<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:x="urn:schemas-microsoft-com:office:excel" xmlns:dt="uuid:C2F41010-65B3-11d1-A29F-00AA00C14882" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 14 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"Balloon Text Char";
margin:0in;
margin-bottom:.0001pt;
font-size:8.0pt;
font-family:"Tahoma","sans-serif";}
span.EmailStyle17
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.BalloonTextChar
{mso-style-name:"Balloon Text Char";
mso-style-priority:99;
mso-style-link:"Balloon Text";
font-family:"Tahoma","sans-serif";}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri","sans-serif";}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Many carriers have "short call" language in their ICAs by which calls under a certain length are seen as signs of an auto-dialer, thus subject to different
rules. Your upstream carrier might have their own reasons to pursue this further.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">David<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">From:</span></b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif""> VoiceOps [mailto:voiceops-bounces@voiceops.org]
<b>On Behalf Of </b>Nick Olsen<br>
<b>Sent:</b> Wednesday, October 02, 2013 11:44<br>
<b>To:</b> Matt Yaklin<br>
<b>Cc:</b> voiceops@voiceops.org<br>
<b>Subject:</b> Re: [VoiceOps] Strange inbound Calls<o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">I did call a hand full of them to see if I got anywhere, But they either didn't route anywhere and sat dead till I hung up or came back as "can not be completed as dialed".
I too saw that they were all Level3 numbers by the current LRN. Granted, Level3 sells service to tons of Over the top VOIP places like Vitelity..etc which allow you to provision a number via a web portal in seconds. That being said, There is no reason to assume
the calling party actually has this TN and isn't just filling the Caller ID with random L3 numbers.<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif""><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">I too get a immediate hangup when calling 2564002365.<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif""><o:p> </o:p></span></p>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">Nick Olsen<br>
</span><span style="font-size:10.0pt;font-family:"Arial","sans-serif"">Network Operations</span><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">
<o:p></o:p></span></p>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">(855) FLSPEED x106<br>
<br>
<img width="168" height="56" id="_x0000_i1025" src="http://www.flhsi.com/files/emaillogo.jpg"><o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal" style="margin-bottom:12.0pt"><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif""><o:p> </o:p></span></p>
<div class="MsoNormal" align="center" style="text-align:center"><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">
<hr size="2" width="100%" align="center">
</span></div>
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">From</span></b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">: "Matt Yaklin" <<a href="mailto:myaklin@g4.net">myaklin@g4.net</a>><br>
<b>Sent</b>: Wednesday, October 02, 2013 2:37 PM<br>
<b>To</b>: "Nick Olsen" <<a href="mailto:nick@flhsi.com">nick@flhsi.com</a>><br>
<b>Cc</b>: <a href="mailto:voiceops@voiceops.org">voiceops@voiceops.org</a><br>
<b>Subject</b>: Re: [VoiceOps] Strange inbound Calls<br>
<br>
<br>
I randomly choose a few numbers to check our CDR data and<br>
I see that 2564002365 called a customer of ours normal TN<br>
and one customer's toll free number.<br>
<br>
> 9/27/2013 20:12:43,"ALBERTVILLE AL" <2564002365>,2564002365,8553577333,60,60,ANSWERED,Incoming<br>
<br>
When I call the number 2564002365 it answers and immediately hangs up on<br>
me. It reminds me of an asterisk like thing where I have made a mistake in<br>
my config but this is intentional?<br>
<br>
Randomly checking a few numbers they seem to belong to Level3 if they have<br>
not ported.<br>
<br>
Call them up and complain? Maybe in some wierd bizzaro world they might<br>
actually do something about it.<br>
<br>
<a href="mailto:matt@g4.net">matt@g4.net</a><br>
<br>
On Wed, 2 Oct 2013, Nick Olsen wrote:<br>
<br>
> Hello Everyone,<br>
> We've been seeing a lot of strange inbound calls to our toll free numbers recently. The only thing they have in common is the caller ID text is always a city and a state. And the the call duration is 60 seconds on the dot..Every<br>
> time.<br>
> <br>
> Considering they are calling toll free numbers I assume this is some kind of fraud attempt. IE. Calling tons of random Toll Free numbers so the terminating carrier pays the originator..etc.<br>
> <br>
> Anyone else seeing this? Anything we can do to stop these? Here's what our CDR looks like, These are just the calls to our Corp Toll free. But we are seeing them toward customer toll free as well.<br>
> <br>
> 9/1/2013 13:39:02,"CARLSBAD CA" <4423334358>,4423334358,8553577333,60,60,ANSWERED,Incoming<br>
> 9/1/2013 16:20:30,"WEST BLOCTON AL" <2056368142>,2056368142,8553577333,60,60,ANSWERED,Incoming<br>
> 9/6/2013 07:18:18,"HUNTNGTN PRK CA" <3232825216>,3232825216,8553577333,60,60,ANSWERED,Incoming<br>
> 9/7/2013 11:54:09,"FORT SMITH AR" <4796682810>,4796682810,8553577333,60,60,ANSWERED,Incoming<br>
> 9/7/2013 23:14:35,"TUCSON AZ" <5203326555>,5203326555,8553577333,60,60,ANSWERED,Incoming<br>
> 9/9/2013 19:06:00,"WARRIOR AL" <2052891452>,2052891452,8553577333,60,60,ANSWERED,Incoming<br>
> 9/9/2013 20:23:49,"SAN RAFAEL CA" <4155240522>,4155240522,8553577333,60,60,ANSWERED,Incoming<br>
> 9/25/2013 17:01:09,"FRESNO CA" <5595499612>,5595499612,8553577333,60,60,ANSWERED,Incoming<br>
> 9/25/2013 22:41:29,"MOBILE AL" <2515454388>,2515454388,8553577333,60,60,ANSWERED,Incoming<br>
> 9/26/2013 00:01:35,"PINSON AL" <2056834147>,2056834147,8553577333,60,60,ANSWERED,Incoming<br>
> 9/26/2013 03:13:53,"PHENIX CITY AL" <3344685267>,3344685267,8553577333,60,60,ANSWERED,Incoming<br>
> 9/26/2013 22:38:21,"GUNTERSVILLE AL" <2562934038>,2562934038,8553577333,60,60,ANSWERED,Incoming<br>
> 9/27/2013 11:29:58,"MIAMI AZ" <9284731203>,9284731203,8553577333,60,60,ANSWERED,Incoming<br>
> 9/27/2013 20:12:43,"ALBERTVILLE AL" <2564002365>,2564002365,8553577333,60,60,ANSWERED,Incoming<br>
> 9/30/2013 02:07:15,"HUNTSVILLE AL" <2562174709>,2562174709,8553577333,60,60,ANSWERED,Incoming<br>
> 9/30/2013 06:55:16,"CHASE CITY VA" <4345334010>,4345334010,8553577333,60,60,ANSWERED,Incoming<br>
> 10/2/2013 02:23:12,"LOS ANGELES CA" <2134555680>,2134555680,8553577333,60,60,ANSWERED,Incoming<br>
> <br>
> Nick Olsen<br>
> Network Operations (855) FLSPEED x106<br>
> <br>
> [emaillogo.jpg]<br>
> <br>
><o:p></o:p></span></p>
</div>
</div>
<DIV><P><HR>
<H5><FONT color=grey>This message and any attachments are intended only for the use of the addressee and may contain information that is privileged and confidential. If the reader of the message is not the intended recipient or an authorized representative of the intended recipient, you are hereby notified that any dissemination of this communication is strictly prohibited. If you have received this communication in error, please notify us immediately by e-mail and delete the message and any attachments from your system. </FONT></H5>
</P></DIV>
</body>
</html>