[VoiceOps] Catching alot of attempts at fraud to Israel....

[Simon Woodhead]

Second only to friendly-scanner in our honeypots:
http://mirror.simwood.com/honeypot/honeypot_agent_1y.csv


On 29 May 2013 15:16, Gavin Henry <ghenry at suretec.co.uk> wrote:

> We're (SureVoIP)  are getting the same with that UA too.
>
> We've just put into production Homer SIP Capture and the stats tool is
> showing that UA almost top.
>
> Cheers.
> On 29 May 2013 14:44, "PE" <peeip989 at gmail.com> wrote:
>
>> Here's another:  972597708294  (UA sipcli/v1.8)
>>
>>
>> On Fri, May 24, 2013 at 1:15 PM, Oren Yehezkely <orenyny at gmail.com>wrote:
>>
>>> Did you try using fail2ban?
>>>
>>> Works well for us.
>>>
>>> Oren
>>>
>>>
>>> On Thu, May 23, 2013 at 3:57 PM, PE <peeip989 at gmail.com> wrote:
>>>
>>>> Here are some more. All coming from user-agent: sipcli/v1.8
>>>>
>>>>  972592172000  972592172400  972592172450  972592100000  972592170000
>>>> 972592511626
>>>>
>>>>
>>>> On Wed, May 22, 2013 at 5:36 PM, Ryan Delgrosso <
>>>> ryandelgrosso at gmail.com> wrote:
>>>>
>>>>>  Yep Ive just started seeing this ramp up as well.
>>>>>
>>>>> Here are some of the numbers I am seeing in the last few days.
>>>>>
>>>>> 972599913643
>>>>> 972573188884
>>>>> 972527163677
>>>>> 972573188810
>>>>> 972779219219
>>>>> 972548492080
>>>>> 972573111099
>>>>> 972573170707
>>>>>
>>>>> Anyone care to expand on this?
>>>>>
>>>>> -Ryan
>>>>>
>>>>>
>>>>> On 05/15/2013 03:11 PM, David Thompson wrote:
>>>>>
>>>>>  I’m catching a lot of attempts at fraud to Israel has anyone else
>>>>> out there been catching any? Country code is 972.
>>>>>
>>>>>
>>>>>
>>>>> David Thompson
>>>>> Network Services Support Technician
>>>>> (O) 858.357.8794
>>>>> (F) 858-225-1882
>>>>> (E) dthompson at esi-estech.com
>>>>> (W) www.esi-estech.com
>>>>>
>>>>>
>>>>>
>>>>>
>>>>> _______________________________________________
>>>>> VoiceOps mailing listVoiceOps at voiceops.orghttps://puck.nether.net/mailman/listinfo/voiceops
>>>>>
>>>>>
>>>>>
>>>>> _______________________________________________
>>>>> VoiceOps mailing list
>>>>> VoiceOps at voiceops.org
>>>>> https://puck.nether.net/mailman/listinfo/voiceops
>>>>>
>>>>>
>>>>
>>>> _______________________________________________
>>>> VoiceOps mailing list
>>>> VoiceOps at voiceops.org
>>>> https://puck.nether.net/mailman/listinfo/voiceops
>>>>
>>>>
>>>
>>
>> _______________________________________________
>> VoiceOps mailing list
>> VoiceOps at voiceops.org
>> https://puck.nether.net/mailman/listinfo/voiceops
>>
>>
> _______________________________________________
> VoiceOps mailing list
> VoiceOps at voiceops.org
> https://puck.nether.net/mailman/listinfo/voiceops
>
>

--
***** Email confidentiality notice *****

This message is private and confidential. If you have received this message in error, please notify us and remove it from your system.


Simwood eSMS Limited is a limited company registered in England and Wales. Registered number: 03379831. Registered office: c/o HW Chartered Accountants, Keepers Lane, The Wergs, Wolverhampton, WV6 8UA. Trading address: Falcon Drive, Cardiff Bay, Cardiff, CF10 4RU.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://puck.nether.net/pipermail/voiceops/attachments/20130529/3f77d904/attachment-0001.html>