<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 14 (filtered medium)"><!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"Balloon Text Char";
margin:0in;
margin-bottom:.0001pt;
font-size:8.0pt;
font-family:"Tahoma","sans-serif";}
span.BalloonTextChar
{mso-style-name:"Balloon Text Char";
mso-style-priority:99;
mso-style-link:"Balloon Text";
font-family:"Tahoma","sans-serif";}
span.EmailStyle19
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.EmailStyle20
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link=blue vlink=purple><div class=WordSection1><p class=MsoNormal><span style='color:#1F497D'>TransNexus offers Fraud Detection software that analyzes CDRs to identify traffic pumping by source IP address and called dial code. When suspected fraud is detected an alert can be sent via e-mail or SNMP. Blocking calls from the source device to the dial code in question is also possible. <a href="http://www.transnexus.com/index.php/fraud-detection">http://www.transnexus.com/index.php/fraud-detection</a><o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>This solution works well with SBCs like Acme Packet that stream RADIUS accounting records in real time.<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>Jim Dalton<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>TransNexus<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><div><div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in'><p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span></b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'> voiceops-bounces@voiceops.org [mailto:voiceops-bounces@voiceops.org] <b>On Behalf Of </b>Zak Rupas<br><b>Sent:</b> Friday, December 30, 2011 11:37 AM<br><b>To:</b> voiceops@voiceops.org<br><b>Subject:</b> [VoiceOps] Broadsoft SIP Trunks and ILD Fraud<o:p></o:p></span></p></div></div><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Good Morning Voice OPS<o:p></o:p></p><p class=MsoNormal> <o:p></o:p></p><p class=MsoNormal>Is anyone else experiencing anything like this? If so please share what you have done / or will to make it stop<o:p></o:p></p><p class=MsoNormal> <o:p></o:p></p><p class=MsoNormal>We have a series of smaller SIP trunk customers using Broadsoft trunk groups. By design the trunk groups have a concurrent call limitation based off the customer’s order. These smaller SIP trunks groups when compromised are able to run up HUGE fraud bills even tho they only have 5 or 6 SIP trunks. Needing to know if anyone else is seeing this that has Broadsoft and what was done to protect yourselves?<o:p></o:p></p><p class=MsoNormal> <o:p></o:p></p><p class=MsoNormal>Otherwise Happy NYE <span style='font-family:Wingdings'>J</span><o:p></o:p></p><p class=MsoNormal> <o:p></o:p></p><p class=MsoNormal><span style='font-size:17.5pt;font-family:"Arial","sans-serif"'>Zak Rupas</span><br><span style='font-size:9.0pt;font-family:"Arial","sans-serif"'>VoIP Engineer<br><br><b>SimpleSignal</b><br>3600 S Yosemite Suite 150</span><o:p></o:p></p><p class=MsoNormal><span style='font-size:9.0pt;font-family:"Arial","sans-serif"'>Denver, CO 80237<br>One Number Rings All My Phones: 303-242-8606</span><o:p></o:p></p><p class=MsoNormal><img border=0 width=252 height=91 id="Picture_x0020_1" src="cid:image001.png@01CCCA38.2F990AC0"><o:p></o:p></p><p class=MsoNormal><span style='font-size:12.0pt;font-family:"Times New Roman","serif"'><a href="http://www.simplesignal.com/">SimpleSignal.com</a> | <a href="http://www.simplesignal.com/blog">Blog</a> | <a href="http://www.facebook.com/SimpleSignal?ref=ts">Facebook</a> | <a href="http://twitter.com/simplesignal">Twitter</a></span><o:p></o:p></p><p class=MsoNormal> <o:p></o:p></p></div></body></html>