Second only to friendly-scanner in our honeypots:<div><a href="http://mirror.simwood.com/honeypot/honeypot_agent_1y.csv">http://mirror.simwood.com/honeypot/honeypot_agent_1y.csv</a></div><div><br><br><div class="gmail_quote">
On 29 May 2013 15:16, Gavin Henry <span dir="ltr"><<a href="mailto:ghenry@suretec.co.uk" target="_blank">ghenry@suretec.co.uk</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<p dir="ltr">We're (SureVoIP) are getting the same with that UA too. </p>
<p dir="ltr">We've just put into production Homer SIP Capture and the stats tool is showing that UA almost top. </p>
<p dir="ltr">Cheers. </p>
<div class="gmail_quote">On 29 May 2013 14:44, "PE" <<a href="mailto:peeip989@gmail.com" target="_blank">peeip989@gmail.com</a>> wrote:<br type="attribution"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div dir="ltr">Here's another: <span style="font-size:11px;font-family:tahoma,arial,helvetica,sans-serif">972597708294 (UA sipcli/v1.8)</span></div><div class="gmail_extra"><br><br><div class="gmail_quote">
On Fri, May 24, 2013 at 1:15 PM, Oren Yehezkely <span dir="ltr"><<a href="mailto:orenyny@gmail.com" target="_blank">orenyny@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div dir="ltr"><div><div>Did you try using fail2ban?<br><br></div>Works well for us.<span><font color="#888888"><br><br></font></span></div><span><font color="#888888">Oren<br><div><div><div>
<font face="yw-30f09826b6488858d27ad863e0042f45db60a20d-03bc6bf1f7130008be572662cfbdffac--o"></font></div>
</div></div></font></span></div><div><div><div class="gmail_extra"><br><br><div class="gmail_quote">On Thu, May 23, 2013 at 3:57 PM, PE <span dir="ltr"><<a href="mailto:peeip989@gmail.com" target="_blank">peeip989@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">Here are some more. All coming from user-agent: sipcli/v1.8<div><br></div><div><table style="border-collapse:collapse;width:69pt" border="0" cellpadding="0" cellspacing="0" width="92">
<colgroup><col style="width:69pt" width="92">
</colgroup><tbody><tr style="min-height:15pt" height="20">
<td style="min-height:15pt;width:69pt" height="20" width="92">972592172000</td>
</tr>
<tr style="min-height:15pt" height="20">
<td style="min-height:15pt" height="20">972592172400</td>
</tr>
<tr style="min-height:15pt" height="20">
<td style="min-height:15pt" height="20">972592172450</td>
</tr>
<tr style="min-height:15pt" height="20">
<td style="min-height:15pt" height="20">972592100000</td>
</tr>
<tr style="min-height:15pt" height="20">
<td style="min-height:15pt" height="20">972592170000</td>
</tr>
<tr style="min-height:15pt" height="20">
<td style="min-height:15pt" height="20">972592511626</td>
</tr></tbody></table></div></div><div><div><div class="gmail_extra"><br><br><div class="gmail_quote">On Wed, May 22, 2013 at 5:36 PM, Ryan Delgrosso <span dir="ltr"><<a href="mailto:ryandelgrosso@gmail.com" target="_blank">ryandelgrosso@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div bgcolor="#FFFFFF" text="#000000">
Yep Ive just started seeing this ramp up as well. <br>
<br>
Here are some of the numbers I am seeing in the last few days. <br>
<br>
972599913643
<br>
972573188884
<br>
972527163677
<br>
972573188810
<br>
972779219219
<br>
972548492080
<br>
972573111099
<br>
972573170707<br>
<br>
Anyone care to expand on this?<span><font color="#888888"><br>
<br>
-Ryan</font></span><div><div><br>
<br>
<div>On 05/15/2013 03:11 PM, David Thompson
wrote:<br>
</div>
</div></div><blockquote type="cite"><div><div>
<div>
<p class="MsoNormal">I’m catching a lot of attempts at fraud to
Israel has anyone else out there been catching any? Country
code is 972.</p>
<p class="MsoNormal"> </p>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Arial","sans-serif"">David
Thompson <br>
Network Services Support Technician <br>
(O) <a href="tel:858.357.8794" value="+18583578794" target="_blank">858.357.8794</a> <br>
(F) <a href="tel:858-225-1882" value="+18582251882" target="_blank">858-225-1882</a> <br>
(E) <a href="mailto:dthompson@esi-estech.com" target="_blank"><span style="color:blue">dthompson@esi-estech.com</span></a><br>
(W) <a href="http://www.esi-estech.com" target="_blank"><span style="color:blue">www.esi-estech.com</span></a></span></p>
<p class="MsoNormal"> </p>
</div>
<br>
<fieldset></fieldset>
<br>
</div></div><div><pre>_______________________________________________
VoiceOps mailing list
<a href="mailto:VoiceOps@voiceops.org" target="_blank">VoiceOps@voiceops.org</a>
<a href="https://puck.nether.net/mailman/listinfo/voiceops" target="_blank">https://puck.nether.net/mailman/listinfo/voiceops</a>
</pre>
</div></blockquote>
<br>
</div>
<br>_______________________________________________<br>
VoiceOps mailing list<br>
<a href="mailto:VoiceOps@voiceops.org" target="_blank">VoiceOps@voiceops.org</a><br>
<a href="https://puck.nether.net/mailman/listinfo/voiceops" target="_blank">https://puck.nether.net/mailman/listinfo/voiceops</a><br>
<br></blockquote></div><br></div>
</div></div><br>_______________________________________________<br>
VoiceOps mailing list<br>
<a href="mailto:VoiceOps@voiceops.org" target="_blank">VoiceOps@voiceops.org</a><br>
<a href="https://puck.nether.net/mailman/listinfo/voiceops" target="_blank">https://puck.nether.net/mailman/listinfo/voiceops</a><br>
<br></blockquote></div><br></div>
</div></div></blockquote></div><br></div>
<br>_______________________________________________<br>
VoiceOps mailing list<br>
<a href="mailto:VoiceOps@voiceops.org" target="_blank">VoiceOps@voiceops.org</a><br>
<a href="https://puck.nether.net/mailman/listinfo/voiceops" target="_blank">https://puck.nether.net/mailman/listinfo/voiceops</a><br>
<br></blockquote></div>
<br>_______________________________________________<br>
VoiceOps mailing list<br>
<a href="mailto:VoiceOps@voiceops.org">VoiceOps@voiceops.org</a><br>
<a href="https://puck.nether.net/mailman/listinfo/voiceops" target="_blank">https://puck.nether.net/mailman/listinfo/voiceops</a><br>
<br></blockquote></div><br></div>
<pre>--
***** Email confidentiality notice *****
This message is private and confidential. If you have received this message in error, please notify us and remove it from your system.
Simwood eSMS Limited is a limited company registered in England and Wales. Registered number: 03379831. Registered office: c/o HW Chartered Accountants, Keepers Lane, The Wergs, Wolverhampton, WV6 8UA. Trading address: Falcon Drive, Cardiff Bay, Cardiff, CF10 4RU.