[VoiceOps] Voice DDOS ?

2014-02-24 Thread Ivan Kovacevic
Hi Folks, We are seeing something strange coming across our network. A disconnected client TFN is receiving 30,000+ calls per hour (all failing). The ANIs being used are dummy ANIs 17029983416 (no answer) and 16469820093 (recording saying no routes found). This is not affecting our network,

Re: [VoiceOps] Voice DDOS ?

2014-02-24 Thread Christopher Aloi
Sounds like a possible loop, the No Routes Found recording comes off of a Sonus Networks GSX or SBC. How is the TFN arriving to your network? - Chris On 24 Feb 2014, at 9:01, Ivan Kovacevic wrote: Hi Folks, We are seeing something strange coming across our network. A disconnected

Re: [VoiceOps] Voice DDOS ?

2014-02-24 Thread John Curry
I would just block the originating IP address. It would appear to me someone is trying to compromise your system. -Original Message- From: VoiceOps [mailto:voiceops-boun...@voiceops.org] On Behalf Of Christopher Aloi Sent: Monday, February 24, 2014 9:44 AM To: Ivan Kovacevic Cc:

Re: [VoiceOps] [VOIPSEC] Tackling VoIP fraud, new idea

2014-02-24 Thread Jim Dalton
It is a list of subscriber numbers that have been identified as destinations for fraudulent calls. The list is compiled by members of the GSM Fraud Forum and the CFCA. In addition to the subscriber number, the list identifies the organization that submitted the number and the reason why. Jim

Re: [VoiceOps] [VOIPSEC] Tackling VoIP fraud, new idea

2014-02-24 Thread Jim Dalton
The CFCA may not want that information shared publicly. It would be best to ask them directly at fr...@cfca.org mailto:fr...@cfca.org%A0 From: Paul Timmins [mailto:p...@timmins.net] Sent: Monday, February 24, 2014 1:04 PM To: jim.dal...@transnexus.com Cc: 'Christopher Aloi'; 'Mark

Re: [VoiceOps] [VOIPSEC] Tackling VoIP fraud, new idea

2014-02-24 Thread Jay Hennigan
On 2/24/14 7:50 AM, Christopher Aloi wrote: What does the International Revenue Fraud Number Database on cfa.org http://cfa.org contain? It's the internet. Pictures of cats, of course. Cats are always on-topic. Or did you mean http://www.cfca.org ? emily litella Never mind. /emily --

Re: [VoiceOps] Fraud

2014-02-24 Thread Matt Yaklin
On Mon, 24 Feb 2014, My List Account wrote: Maybe I am missing something here but why does the carrier that delivers the fraudulent traffic to the Telco that?s in on the fraud pay the Telco that?s in on the fraud for the calls that are delivered to their network?   Seems pretty simple,

Re: [VoiceOps] Fraud

2014-02-24 Thread Ujjval Karihaloo
That is what our experience has been. The call origination IP is in countries that the Abuse email isn't even monitored. We have had reports to FBI, our upstream carriers, but no luck getting anywhere with these investigations. -Original Message- From: VoiceOps

Re: [VoiceOps] Fraud

2014-02-24 Thread David Thompson
Most of the countries that are generating the fraud are so corrupt that the only way you'll see justice is by sending in a team of Navy Seals. David Thompson Network Services Support Technician (O) 858.357.8794 (F) 858-225-1882 (E) dthomp...@esi-estech.com (W) www.esi-estech.com -Original

Re: [VoiceOps] Fraud

2014-02-24 Thread Jay Hennigan
On 2/24/14 10:48 AM, My List Account wrote: Maybe I am missing something here but why does the carrier that delivers the fraudulent traffic to the Telco that’s in on the fraud pay the Telco that’s in on the fraud for the calls that are delivered to their network? Seems pretty simple, if you

Re: [VoiceOps] [VOIPSEC] Tackling VoIP fraud, new idea

2014-02-24 Thread Christopher Aloi
ha ! Wow - Actual cats on the internet !! // my bad.. Correct - http://www.cfca.org On 24 Feb 2014, at 14:14, Jay Hennigan wrote: On 2/24/14 7:50 AM, Christopher Aloi wrote: What does the International Revenue Fraud Number Database on cfa.org http://cfa.org contain? It's the

Re: [VoiceOps] Fraud

2014-02-24 Thread John Curry
Would you mind sharing your hi toll rate destination dial plan? From: VoiceOps [mailto:voiceops-boun...@voiceops.org] On Behalf Of My List Account Sent: Monday, February 24, 2014 1:48 PM To: voiceops@voiceops.org Subject: Re: [VoiceOps] Fraud Maybe I am missing something here but why