SIPtap a SIP Call Monitoring Demonstrator
VoIPcode.org wants to raise public awareness of how dangerously vulnerable
VoIP phone calls are to unauthorised wiretapping.
While telephone calls on the standard phone network (PSTN) may
be monitored, access to the telephone companies networks is tightly
controlled making unauthorized wiretapping virtually impossible.
In most countries even the law enforcement authorities need to obtain
the correct legal authorisation.
Voice over IP (VoIP) changes all this. As the name suggests, VoIP calls
run over an IP network. IP networks are much more open than
the PSTN, this means that VoIP calls can be intercepted and
monitored much more easily than PSTN calls.
The real threat will be intercepts by organised crime, hackers, and anyone else
who wants to listen to your VoIP phone calls. All they have to do is
to monitor the IP network at some point between the caller and call
recipient. The monitoring point can be the corporate network, an
unscrupulous ISP or a local PC infected with spyware. The recordings of
monitored calls can
be organised, indexed and remotely browsed from anywhere in the world.
We present a simple "proof of concept" call monitor here.
The call recordings indexed and listed on this page have
been generated by SIPtap, a configurable SIP monitoring utility that may be
used for the controlled recording of selected SIP calls. All calls made to the
listed VoIP numbers and URIs are recorded by SIPtap,
filed by date and indexed by caller, call recipient and SIP Call-ID.
Monitored VoIP Numbers
|
SIP URI
|
Function
|
|
sip:date@sip.voipcode.org
|
Current time and date (in London UK)
|
|
sip:202@sip.voipcode.org
|
Same as sip:date@sip.voipcode.org
|
|
sip:echo@sip.voipcode.org
|
Echo test (anything you say will be echoed back to you)
|
|
sip:207@sip.voipcode.org
|
Same as sip:echo@sip.voipcode.org
|
The Recordings
VoIP eavesdropping recordings exist for the following dates.
| October 2007 |
| S |
M |
T |
W |
T |
F |
S |
| |
1 |
2 |
3 |
4 |
5 |
6 |
| 7 |
8 |
9 |
10 |
11 |
12 |
13 |
| 14 |
15 |
16 |
17 |
18 |
19 |
20 |
| 21 |
22 |
23 |
24 |
25 |
26 |
27 |
| 28 |
29 |
30 |
31 |
|
|
|
| |
|
|
|
|
|
|
|
| November 2007 |
| S |
M |
T |
W |
T |
F |
S |
| |
|
|
|
1 |
2 |
3 |
| 4 |
5 |
6 |
7 |
8 |
9 |
10 |
| 11 |
12 |
13 |
14 |
15 |
16 |
17 |
| 18 |
19 |
20 |
21 |
22 |
23 |
24 |
| 25 |
26 |
27 |
28 |
29 |
30 |
|
| |
|
|
|
|
|
|
|
| December 2007 |
| S |
M |
T |
W |
T |
F |
S |
| |
|
|
|
|
|
1 |
| 2 |
3 |
4 |
5 |
6 |
7 |
8 |
| 9 |
10 |
11 |
12 |
13 |
14 |
15 |
| 16 |
17 |
18 |
19 |
20 |
21 |
22 |
| 23 |
24 |
25 |
26 |
27 |
28 |
29 |
| 30 |
31 |
|
|
|
|
|
|
| January 2008 |
| S |
M |
T |
W |
T |
F |
S |
| |
|
1 |
2 |
3 |
4 |
5 |
| 6 |
7 |
8 |
9 |
10 |
11 |
12 |
| 13 |
14 |
15 |
16 |
17 |
18 |
19 |
| 20 |
21 |
22 |
23 |
24 |
25 |
26 |
| 27 |
28 |
29 |
30 |
31 |
|
|
| |
|
|
|
|
|
|
|
| February 2008 |
| S |
M |
T |
W |
T |
F |
S |
| |
|
|
|
|
1 |
2 |
| 3 |
4 |
5 |
6 |
7 |
8 |
9 |
| 10 |
11 |
12 |
13 |
14 |
15 |
16 |
| 17 |
18 |
19 |
20 |
21 |
22 |
23 |
| 24 |
25 |
26 |
27 |
28 |
29 |
|
| |
|
|
|
|
|
|
|
| March 2008 |
| S |
M |
T |
W |
T |
F |
S |
| |
|
|
|
|
|
1 |
| 2 |
3 |
4 |
5 |
6 |
7 |
8 |
| 9 |
10 |
11 |
12 |
13 |
14 |
15 |
| 16 |
17 |
18 |
19 |
20 |
21 |
22 |
| 23 |
24 |
25 |
26 |
27 |
28 |
29 |
| 30 |
31 |
|
|
|
|
|
|
| April 2008 |
| S |
M |
T |
W |
T |
F |
S |
| |
|
1 |
2 |
3 |
4 |
5 |
| 6 |
7 |
8 |
9 |
10 |
11 |
12 |
| 13 |
14 |
15 |
16 |
17 |
18 |
19 |
| 20 |
21 |
22 |
23 |
24 |
25 |
26 |
| 27 |
28 |
29 |
30 |
|
|
|
| |
|
|
|
|
|
|
|
| May 2008 |
| S |
M |
T |
W |
T |
F |
S |
| |
|
|
|
1 |
2 |
3 |
| 4 |
5 |
6 |
7 |
8 |
9 |
10 |
| 11 |
12 |
13 |
14 |
15 |
16 |
17 |
| 18 |
19 |
20 |
21 |
22 |
23 |
24 |
| 25 |
26 |
27 |
28 |
29 |
30 |
31 |
| |
|
|
|
|
|
|
|
| June 2008 |
| S |
M |
T |
W |
T |
F |
S |
| 1 |
2 |
3 |
4 |
5 |
6 |
7 |
| 8 |
9 |
10 |
11 |
12 |
13 |
14 |
| 15 |
16 |
17 |
18 |
19 |
20 |
21 |
| 22 |
23 |
24 |
25 |
26 |
27 |
28 |
| 29 |
30 |
|
|
|
|
|
| |
|
|
|
|
|
|
|
| July 2008 |
| S |
M |
T |
W |
T |
F |
S |
| |
|
1 |
2 |
3 |
4 |
5 |
| 6 |
7 |
8 |
9 |
10 |
11 |
12 |
| 13 |
14 |
15 |
16 |
17 |
18 |
19 |
| 20 |
21 |
22 |
23 |
24 |
25 |
26 |
| 27 |
28 |
29 |
30 |
31 |
|
|
| |
|
|
|
|
|
|
|
| August 2008 |
| S |
M |
T |
W |
T |
F |
S |
| |
|
|
|
|
1 |
2 |
| 3 |
4 |
5 |
6 |
7 |
8 |
9 |
| 10 |
11 |
12 |
13 |
14 |
15 |
16 |
| 17 |
18 |
19 |
20 |
21 |
22 |
23 |
| 24 |
25 |
26 |
27 |
28 |
29 |
30 |
| 31 |
|
|
|
|
|
|
|
| September 2008 |
| S |
M |
T |
W |
T |
F |
S |
| |
1 |
2 |
3 |
4 |
5 |
6 |
| 7 |
8 |
9 |
10 |
11 |
12 |
13 |
| 14 |
15 |
16 |
17 |
18 |
19 |
20 |
| 21 |
22 |
23 |
24 |
25 |
26 |
27 |
| 28 |
29 |
30 |
|
|
|
|
| |
|
|
|
|
|
|
|
| October 2008 |
| S |
M |
T |
W |
T |
F |
S |
| |
|
|
1 |
2 |
3 |
4 |
| 5 |
6 |
7 |
8 |
9 |
10 |
11 |
| 12 |
13 |
14 |
15 |
16 |
17 |
18 |
| 19 |
20 |
21 |
22 |
23 |
24 |
25 |
| 26 |
27 |
28 |
29 |
30 |
31 |
|
| |
|
|
|
|
|
|
|
| November 2008 |
| S |
M |
T |
W |
T |
F |
S |
| |
|
|
|
|
|
1 |
| 2 |
3 |
4 |
5 |
6 |
7 |
8 |
| 9 |
10 |
11 |
12 |
13 |
14 |
15 |
| 16 |
17 |
18 |
19 |
20 |
21 |
22 |
| 23 |
24 |
25 |
26 |
27 |
28 |
29 |
| 30 |
|
|
|
|
|
|
|
| December 2008 |
| S |
M |
T |
W |
T |
F |
S |
| |
1 |
2 |
3 |
4 |
5 |
6 |
| 7 |
8 |
9 |
10 |
11 |
12 |
13 |
| 14 |
15 |
16 |
17 |
18 |
19 |
20 |
| 21 |
22 |
23 |
24 |
25 |
26 |
27 |
| 28 |
29 |
30 |
31 |
|
|
|
| |
|
|
|
|
|
|
|
| January 2009 |
| S |
M |
T |
W |
T |
F |
S |
| |
|
|
|
1 |
2 |
3 |
| 4 |
5 |
6 |
7 |
8 |
9 |
10 |
| 11 |
12 |
13 |
14 |
15 |
16 |
17 |
| 18 |
19 |
20 |
21 |
22 |
23 |
24 |
| 25 |
26 |
27 |
28 |
29 |
30 |
31 |
| |
|
|
|
|
|
|
|
| February 2009 |
| S |
M |
T |
W |
T |
F |
S |
| 1 |
2 |
3 |
4 |
5 |
6 |
7 |
| 8 |
9 |
10 |
11 |
12 |
13 |
14 |
| 15 |
16 |
17 |
18 |
19 |
20 |
21 |
| 22 |
23 |
24 |
25 |
26 |
27 |
28 |
| |
|
|
|
|
|
|
| |
|
|
|
|
|
|
|
|
Disclaimer:
This page and the utilities employed to generate it are provided purely
to illustrate the ease with which VoIP calls can be monitored and the
subsequent risk of unauthorised eavesdropping on those calls. VoIPcode.org
accepts no responsibility or liability arising from the use of this
demonstration capability or for any calls made to the identified VoIP phones
and numbers that are monitored by this demonstrator.