Send VoiceOps mailing list submissions to
[email protected]
To subscribe or unsubscribe via the World Wide Web, visit
https://puck.nether.net/mailman/listinfo/voiceops
or, via email, send a message with subject or body 'help' to
[email protected]
You can reach the person managing the list at
[email protected]
When replying, please edit your Subject line so it is more specific
than "Re: Contents of VoiceOps digest..."
Today's Topics:
1. Re: Interesting lead on international fraud (PE)
2. Re: Interesting lead on international fraud (Simon Woodhead)
3. Looking for a SIP 48 port FXS gateway (Sanjay Srinivasan)
----------------------------------------------------------------------
Message: 1
Date: Tue, 14 May 2013 15:07:37 -0400
From: PE <[email protected]>
To: "J. Oquendo" <[email protected]>
Cc: "[email protected]" <[email protected]>
Subject: Re: [VoiceOps] Interesting lead on international fraud
Message-ID:
<CAHm=sajms05sqtj-rkzjxaf3vwriyur2vskpcglvbqtxe+0...@mail.gmail.com>
Content-Type: text/plain; charset="iso-8859-1"
J,
Is there an easy way to get the data from the twitter feed in a list
format? This is great info. Thanks
On Mon, May 13, 2013 at 12:57 PM, J. Oquendo <[email protected]> wrote:
> A while back, when I started streaming to Twitter
> (https://twitter.com/efensive) I had wanted to post the
> numbers being dialed by fraudsters so that others would
> be able to see these numbers and block them. Difficult
> to get a list of numbers called, in fact, I would hope
> that no one would have a number to add, as that would mean
> one was compromised. However, if anyone wants to share
> #'s being dialed fraudulently, I will add them to the
> Twitter stream and perhaps make an all inclusive list
> freely available.
>
> I added a few here and there, but I have also taken a lot
> of proactive steps to reduce fraud. (Hello Jim and others
> at Transnexus ;)) This is what I (we were I work) have
> done.
>
> I parse the logs on my SBCs on an hourly basis. The log
> parsing does two distinct things, 1) tallies the volume
> of calls, and two dissects which calls are going to
> high rated areas.
>
> STEP 1)
> Download SBC logs
> Perform a count against client trunks
> Compare that count against a 90 day baseline
> Report anomalies
>
> This allows me to see when a trunk is generating a lot of
> calls. Period
>
> STEP 2)
> Parse through SBC logs
> Parse out DESTINATION (country code area code)
> Check DESTINATIONS against a rate deck where price exceeds
> N amount per minute (I have this set to about .21 (USD) per
> minute. Report which trunk is making that call.
> The reporting is automated and if anomalies are detected,
> emails are sent and ALSO a call is generated to a group so
> that we will know ASAP that something has happened.
>
> We use Transnexus in ONE of our facilities, but have legacy
> Netrakes in another. So we had to improvise.
>
> --
> =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
> J. Oquendo
> SGFA, SGFE, C|EH, CNDA, CHFI, OSCP, CPT, RWSP, GREM
>
> "Where ignorance is our master, there is no possibility of
> real peace" - Dalai Lama
>
> 42B0 5A53 6505 6638 44BB 3943 2BF7 D83F 210A 95AF
> http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x2BF7D83F210A95AF
> _______________________________________________
> VoiceOps mailing list
> [email protected]
> https://puck.nether.net/mailman/listinfo/voiceops
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<https://puck.nether.net/pipermail/voiceops/attachments/20130514/bcbbcc8b/attachment-0001.html>
------------------------------
Message: 2
Date: Tue, 14 May 2013 20:26:17 +0100
From: Simon Woodhead <[email protected]>
To: PE <[email protected]>
Cc: "[email protected]" <[email protected]>, "J. Oquendo"
<[email protected]>
Subject: Re: [VoiceOps] Interesting lead on international fraud
Message-ID:
<CAEp9JpAqQV11JN=sug_dcwt2pydzx9t57dm1vqimn66vuk_...@mail.gmail.com>
Content-Type: text/plain; charset="iso-8859-1"
Hi folks,
Useful feed that J. We publish similar in text file format:
http://mirror.simwood.com/honeypot
Simon
On 14 May 2013 20:07, PE <[email protected]> wrote:
> J,
>
> Is there an easy way to get the data from the twitter feed in a list
> format? This is great info. Thanks
>
>
> On Mon, May 13, 2013 at 12:57 PM, J. Oquendo <[email protected]>wrote:
>
>> A while back, when I started streaming to Twitter
>> (https://twitter.com/efensive) I had wanted to post the
>> numbers being dialed by fraudsters so that others would
>> be able to see these numbers and block them. Difficult
>> to get a list of numbers called, in fact, I would hope
>> that no one would have a number to add, as that would mean
>> one was compromised. However, if anyone wants to share
>> #'s being dialed fraudulently, I will add them to the
>> Twitter stream and perhaps make an all inclusive list
>> freely available.
>>
>> I added a few here and there, but I have also taken a lot
>> of proactive steps to reduce fraud. (Hello Jim and others
>> at Transnexus ;)) This is what I (we were I work) have
>> done.
>>
>> I parse the logs on my SBCs on an hourly basis. The log
>> parsing does two distinct things, 1) tallies the volume
>> of calls, and two dissects which calls are going to
>> high rated areas.
>>
>> STEP 1)
>> Download SBC logs
>> Perform a count against client trunks
>> Compare that count against a 90 day baseline
>> Report anomalies
>>
>> This allows me to see when a trunk is generating a lot of
>> calls. Period
>>
>> STEP 2)
>> Parse through SBC logs
>> Parse out DESTINATION (country code area code)
>> Check DESTINATIONS against a rate deck where price exceeds
>> N amount per minute (I have this set to about .21 (USD) per
>> minute. Report which trunk is making that call.
>> The reporting is automated and if anomalies are detected,
>> emails are sent and ALSO a call is generated to a group so
>> that we will know ASAP that something has happened.
>>
>> We use Transnexus in ONE of our facilities, but have legacy
>> Netrakes in another. So we had to improvise.
>>
>> --
>> =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
>> J. Oquendo
>> SGFA, SGFE, C|EH, CNDA, CHFI, OSCP, CPT, RWSP, GREM
>>
>> "Where ignorance is our master, there is no possibility of
>> real peace" - Dalai Lama
>>
>> 42B0 5A53 6505 6638 44BB 3943 2BF7 D83F 210A 95AF
>> http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x2BF7D83F210A95AF
>> _______________________________________________
>> VoiceOps mailing list
>> [email protected]
>> https://puck.nether.net/mailman/listinfo/voiceops
>>
>
>
> _______________________________________________
> VoiceOps mailing list
> [email protected]
> https://puck.nether.net/mailman/listinfo/voiceops
>
>
--
***** Email confidentiality notice *****
This message is private and confidential. If you have received this message in
error, please notify us and remove it from your system.
Simwood eSMS Limited is a limited company registered in England and Wales.
Registered number: 03379831. Registered office: c/o HW Chartered Accountants,
Keepers Lane, The Wergs, Wolverhampton, WV6 8UA. Trading address: Falcon Drive,
Cardiff Bay, Cardiff, CF10 4RU.
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<https://puck.nether.net/pipermail/voiceops/attachments/20130514/9d730f97/attachment-0001.html>
------------------------------
Message: 3
Date: Wed, 15 May 2013 06:55:01 -0700
From: Sanjay Srinivasan <[email protected]>
To: [email protected]
Subject: [VoiceOps] Looking for a SIP 48 port FXS gateway
Message-ID: <[email protected]>
Content-Type: text/plain; charset="windows-1252"
Anybody have recommendation for a 48 port FXS gateway (SIP)? I have been
using the AudioCodes series but don?t believe they have a 48 port version.
*SANJAY SRINIVASAN* | *CHIEF TECHNOLOGY OFFICER*
Anywhere (480) 385-7062 | Fax (480) 385-7007 | [email protected]
Telesphere | 9237 E. Via de Ventura, Ste 250 | Scottsdale, AZ
85258<http://maps.google.com/maps?f=q&q=9237%20E.%20Via%20de%20Ventura,%20Ste%20250%2CScottsdale%2CAZ%2C85258>
** <[email protected]>
[image: www.telesphere.com] <http://www.telesphere.com/>
[image: Facebook] <http://www.facebook.com/telesphere>
[image: Twitter] <http://www.twitter.com/telesphere>
[image: LinkedIn] <http://www.linkedin.com/companies/telesphere>
[image: YouTube] <http://www.youtube.com/user/telesphere>
This email and any files transmitted with it are confidential and intended
solely for the use of the individual or entity to whom they are addressed.
If you have received this email in error please notify the system manager.
Although the company has taken reasonable precautions to ensure no viruses
are present in this email, the company cannot accept responsibility for any
loss or damage arising from the use of this email or attachments. Any views
or opinions presented in this email are solely those of the author and do
not necessarily represent those of Telesphere.
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<https://puck.nether.net/pipermail/voiceops/attachments/20130515/d5a41098/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.jpg
Type: image/jpeg
Size: 14641 bytes
Desc: not available
URL:
<https://puck.nether.net/pipermail/voiceops/attachments/20130515/d5a41098/attachment.jpg>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image002.jpg
Type: image/jpeg
Size: 17174 bytes
Desc: not available
URL:
<https://puck.nether.net/pipermail/voiceops/attachments/20130515/d5a41098/attachment-0001.jpg>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image003.png
Type: image/png
Size: 2475 bytes
Desc: not available
URL:
<https://puck.nether.net/pipermail/voiceops/attachments/20130515/d5a41098/attachment.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image004.png
Type: image/png
Size: 2465 bytes
Desc: not available
URL:
<https://puck.nether.net/pipermail/voiceops/attachments/20130515/d5a41098/attachment-0001.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image005.png
Type: image/png
Size: 2424 bytes
Desc: not available
URL:
<https://puck.nether.net/pipermail/voiceops/attachments/20130515/d5a41098/attachment-0002.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image006.png
Type: image/png
Size: 2432 bytes
Desc: not available
URL:
<https://puck.nether.net/pipermail/voiceops/attachments/20130515/d5a41098/attachment-0003.png>
------------------------------
Subject: Digest Footer
_______________________________________________
VoiceOps mailing list
[email protected]
https://puck.nether.net/mailman/listinfo/voiceops
------------------------------
End of VoiceOps Digest, Vol 47, Issue 9
***************************************
