[VoiceOps] Switches being flooded by unwanted calls

[Ujjval Karihaloo]

Inbound traffic is normally reconnaissance attempts to validate DIDs/Users on your system; which the hackers will then user to make outbound calls and perpetrate fraud.

I would lock down International Dialing on your system the best you can do.

Ujjval Karihaloo
VP Voice Engineering
IP Phone: +13032428610
E-Fax: +17202391690

SimpleSignal Inc.
88 Inverness Circle East
Suite K105
Englewood, CO  80112



-----Original Message-----
From: voiceops-bounces at voiceops.org [mailto:voiceops-bounces at voiceops.org] On Behalf Of Hiers, David
Sent: Thursday, April 29, 2010 10:33 AM
To: cololiberty at comcast.net; VoiceOps at voiceops.org
Subject: Re: [VoiceOps] Switches being flooded by unwanted calls

This is what voiceops lives for...



David Hiers

CCIE (R/S, V), CISSP
ADP Dealer Services
2525 SW 1st Ave.
Suite 300W
Portland, OR 97201
o: 503-205-4467
f: 503-402-3277


-----Original Message-----
From: voiceops-bounces at voiceops.org [mailto:voiceops-bounces at voiceops.org] On Behalf Of cololiberty at comcast.net
Sent: Wednesday, April 28, 2010 5:35 PM
To: VoiceOps at voiceops.org
Subject: [VoiceOps] Switches being flooded by unwanted calls

I have a question to pose.  If it's not appropriate, please let me know.

My switches are currently taking in a large amount of traffic from one particular number destine for multiple terminating numbers across my CLEC users.

We're having trouble tracking it down.  It's coming into us via SIP and SS7 and I was wondering if anyone else was seeing anything with it as well.  We have already confirmed a few other carriers seeing it as well.


Originating number is 3074591039.   



The originating introductory messages appear sculpted and carry no originating info.

Internet searches on this number brings up allot of people being bothered by this,  chances may be good others out here my have users affected as well.







This message and any attachments are intended only for the use of the addressee and may contain information that is privileged and confidential. If the reader of the message is not the intended recipient or an authorized representative of the intended recipient, you are hereby notified that any dissemination of this communication is strictly prohibited. If you have received this communication in error, please notify us immediately by e-mail and delete the message and any attachments from your system.

_______________________________________________
VoiceOps mailing list
VoiceOps at voiceops.org
https://puck.nether.net/mailman/listinfo/voiceops