Re: Scam telemarketers spoofing our NOC phone number for callerid

2010-10-06 Thread Randy Bush
> We get people calling our noc numbers pretty often trying to report > abuse for other people's networks... that is always fun >> not directly related, but i get occasional harrassing calls from >> mental/emotional children who are using whois. it's amusing but >> basically pathetic. no, i mean

RE: Scam telemarketers spoofing our NOC phone number for callerid

2010-10-06 Thread John van Oppen
27; (nanog@nanog.org)' Subject: Re: Scam telemarketers spoofing our NOC phone number for callerid not directly related, but i get occasional harrassing calls from mental/emotional children who are using whois. it's amusing but basically pathetic. randy

Re: Scam telemarketers spoofing our NOC phone number for callerid

2010-10-06 Thread Randy Bush
not directly related, but i get occasional harrassing calls from mental/emotional children who are using whois. it's amusing but basically pathetic. randy

RE: Scam telemarketers spoofing our NOC phone number for callerid

2010-10-06 Thread FEARGAL_LEDWIDGE
From: sc...@doc.net.au [mailto:sc...@doc.net.au] Sent: Wednesday, October 06, 2010 2:26 PM Subject: Re: Scam telemarketers spoofing our NOC phone number for callerid >There were some laws passed recently which makes "faking" caller-id illegal, >although I'm not sure exactly

Re: Scam telemarketers spoofing our NOC phone number for callerid

2010-10-06 Thread J. Oquendo
Scott Howard wrote: > On Wed, Oct 6, 2010 at 8:55 AM, Jon Lewis wrote: > > >> Some do. Anyone with control of a phone system with digital lines (i.e. >> asterisk with PRI) can trivially set callerID to whatever they want. There >> are perfectly legitimate, and not so legitimate uses for this.

Re: Scam telemarketers spoofing our NOC phone number for callerid

2010-10-06 Thread Scott Howard
On Wed, Oct 6, 2010 at 8:55 AM, Jon Lewis wrote: > Some do. Anyone with control of a phone system with digital lines (i.e. > asterisk with PRI) can trivially set callerID to whatever they want. There > are perfectly legitimate, and not so legitimate uses for this. > You don't even need the PRI.

Re: Scam telemarketers spoofing our NOC phone number for callerid

2010-10-06 Thread Graham Beneke
On 06/10/2010 17:15, William Herrin wrote: I had my unpublished asterisk box up for all of two days before getting half a megabit per second worth of false SIP registration attempts. The script kiddies and botnets seem to by trying hard. I started announcing a brand new RIR allocation about 4

Re: Scam telemarketers spoofing our NOC phone number for callerid

2010-10-06 Thread J. Oquendo
William Herrin wrote: > On Wed, Oct 6, 2010 at 10:37 AM, Dan White wrote: > >> If your PBX is SIP based, you might be victim of a SIP registration hijack, >> which are on the rise, based on traffic we've been seeing in our network. >> > > I had my unpublished asterisk box up for all of two

Re: Scam telemarketers spoofing our NOC phone number for callerid

2010-10-06 Thread Joe Greco
> On Wed, 6 Oct 2010, Matthew Huff wrote: > > > Digital all the way through. No sip. No outside access to the PBX subnet > > either. Just a mininute ago our telco has verified that the calls are > > not orginating from out phone system. It's a simple caller id spoofing. > > People don't realize

RE: Scam telemarketers spoofing our NOC phone number for callerid

2010-10-06 Thread Jon Lewis
On Wed, 6 Oct 2010, Matthew Huff wrote: Digital all the way through. No sip. No outside access to the PBX subnet either. Just a mininute ago our telco has verified that the calls are not orginating from out phone system. It's a simple caller id spoofing. People don't realize that caller id can

Re: Scam telemarketers spoofing our NOC phone number for callerid

2010-10-06 Thread Brielle Bruns
On 10/6/10 9:43 AM, Matthew Huff wrote: Digital all the way through. No sip. No outside access to the PBX subnet either. Just a mininute ago our telco has verified that the calls are not orginating from out phone system. It's a simple caller id spoofing. People don't realize that caller id can be

RE: Scam telemarketers spoofing our NOC phone number for callerid

2010-10-06 Thread Matthew Huff
Phone: 914-460-4039 aim: matthewbhuff  | Fax:   914-460-4139 > -Original Message- > From: Jon Lewis [mailto:jle...@lewis.org] > Sent: Wednesday, October 06, 2010 11:34 AM > To: Matthew Huff > Cc: '(nanog@nanog.org)' > Subject: RE: Scam telemarketers spoofing our

RE: Scam telemarketers spoofing our NOC phone number for callerid

2010-10-06 Thread Jon Lewis
On Wed, 6 Oct 2010, Matthew Huff wrote: Our system is PRI based, not sip. PRI for origination and termination...but what are your phones? Old school or VOIP/SIP? If your phone system supports SIP clients, it really ought to be IP restricted to only allow your phones access, or use somethi

RE: Scam telemarketers spoofing our NOC phone number for callerid

2010-10-06 Thread Matthew Huff
om] On Behalf Of William Herrin > Sent: Wednesday, October 06, 2010 11:15 AM > To: Dan White > Cc: Matthew Huff; (nanog@nanog.org) > Subject: Re: Scam telemarketers spoofing our NOC phone number for callerid > > On Wed, Oct 6, 2010 at 10:37 AM, Dan White wrote: > > If your

Re: Scam telemarketers spoofing our NOC phone number for callerid

2010-10-06 Thread William Herrin
On Wed, Oct 6, 2010 at 10:37 AM, Dan White wrote: > If your PBX is SIP based, you might be victim of a SIP registration hijack, > which are on the rise, based on traffic we've been seeing in our network. I had my unpublished asterisk box up for all of two days before getting half a megabit per se

Re: Scam telemarketers spoofing our NOC phone number for callerid

2010-10-06 Thread Dan White
On 06/10/10 10:29 -0400, Matthew Huff wrote: We have recently gotten complaints of harrassing and high pressure sales scams orginating from our NOC's phone number. Since the number is a virtual number on the PBX, it can't be used for outgoing calls. I assume the scammers choose the number from

Scam telemarketers spoofing our NOC phone number for callerid

2010-10-06 Thread Matthew Huff
We have recently gotten complaints of harrassing and high pressure sales scams orginating from our NOC's phone number. Since the number is a virtual number on the PBX, it can't be used for outgoing calls. I assume the scammers choose the number from the whois db. Anyone else seen this happening?