Re: [asterisk-users] PBX hacked: why hundred of calls to the same number ?

2014-10-03 Thread Rainer Piper
the attacking server changed the destination Number at 18:53 CEST and he is still blocked ... LOL 972597438354 callto:00972597438354 Oct 3 18:53:17 server /sbin/kamailio[3977]: NOTICE: script: blocking IP 62.210.149.136 sipcli/v1.8 rm=INVITE aU=null rU=00972597438354

Re: [asterisk-users] PBX hacked: why hundred of calls to the same number ?

2014-10-03 Thread Eric Wieling
-boun...@lists.digium.com [mailto:asterisk-users-boun...@lists.digium.com] On Behalf Of Rainer Piper Sent: Friday, October 03, 2014 1:53 PM To: Asterisk Users Mailing List - Non-Commercial Discussion Subject: Re: [asterisk-users] PBX hacked: why hundred of calls to the same number ? the attacking

Re: [asterisk-users] PBX hacked: why hundred of calls to the same number ?

2014-10-03 Thread Chris Bagnall
On 3/10/14 6:52 pm, Rainer Piper wrote: the attacking server changed the destination Number at 18:53 CEST and he is still blocked ... LOL 972597438354 callto:00972597438354 It's pretty much an everyday occurrence for any internet-connected SIP system these days... Oct 3 19:46:20

Re: [asterisk-users] PBX hacked: why hundred of calls to the same number ?

2014-10-03 Thread Rainer Piper
:53 PM *To:* Asterisk Users Mailing List - Non-Commercial Discussion *Subject:* Re: [asterisk-users] PBX hacked: why hundred of calls to the same number ? the attacking server changed the destination Number at 18:53 CEST and he is still blocked ... LOL 972597438354 callto:00972597438354

Re: [asterisk-users] PBX hacked: why hundred of calls to the same number ?

2014-10-03 Thread Rainer Piper
Hi Chris, yes ... it is boring ... I stop posting ... ;-) Am 03.10.2014 um 20:11 schrieb Chris Bagnall: On 3/10/14 6:52 pm, Rainer Piper wrote: the attacking server changed the destination Number at 18:53 CEST and he is still blocked ... LOL 972597438354 callto:00972597438354 It's

Re: [asterisk-users] PBX hacked: why hundred of calls to the same number ?

2014-10-03 Thread Rainer Piper
just one more ;-) the source IP just changed to 142.0.41.179 OrgName:VolumeDrive OrgId: VOLUM-2 Address:1143 Northern Blvd City: Clarks Summit StateProv: PA PostalCode: 18411 Country:US and the destination Number to 972595632276

Re: [asterisk-users] PBX hacked: why hundred of calls to the same number ?

2014-10-03 Thread Michelle Dupuis
...@soho-piper.de Sent: Friday, October 3, 2014 2:15 PM To: Asterisk Users List Subject: Re: [asterisk-users] PBX hacked: why hundred of calls to the same number ? Hi Chris, yes ... it is boring ... I stop posting ... ;-) Am 03.10.2014 um 20:11 schrieb Chris Bagnall: On 3/10/14 6:52 pm, Rainer

Re: [asterisk-users] PBX hacked: why hundred of calls to the same number ?

2014-10-02 Thread Rainer Piper
Am 01.10.2014 um 15:48 schrieb Gokan Atmaca: Someone reported me that from a PBX on which someone gained fraudulent access, he could observe hundreds of calls to the same destination number. For curiosity's sake, I'm wondering why would this happen (dialing the same number over and over) ? Some

Re: [asterisk-users] PBX hacked: why hundred of calls to the same number ?

2014-10-02 Thread Tzafrir Cohen
On Thu, Oct 02, 2014 at 07:52:34AM +0200, Rainer Piper wrote: Is the destination Number like Country Code +972? +972 59 xx(x) mobile - Jawall [moving to 7-digit subscriber numbers] source - http://www.wtng.info/wtng-972-il.html That page is slightly dated. +972 59 XXX are all the

Re: [asterisk-users] PBX hacked: why hundred of calls to the same number ?

2014-10-02 Thread Dave Platt
Is the destination Number like Country Code +972? +972 59 xx(x) mobile - Jawall [moving to 7-digit subscriber numbers] source - http://www.wtng.info/wtng-972-il.html My SIP Proxy logs all the unauth. INVITEs and I found the a lot calls go to the Country code +972 xxx I've

[asterisk-users] PBX hacked: why hundred of calls to the same number ?

2014-10-01 Thread Olivier
Hi, Someone reported me that from a PBX on which someone gained fraudulent access, he could observe hundreds of calls to the same destination number. For curiosity's sake, I'm wondering why would this happen (dialing the same number over and over) ? Some special numbers generate here and there

Re: [asterisk-users] PBX hacked: why hundred of calls to the same number ?

2014-10-01 Thread Administrator TOOTAI
Le 01/10/2014 11:40, Olivier a écrit : Hi, Hi Someone reported me that from a PBX on which someone gained fraudulent access, he could observe hundreds of calls to the same destination number. For curiosity's sake, I'm wondering why would this happen (dialing the same number over and over)

Re: [asterisk-users] PBX hacked: why hundred of calls to the same number ?

2014-10-01 Thread Gokan Atmaca
Someone reported me that from a PBX on which someone gained fraudulent access, he could observe hundreds of calls to the same destination number. For curiosity's sake, I'm wondering why would this happen (dialing the same number over and over) ? Some special numbers generate here and there

Re: [asterisk-users] PBX hacked: why hundred of calls to the same number ?

2014-10-01 Thread Markus
Am 01.10.2014 11:40, schrieb Olivier: Some special numbers generate here and there revenues for callees (and not for callers). Not just some, but ALL numbers generate revenue for the receiving telecom. (Ok ok, a few exceptions, in the US for example) This is how telecoms have been earning

Re: [asterisk-users] PBX hacked: why hundred of calls to the same number ?

2014-10-01 Thread Rainer Piper
Am 01.10.2014 um 18:19 schrieb Markus: Am 01.10.2014 11:40, schrieb Olivier: Some special numbers generate here and there revenues for callees (and not for callers). Not just some, but ALL numbers generate revenue for the receiving telecom. (Ok ok, a few exceptions, in the US for example)