Scam telemarketers spoofing our NOC phone number for callerid

2010-10-06 Thread Matthew Huff
We have recently gotten complaints of harrassing and high pressure sales scams orginating from our NOC's phone number. Since the number is a virtual number on the PBX, it can't be used for outgoing calls. I assume the scammers choose the number from the whois db. Anyone else seen this

Re: Scam telemarketers spoofing our NOC phone number for callerid

2010-10-06 Thread Dan White
On 06/10/10 10:29 -0400, Matthew Huff wrote: We have recently gotten complaints of harrassing and high pressure sales scams orginating from our NOC's phone number. Since the number is a virtual number on the PBX, it can't be used for outgoing calls. I assume the scammers choose the number

Re: Scam telemarketers spoofing our NOC phone number for callerid

2010-10-06 Thread William Herrin
On Wed, Oct 6, 2010 at 10:37 AM, Dan White dwh...@olp.net wrote: If your PBX is SIP based, you might be victim of a SIP registration hijack, which are on the rise, based on traffic we've been seeing in our network. I had my unpublished asterisk box up for all of two days before getting half a

RE: Scam telemarketers spoofing our NOC phone number for callerid

2010-10-06 Thread Matthew Huff
Of William Herrin Sent: Wednesday, October 06, 2010 11:15 AM To: Dan White Cc: Matthew Huff; (nanog@nanog.org) Subject: Re: Scam telemarketers spoofing our NOC phone number for callerid On Wed, Oct 6, 2010 at 10:37 AM, Dan White dwh...@olp.net wrote: If your PBX is SIP based, you might

RE: Scam telemarketers spoofing our NOC phone number for callerid

2010-10-06 Thread Jon Lewis
On Wed, 6 Oct 2010, Matthew Huff wrote: Our system is PRI based, not sip. PRI for origination and termination...but what are your phones? Old school or VOIP/SIP? If your phone system supports SIP clients, it really ought to be IP restricted to only allow your phones access, or use

RE: Scam telemarketers spoofing our NOC phone number for callerid

2010-10-06 Thread Matthew Huff
-460-4039 aim: matthewbhuff  | Fax:   914-460-4139 -Original Message- From: Jon Lewis [mailto:jle...@lewis.org] Sent: Wednesday, October 06, 2010 11:34 AM To: Matthew Huff Cc: '(nanog@nanog.org)' Subject: RE: Scam telemarketers spoofing our NOC phone number for callerid On Wed, 6

Re: Scam telemarketers spoofing our NOC phone number for callerid

2010-10-06 Thread Brielle Bruns
On 10/6/10 9:43 AM, Matthew Huff wrote: Digital all the way through. No sip. No outside access to the PBX subnet either. Just a mininute ago our telco has verified that the calls are not orginating from out phone system. It's a simple caller id spoofing. People don't realize that caller id can

RE: Scam telemarketers spoofing our NOC phone number for callerid

2010-10-06 Thread Jon Lewis
On Wed, 6 Oct 2010, Matthew Huff wrote: Digital all the way through. No sip. No outside access to the PBX subnet either. Just a mininute ago our telco has verified that the calls are not orginating from out phone system. It's a simple caller id spoofing. People don't realize that caller id

Re: Scam telemarketers spoofing our NOC phone number for callerid

2010-10-06 Thread Joe Greco
On Wed, 6 Oct 2010, Matthew Huff wrote: Digital all the way through. No sip. No outside access to the PBX subnet either. Just a mininute ago our telco has verified that the calls are not orginating from out phone system. It's a simple caller id spoofing. People don't realize that

Re: Scam telemarketers spoofing our NOC phone number for callerid

2010-10-06 Thread J. Oquendo
William Herrin wrote: On Wed, Oct 6, 2010 at 10:37 AM, Dan White dwh...@olp.net wrote: If your PBX is SIP based, you might be victim of a SIP registration hijack, which are on the rise, based on traffic we've been seeing in our network. I had my unpublished asterisk box up for all

Re: Scam telemarketers spoofing our NOC phone number for callerid

2010-10-06 Thread Graham Beneke
On 06/10/2010 17:15, William Herrin wrote: I had my unpublished asterisk box up for all of two days before getting half a megabit per second worth of false SIP registration attempts. The script kiddies and botnets seem to by trying hard. I started announcing a brand new RIR allocation about 4

Re: Scam telemarketers spoofing our NOC phone number for callerid

2010-10-06 Thread Scott Howard
On Wed, Oct 6, 2010 at 8:55 AM, Jon Lewis jle...@lewis.org wrote: Some do. Anyone with control of a phone system with digital lines (i.e. asterisk with PRI) can trivially set callerID to whatever they want. There are perfectly legitimate, and not so legitimate uses for this. You don't even

Re: Scam telemarketers spoofing our NOC phone number for callerid

2010-10-06 Thread J. Oquendo
Scott Howard wrote: On Wed, Oct 6, 2010 at 8:55 AM, Jon Lewis jle...@lewis.org wrote: Some do. Anyone with control of a phone system with digital lines (i.e. asterisk with PRI) can trivially set callerID to whatever they want. There are perfectly legitimate, and not so legitimate uses

RE: Scam telemarketers spoofing our NOC phone number for callerid

2010-10-06 Thread FEARGAL_LEDWIDGE
From: sc...@doc.net.au [mailto:sc...@doc.net.au] Sent: Wednesday, October 06, 2010 2:26 PM Subject: Re: Scam telemarketers spoofing our NOC phone number for callerid There were some laws passed recently which makes faking caller-id illegal, although I'm not sure exactly what the details are (eg

Re: Scam telemarketers spoofing our NOC phone number for callerid

2010-10-06 Thread Randy Bush
not directly related, but i get occasional harrassing calls from mental/emotional children who are using whois. it's amusing but basically pathetic. randy

RE: Scam telemarketers spoofing our NOC phone number for callerid

2010-10-06 Thread John van Oppen
@nanog.org)' Subject: Re: Scam telemarketers spoofing our NOC phone number for callerid not directly related, but i get occasional harrassing calls from mental/emotional children who are using whois. it's amusing but basically pathetic. randy

Re: Scam telemarketers spoofing our NOC phone number for callerid

2010-10-06 Thread Randy Bush
We get people calling our noc numbers pretty often trying to report abuse for other people's networks... that is always fun not directly related, but i get occasional harrassing calls from mental/emotional children who are using whois. it's amusing but basically pathetic. no, i mean