

Some program is trying to connect via AMI from the same host. Which one - you can't understand from this log, you need to look at what is running at all, or monitor connections to TCP port 5038 (by default).