Send VoiceOps mailing list submissions to
[email protected]
To subscribe or unsubscribe via the World Wide Web, visit
https://puck.nether.net/mailman/listinfo/voiceops
or, via email, send a message with subject or body 'help' to
[email protected]
You can reach the person managing the list at
[email protected]
When replying, please edit your Subject line so it is more specific
than "Re: Contents of VoiceOps digest..."
Today's Topics:
1. Re: Strange inbound Calls (Nick Olsen)
2. Re: Strange inbound Calls (Nick Olsen)
3. Re: Strange inbound Calls (Nick Olsen)
4. Re: Strange inbound Calls (Hiers, David)
----------------------------------------------------------------------
Message: 1
Date: Wed, 2 Oct 2013 14:43:50 -0400
From: "Nick Olsen" <[email protected]>
To: "Matt Yaklin" <[email protected]>
Cc: [email protected]
Subject: Re: [VoiceOps] Strange inbound Calls
Message-ID: <[email protected]>
Content-Type: text/plain; charset="us-ascii"
I did call a hand full of them to see if I got anywhere, But they either
didn't route anywhere and sat dead till I hung up or came back as "can not
be completed as dialed". I too saw that they were all Level3 numbers by the
current LRN. Granted, Level3 sells service to tons of Over the top VOIP
places like Vitelity..etc which allow you to provision a number via a web
portal in seconds. That being said, There is no reason to assume the
calling party actually has this TN and isn't just filling the Caller ID
with random L3 numbers.
I too get a immediate hangup when calling 2564002365.
Nick Olsen
Network Operations (855) FLSPEED x106
----------------------------------------
From: "Matt Yaklin" <[email protected]>
Sent: Wednesday, October 02, 2013 2:37 PM
To: "Nick Olsen" <[email protected]>
Cc: [email protected]
Subject: Re: [VoiceOps] Strange inbound Calls
I randomly choose a few numbers to check our CDR data and
I see that 2564002365 called a customer of ours normal TN
and one customer's toll free number.
> 9/27/2013 20:12:43,"ALBERTVILLE AL"
<2564002365>,2564002365,8553577333,60,60,ANSWERED,Incoming
When I call the number 2564002365 it answers and immediately hangs up on
me. It reminds me of an asterisk like thing where I have made a mistake in
my config but this is intentional?
Randomly checking a few numbers they seem to belong to Level3 if they have
not ported.
Call them up and complain? Maybe in some wierd bizzaro world they might
actually do something about it.
[email protected]
On Wed, 2 Oct 2013, Nick Olsen wrote:
> Hello Everyone,
> We've been seeing a lot of strange inbound calls to our toll free numbers
recently. The only thing they have in common is the caller ID text is
always a city and a state. And the the call duration is 60 seconds on the
dot..Every
> time.
>
> Considering they are calling toll free numbers I assume this is some kind
of fraud attempt. IE. Calling tons of random Toll Free numbers so the
terminating carrier pays the originator..etc.
>
> Anyone else seeing this? Anything we can do to stop these? Here's what
our CDR looks like, These are just the calls to our Corp Toll free. But we
are seeing them toward customer toll free as well.
>
> 9/1/2013 13:39:02,"CARLSBAD CA"
<4423334358>,4423334358,8553577333,60,60,ANSWERED,Incoming
> 9/1/2013 16:20:30,"WEST BLOCTON AL"
<2056368142>,2056368142,8553577333,60,60,ANSWERED,Incoming
> 9/6/2013 07:18:18,"HUNTNGTN PRK CA"
<3232825216>,3232825216,8553577333,60,60,ANSWERED,Incoming
> 9/7/2013 11:54:09,"FORT SMITH AR"
<4796682810>,4796682810,8553577333,60,60,ANSWERED,Incoming
> 9/7/2013 23:14:35,"TUCSON AZ"
<5203326555>,5203326555,8553577333,60,60,ANSWERED,Incoming
> 9/9/2013 19:06:00,"WARRIOR AL"
<2052891452>,2052891452,8553577333,60,60,ANSWERED,Incoming
> 9/9/2013 20:23:49,"SAN RAFAEL CA"
<4155240522>,4155240522,8553577333,60,60,ANSWERED,Incoming
> 9/25/2013 17:01:09,"FRESNO CA"
<5595499612>,5595499612,8553577333,60,60,ANSWERED,Incoming
> 9/25/2013 22:41:29,"MOBILE AL"
<2515454388>,2515454388,8553577333,60,60,ANSWERED,Incoming
> 9/26/2013 00:01:35,"PINSON AL"
<2056834147>,2056834147,8553577333,60,60,ANSWERED,Incoming
> 9/26/2013 03:13:53,"PHENIX CITY AL"
<3344685267>,3344685267,8553577333,60,60,ANSWERED,Incoming
> 9/26/2013 22:38:21,"GUNTERSVILLE AL"
<2562934038>,2562934038,8553577333,60,60,ANSWERED,Incoming
> 9/27/2013 11:29:58,"MIAMI AZ"
<9284731203>,9284731203,8553577333,60,60,ANSWERED,Incoming
> 9/27/2013 20:12:43,"ALBERTVILLE AL"
<2564002365>,2564002365,8553577333,60,60,ANSWERED,Incoming
> 9/30/2013 02:07:15,"HUNTSVILLE AL"
<2562174709>,2562174709,8553577333,60,60,ANSWERED,Incoming
> 9/30/2013 06:55:16,"CHASE CITY VA"
<4345334010>,4345334010,8553577333,60,60,ANSWERED,Incoming
> 10/2/2013 02:23:12,"LOS ANGELES CA"
<2134555680>,2134555680,8553577333,60,60,ANSWERED,Incoming
>
> Nick Olsen
> Network Operations (855) FLSPEED x106
>
> [emaillogo.jpg]
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<https://puck.nether.net/pipermail/voiceops/attachments/20131002/c9ff8daa/attachment-0001.html>
------------------------------
Message: 2
Date: Wed, 2 Oct 2013 14:46:09 -0400
From: "Nick Olsen" <[email protected]>
To: "Erik Flournoy" <[email protected]>
Cc: "[email protected]" <[email protected]>
Subject: Re: [VoiceOps] Strange inbound Calls
Message-ID: <[email protected]>
Content-Type: text/plain; charset="us-ascii"
Indeed, The problem is most of these numbers will hit one or two customers
and then never appear again. So, blocking the calling numbers isn't going
to get me anywhere since chances are it's different next time.
Nick Olsen
Network Operations (855) FLSPEED x106
----------------------------------------
From: "Erik Flournoy" <[email protected]>
Sent: Wednesday, October 02, 2013 2:42 PM
To: "Matt Yaklin" <[email protected]>
Cc: "Nick Olsen" <[email protected]>, "[email protected]"
<[email protected]>
Subject: Re: [VoiceOps] Strange inbound Calls
You could block the numbers at sms800 level or block them at your switch
translations.
Erik
On Wed, Oct 2, 2013 at 8:36 AM, Matt Yaklin <[email protected]> wrote:
I randomly choose a few numbers to check our CDR data and
I see that 2564002365 called a customer of ours normal TN
and one customer's toll free number.
9/27/2013 20:12:43,"ALBERTVILLE AL"
<2564002365>,2564002365,8553577333,60,60,ANSWERED,Incoming
When I call the number 2564002365 it answers and immediately hangs up on
me. It reminds me of an asterisk like thing where I have made a mistake in
my config but this is intentional?
Randomly checking a few numbers they seem to belong to Level3 if they have
not ported.
Call them up and complain? Maybe in some wierd bizzaro world they might
actually do something about it.
[email protected]
On Wed, 2 Oct 2013, Nick Olsen wrote:
Hello Everyone,
We've been seeing a lot of strange inbound calls to our toll free numbers
recently. The only thing they have in common is the caller ID text is
always a city and a state. And the the call duration is 60 seconds on the
dot..Every
time.
Considering they are calling toll free numbers I assume this is some kind
of fraud attempt. IE. Calling tons of random Toll Free numbers so the
terminating carrier pays the originator..etc.
Anyone else seeing this? Anything we can do to stop these? Here's what our
CDR looks like, These are just the calls to our Corp Toll free. But we are
seeing them toward customer toll free as well.
9/1/2013 13:39:02,"CARLSBAD CA"
<4423334358>,4423334358,8553577333,60,60,ANSWERED,Incoming
9/1/2013 16:20:30,"WEST BLOCTON AL"
<2056368142>,2056368142,8553577333,60,60,ANSWERED,Incoming
9/6/2013 07:18:18,"HUNTNGTN PRK CA"
<3232825216>,3232825216,8553577333,60,60,ANSWERED,Incoming
9/7/2013 11:54:09,"FORT SMITH AR"
<4796682810>,4796682810,8553577333,60,60,ANSWERED,Incoming
9/7/2013 23:14:35,"TUCSON AZ"
<5203326555>,5203326555,8553577333,60,60,ANSWERED,Incoming
9/9/2013 19:06:00,"WARRIOR AL"
<2052891452>,2052891452,8553577333,60,60,ANSWERED,Incoming
9/9/2013 20:23:49,"SAN RAFAEL CA"
<4155240522>,4155240522,8553577333,60,60,ANSWERED,Incoming
9/25/2013 17:01:09,"FRESNO CA"
<5595499612>,5595499612,8553577333,60,60,ANSWERED,Incoming
9/25/2013 22:41:29,"MOBILE AL"
<2515454388>,2515454388,8553577333,60,60,ANSWERED,Incoming
9/26/2013 00:01:35,"PINSON AL"
<2056834147>,2056834147,8553577333,60,60,ANSWERED,Incoming
9/26/2013 03:13:53,"PHENIX CITY AL"
<3344685267>,3344685267,8553577333,60,60,ANSWERED,Incoming
9/26/2013 22:38:21,"GUNTERSVILLE AL"
<2562934038>,2562934038,8553577333,60,60,ANSWERED,Incoming
9/27/2013 11:29:58,"MIAMI AZ"
<9284731203>,9284731203,8553577333,60,60,ANSWERED,Incoming
9/27/2013 20:12:43,"ALBERTVILLE AL"
<2564002365>,2564002365,8553577333,60,60,ANSWERED,Incoming
9/30/2013 02:07:15,"HUNTSVILLE AL"
<2562174709>,2562174709,8553577333,60,60,ANSWERED,Incoming
9/30/2013 06:55:16,"CHASE CITY VA"
<4345334010>,4345334010,8553577333,60,60,ANSWERED,Incoming
10/2/2013 02:23:12,"LOS ANGELES CA"
<2134555680>,2134555680,8553577333,60,60,ANSWERED,Incoming
Nick Olsen
Network Operations (855) FLSPEED x106
[emaillogo.jpg]
_______________________________________________
VoiceOps mailing list
[email protected]
https://puck.nether.net/mailman/listinfo/voiceops
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<https://puck.nether.net/pipermail/voiceops/attachments/20131002/bbf576f5/attachment-0001.html>
------------------------------
Message: 3
Date: Wed, 2 Oct 2013 14:53:51 -0400
From: "Nick Olsen" <[email protected]>
To: "Jay Hennigan" <[email protected]>
Cc: [email protected]
Subject: Re: [VoiceOps] Strange inbound Calls
Message-ID: <[email protected]>
Content-Type: text/plain; charset="us-ascii"
If the call is answered by a human, They hear nothing on the other side. I
will ask our receptionist to allow the call to continue for a minute or so
and see if it hangs up at the 60 second mark.
Timing our own IVR. It takes exactly 60 seconds, If you press nothing to
get all the way 1 second in to voicemail. As these calls always appear
leaving 1 second voicemails.
Nick Olsen
Network Operations (855) FLSPEED x106
----------------------------------------
From: "Jay Hennigan" <[email protected]>
Sent: Wednesday, October 02, 2013 2:25 PM
To: [email protected]
Subject: Re: [VoiceOps] Strange inbound Calls
On 10/2/13 10:13 AM, Nick Olsen wrote:
> Hello Everyone,
>
> We've been seeing a lot of strange inbound calls to our toll free
> numbers recently. The only thing they have in common is the caller ID
> text is always a city and a state. And the the call duration is 60
> seconds on the dot..Every time.
Are the calls answered by a human? If so, what do they hear? If not
and it's an IVR, if you call and say nothing does the call drop in 60
seconds?
City and state are not uncommon for CNAM. Many CNAM providers will put
the city and state of the rate center for the NPA-NXX if caller name
isn't available.
--
Jay Hennigan - CCIE #7880 - Network Engineering - [email protected]
Impulse Internet Service - http://www.impulse.net/
Your local telephone and internet company - 805 884-6323 - WB6RDV
_______________________________________________
VoiceOps mailing list
[email protected]
https://puck.nether.net/mailman/listinfo/voiceops
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<https://puck.nether.net/pipermail/voiceops/attachments/20131002/31167547/attachment-0001.html>
------------------------------
Message: 4
Date: Wed, 2 Oct 2013 18:53:46 +0000
From: "Hiers, David" <[email protected]>
To: "[email protected]" <[email protected]>, Matt Yaklin <[email protected]>
Cc: "[email protected]" <[email protected]>
Subject: Re: [VoiceOps] Strange inbound Calls
Message-ID:
<[email protected]>
Content-Type: text/plain; charset="us-ascii"
Many carriers have "short call" language in their ICAs by which calls under a
certain length are seen as signs of an auto-dialer, thus subject to different
rules. Your upstream carrier might have their own reasons to pursue this
further.
David
From: VoiceOps [mailto:[email protected]] On Behalf Of Nick Olsen
Sent: Wednesday, October 02, 2013 11:44
To: Matt Yaklin
Cc: [email protected]
Subject: Re: [VoiceOps] Strange inbound Calls
I did call a hand full of them to see if I got anywhere, But they either didn't
route anywhere and sat dead till I hung up or came back as "can not be
completed as dialed". I too saw that they were all Level3 numbers by the
current LRN. Granted, Level3 sells service to tons of Over the top VOIP places
like Vitelity..etc which allow you to provision a number via a web portal in
seconds. That being said, There is no reason to assume the calling party
actually has this TN and isn't just filling the Caller ID with random L3
numbers.
I too get a immediate hangup when calling 2564002365.
Nick Olsen
Network Operations
(855) FLSPEED x106
[http://www.flhsi.com/files/emaillogo.jpg]
________________________________
From: "Matt Yaklin" <[email protected]<mailto:[email protected]>>
Sent: Wednesday, October 02, 2013 2:37 PM
To: "Nick Olsen" <[email protected]<mailto:[email protected]>>
Cc: [email protected]<mailto:[email protected]>
Subject: Re: [VoiceOps] Strange inbound Calls
I randomly choose a few numbers to check our CDR data and
I see that 2564002365 called a customer of ours normal TN
and one customer's toll free number.
> 9/27/2013 20:12:43,"ALBERTVILLE AL"
> <2564002365>,2564002365,8553577333,60,60,ANSWERED,Incoming
When I call the number 2564002365 it answers and immediately hangs up on
me. It reminds me of an asterisk like thing where I have made a mistake in
my config but this is intentional?
Randomly checking a few numbers they seem to belong to Level3 if they have
not ported.
Call them up and complain? Maybe in some wierd bizzaro world they might
actually do something about it.
[email protected]<mailto:[email protected]>
On Wed, 2 Oct 2013, Nick Olsen wrote:
> Hello Everyone,
> We've been seeing a lot of strange inbound calls to our toll free numbers
> recently. The only thing they have in common is the caller ID text is always
> a city and a state. And the the call duration is 60 seconds on the dot..Every
> time.
>
> Considering they are calling toll free numbers I assume this is some kind of
> fraud attempt. IE. Calling tons of random Toll Free numbers so the
> terminating carrier pays the originator..etc.
>
> Anyone else seeing this? Anything we can do to stop these? Here's what our
> CDR looks like, These are just the calls to our Corp Toll free. But we are
> seeing them toward customer toll free as well.
>
> 9/1/2013 13:39:02,"CARLSBAD CA"
> <4423334358>,4423334358,8553577333,60,60,ANSWERED,Incoming
> 9/1/2013 16:20:30,"WEST BLOCTON AL"
> <2056368142>,2056368142,8553577333,60,60,ANSWERED,Incoming
> 9/6/2013 07:18:18,"HUNTNGTN PRK CA"
> <3232825216>,3232825216,8553577333,60,60,ANSWERED,Incoming
> 9/7/2013 11:54:09,"FORT SMITH AR"
> <4796682810>,4796682810,8553577333,60,60,ANSWERED,Incoming
> 9/7/2013 23:14:35,"TUCSON AZ"
> <5203326555>,5203326555,8553577333,60,60,ANSWERED,Incoming
> 9/9/2013 19:06:00,"WARRIOR AL"
> <2052891452>,2052891452,8553577333,60,60,ANSWERED,Incoming
> 9/9/2013 20:23:49,"SAN RAFAEL CA"
> <4155240522>,4155240522,8553577333,60,60,ANSWERED,Incoming
> 9/25/2013 17:01:09,"FRESNO CA"
> <5595499612>,5595499612,8553577333,60,60,ANSWERED,Incoming
> 9/25/2013 22:41:29,"MOBILE AL"
> <2515454388>,2515454388,8553577333,60,60,ANSWERED,Incoming
> 9/26/2013 00:01:35,"PINSON AL"
> <2056834147>,2056834147,8553577333,60,60,ANSWERED,Incoming
> 9/26/2013 03:13:53,"PHENIX CITY AL"
> <3344685267>,3344685267,8553577333,60,60,ANSWERED,Incoming
> 9/26/2013 22:38:21,"GUNTERSVILLE AL"
> <2562934038>,2562934038,8553577333,60,60,ANSWERED,Incoming
> 9/27/2013 11:29:58,"MIAMI AZ"
> <9284731203>,9284731203,8553577333,60,60,ANSWERED,Incoming
> 9/27/2013 20:12:43,"ALBERTVILLE AL"
> <2564002365>,2564002365,8553577333,60,60,ANSWERED,Incoming
> 9/30/2013 02:07:15,"HUNTSVILLE AL"
> <2562174709>,2562174709,8553577333,60,60,ANSWERED,Incoming
> 9/30/2013 06:55:16,"CHASE CITY VA"
> <4345334010>,4345334010,8553577333,60,60,ANSWERED,Incoming
> 10/2/2013 02:23:12,"LOS ANGELES CA"
> <2134555680>,2134555680,8553577333,60,60,ANSWERED,Incoming
>
> Nick Olsen
> Network Operations (855) FLSPEED x106
>
> [emaillogo.jpg]
>
>
This message and any attachments are intended only for the use of the addressee
and may contain information that is privileged and confidential. If the reader
of the message is not the intended recipient or an authorized representative of
the intended recipient, you are hereby notified that any dissemination of this
communication is strictly prohibited. If you have received this communication
in error, please notify us immediately by e-mail and delete the message and any
attachments from your system.
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<https://puck.nether.net/pipermail/voiceops/attachments/20131002/d47fadfb/attachment.html>
------------------------------
Subject: Digest Footer
_______________________________________________
VoiceOps mailing list
[email protected]
https://puck.nether.net/mailman/listinfo/voiceops
------------------------------
End of VoiceOps Digest, Vol 52, Issue 2
***************************************
