Catching alot of attempts at fraud to Israel....

I?m catching a lot of attempts at fraud to Israel has anyone else out there been catching any? Country code is 972. David Thompson Network Services Support Technician (O) 858.357.8794 (F) 858-225-1882 (E) dthompson at esi-estech.com (W) www.esi-estech.com

I've been hearing a lot about this on another forum and the conclusion there seemed to be that it was nearly all Palestinian codes. On 05/15/2013 06:11 PM, David Thompson wrote:
I?m catching a lot of attempts at fraud to Israel has anyone else out there been catching any? Country code is 972.
David Thompson Network Services Support Technician (O) 858.357.8794 (F) 858-225-1882 (E) dthompson at esi-estech.com <mailto:dthompson at esi-estech.com> (W) www.esi-estech.com <http://www.esi-estech.com>
_______________________________________________ VoiceOps mailing list VoiceOps at voiceops.org https://puck.nether.net/mailman/listinfo/voiceops
-- Alex Balashov - Principal Evariste Systems LLC 235 E Ponce de Leon Ave Suite 106 Decatur, GA 30030 United States Tel: +1-678-954-0670 Web: http://www.evaristesys.com/, http://www.alexbalashov.com/

Gaza - is what we have seen last few weeks. Ujjval K On May 15, 2013, at 4:58 PM, Alex Balashov <abalashov at evaristesys.com> wrote:
I've been hearing a lot about this on another forum and the conclusion there seemed to be that it was nearly all Palestinian codes.
On 05/15/2013 06:11 PM, David Thompson wrote:
I?m catching a lot of attempts at fraud to Israel has anyone else out there been catching any? Country code is 972.
David Thompson Network Services Support Technician (O) 858.357.8794 (F) 858-225-1882 (E) dthompson at esi-estech.com <mailto:dthompson at esi-estech.com> (W) www.esi-estech.com <http://www.esi-estech.com>
_______________________________________________ VoiceOps mailing list VoiceOps at voiceops.org https://puck.nether.net/mailman/listinfo/voiceops
-- Alex Balashov - Principal Evariste Systems LLC 235 E Ponce de Leon Ave Suite 106 Decatur, GA 30030 United States Tel: +1-678-954-0670 Web: http://www.evaristesys.com/, http://www.alexbalashov.com/ _______________________________________________ VoiceOps mailing list VoiceOps at voiceops.org https://puck.nether.net/mailman/listinfo/voiceops

Yep Ive just started seeing this ramp up as well. Here are some of the numbers I am seeing in the last few days. 972599913643 972573188884 972527163677 972573188810 972779219219 972548492080 972573111099 972573170707 Anyone care to expand on this? -Ryan On 05/15/2013 03:11 PM, David Thompson wrote:
I'm catching a lot of attempts at fraud to Israel has anyone else out there been catching any? Country code is 972.
David Thompson Network Services Support Technician (O) 858.357.8794 (F) 858-225-1882 (E) dthompson at esi-estech.com <mailto:dthompson at esi-estech.com> (W) www.esi-estech.com <http://www.esi-estech.com>
_______________________________________________ VoiceOps mailing list VoiceOps at voiceops.org https://puck.nether.net/mailman/listinfo/voiceops

Here are some more. All coming from user-agent: sipcli/v1.8 972592172000 972592172400 972592172450 972592100000 972592170000 972592511626 On Wed, May 22, 2013 at 5:36 PM, Ryan Delgrosso <ryandelgrosso at gmail.com>wrote:
Yep Ive just started seeing this ramp up as well.
Here are some of the numbers I am seeing in the last few days.
972599913643 972573188884 972527163677 972573188810 972779219219 972548492080 972573111099 972573170707
Anyone care to expand on this?
-Ryan
On 05/15/2013 03:11 PM, David Thompson wrote:
I?m catching a lot of attempts at fraud to Israel has anyone else out there been catching any? Country code is 972.
David Thompson Network Services Support Technician (O) 858.357.8794 (F) 858-225-1882 (E) dthompson at esi-estech.com (W) www.esi-estech.com
_______________________________________________ VoiceOps mailing listVoiceOps at voiceops.orghttps://puck.nether.net/mailman/listinfo/voiceops
_______________________________________________ VoiceOps mailing list VoiceOps at voiceops.org https://puck.nether.net/mailman/listinfo/voiceops

Did you try using fail2ban? Works well for us. Oren On Thu, May 23, 2013 at 3:57 PM, PE <peeip989 at gmail.com> wrote:
Here are some more. All coming from user-agent: sipcli/v1.8
972592172000 972592172400 972592172450 972592100000 972592170000 972592511626
On Wed, May 22, 2013 at 5:36 PM, Ryan Delgrosso <ryandelgrosso at gmail.com>wrote:
Yep Ive just started seeing this ramp up as well.
Here are some of the numbers I am seeing in the last few days.
972599913643 972573188884 972527163677 972573188810 972779219219 972548492080 972573111099 972573170707
Anyone care to expand on this?
-Ryan
On 05/15/2013 03:11 PM, David Thompson wrote:
I?m catching a lot of attempts at fraud to Israel has anyone else out there been catching any? Country code is 972.
David Thompson Network Services Support Technician (O) 858.357.8794 (F) 858-225-1882 (E) dthompson at esi-estech.com (W) www.esi-estech.com
_______________________________________________ VoiceOps mailing listVoiceOps at voiceops.orghttps://puck.nether.net/mailman/listinfo/voiceops
_______________________________________________ VoiceOps mailing list VoiceOps at voiceops.org https://puck.nether.net/mailman/listinfo/voiceops
_______________________________________________ VoiceOps mailing list VoiceOps at voiceops.org https://puck.nether.net/mailman/listinfo/voiceops

Here's another: 972597708294 (UA sipcli/v1.8) On Fri, May 24, 2013 at 1:15 PM, Oren Yehezkely <orenyny at gmail.com> wrote:
Did you try using fail2ban?
Works well for us.
Oren
On Thu, May 23, 2013 at 3:57 PM, PE <peeip989 at gmail.com> wrote:
Here are some more. All coming from user-agent: sipcli/v1.8
972592172000 972592172400 972592172450 972592100000 972592170000 972592511626
On Wed, May 22, 2013 at 5:36 PM, Ryan Delgrosso <ryandelgrosso at gmail.com>wrote:
Yep Ive just started seeing this ramp up as well.
Here are some of the numbers I am seeing in the last few days.
972599913643 972573188884 972527163677 972573188810 972779219219 972548492080 972573111099 972573170707
Anyone care to expand on this?
-Ryan
On 05/15/2013 03:11 PM, David Thompson wrote:
I?m catching a lot of attempts at fraud to Israel has anyone else out there been catching any? Country code is 972.
David Thompson Network Services Support Technician (O) 858.357.8794 (F) 858-225-1882 (E) dthompson at esi-estech.com (W) www.esi-estech.com
_______________________________________________ VoiceOps mailing listVoiceOps at voiceops.orghttps://puck.nether.net/mailman/listinfo/voiceops
_______________________________________________ VoiceOps mailing list VoiceOps at voiceops.org https://puck.nether.net/mailman/listinfo/voiceops
_______________________________________________ VoiceOps mailing list VoiceOps at voiceops.org https://puck.nether.net/mailman/listinfo/voiceops

We're (SureVoIP) are getting the same with that UA too. We've just put into production Homer SIP Capture and the stats tool is showing that UA almost top. Cheers. On 29 May 2013 14:44, "PE" <peeip989 at gmail.com> wrote:
Here's another: 972597708294 (UA sipcli/v1.8)
On Fri, May 24, 2013 at 1:15 PM, Oren Yehezkely <orenyny at gmail.com> wrote:
Did you try using fail2ban?
Works well for us.
Oren
On Thu, May 23, 2013 at 3:57 PM, PE <peeip989 at gmail.com> wrote:
Here are some more. All coming from user-agent: sipcli/v1.8
972592172000 972592172400 972592172450 972592100000 972592170000 972592511626
On Wed, May 22, 2013 at 5:36 PM, Ryan Delgrosso <ryandelgrosso at gmail.com
wrote:
Yep Ive just started seeing this ramp up as well.
Here are some of the numbers I am seeing in the last few days.
972599913643 972573188884 972527163677 972573188810 972779219219 972548492080 972573111099 972573170707
Anyone care to expand on this?
-Ryan
On 05/15/2013 03:11 PM, David Thompson wrote:
I?m catching a lot of attempts at fraud to Israel has anyone else out there been catching any? Country code is 972.
David Thompson Network Services Support Technician (O) 858.357.8794 (F) 858-225-1882 (E) dthompson at esi-estech.com (W) www.esi-estech.com
_______________________________________________ VoiceOps mailing listVoiceOps at voiceops.orghttps://puck.nether.net/mailman/listinfo/voiceops
_______________________________________________ VoiceOps mailing list VoiceOps at voiceops.org https://puck.nether.net/mailman/listinfo/voiceops
_______________________________________________ VoiceOps mailing list VoiceOps at voiceops.org https://puck.nether.net/mailman/listinfo/voiceops
_______________________________________________ VoiceOps mailing list VoiceOps at voiceops.org https://puck.nether.net/mailman/listinfo/voiceops

Second only to friendly-scanner in our honeypots: http://mirror.simwood.com/honeypot/honeypot_agent_1y.csv On 29 May 2013 15:16, Gavin Henry <ghenry at suretec.co.uk> wrote:
We're (SureVoIP) are getting the same with that UA too.
We've just put into production Homer SIP Capture and the stats tool is showing that UA almost top.
Cheers. On 29 May 2013 14:44, "PE" <peeip989 at gmail.com> wrote:
Here's another: 972597708294 (UA sipcli/v1.8)
On Fri, May 24, 2013 at 1:15 PM, Oren Yehezkely <orenyny at gmail.com>wrote:
Did you try using fail2ban?
Works well for us.
Oren
On Thu, May 23, 2013 at 3:57 PM, PE <peeip989 at gmail.com> wrote:
Here are some more. All coming from user-agent: sipcli/v1.8
972592172000 972592172400 972592172450 972592100000 972592170000 972592511626
On Wed, May 22, 2013 at 5:36 PM, Ryan Delgrosso < ryandelgrosso at gmail.com> wrote:
Yep Ive just started seeing this ramp up as well.
Here are some of the numbers I am seeing in the last few days.
972599913643 972573188884 972527163677 972573188810 972779219219 972548492080 972573111099 972573170707
Anyone care to expand on this?
-Ryan
On 05/15/2013 03:11 PM, David Thompson wrote:
I?m catching a lot of attempts at fraud to Israel has anyone else out there been catching any? Country code is 972.
David Thompson Network Services Support Technician (O) 858.357.8794 (F) 858-225-1882 (E) dthompson at esi-estech.com (W) www.esi-estech.com
_______________________________________________ VoiceOps mailing listVoiceOps at voiceops.orghttps://puck.nether.net/mailman/listinfo/voiceops
_______________________________________________ VoiceOps mailing list VoiceOps at voiceops.org https://puck.nether.net/mailman/listinfo/voiceops
_______________________________________________ VoiceOps mailing list VoiceOps at voiceops.org https://puck.nether.net/mailman/listinfo/voiceops
_______________________________________________ VoiceOps mailing list VoiceOps at voiceops.org https://puck.nether.net/mailman/listinfo/voiceops
_______________________________________________ VoiceOps mailing list VoiceOps at voiceops.org https://puck.nether.net/mailman/listinfo/voiceops
-- ***** Email confidentiality notice ***** This message is private and confidential. If you have received this message in error, please notify us and remove it from your system. Simwood eSMS Limited is a limited company registered in England and Wales. Registered number: 03379831. Registered office: c/o HW Chartered Accountants, Keepers Lane, The Wergs, Wolverhampton, WV6 8UA. Trading address: Falcon Drive, Cardiff Bay, Cardiff, CF10 4RU.
participants (8)
-
abalashov@evaristesys.com
-
dthompson@esi-estech.com
-
ghenry@suretec.co.uk
-
orenyny@gmail.com
-
peeip989@gmail.com
-
ryandelgrosso@gmail.com
-
simon.woodhead@simwood.com
-
ujjval@simplesignal.com