[130583] in North American Network Operators' Group
RE: Scam telemarketers spoofing our NOC phone number for callerid
daemon@ATHENA.MIT.EDU (Matthew Huff)
Wed Oct 6 11:43:59 2010
From: Matthew Huff <mhuff@ox.com>
To: 'Jon Lewis' <jlewis@lewis.org>
Date: Wed, 6 Oct 2010 11:43:49 -0400
In-Reply-To: <Pine.LNX.4.61.1010061130460.5148@soloth.lewis.org>
Cc: "'\(nanog@nanog.org\)'" <nanog@nanog.org>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
--_002_483E6B0272B0284BA86D7596C40D29F9E2C7B80778PUREXCH07oxco_
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Digital all the way through. No sip. No outside access to the PBX subnet ei=
ther. Just a mininute ago our telco has verified that the calls are not org=
inating from out phone system. It's a simple caller id spoofing. People don=
't realize that caller id can be spoofed and therefore are 100% sure that w=
e are makign the harrasing calls.=20
Just wanted nanog to be aware of this since the only two numbers that this =
has happened with are the ones in our ARIN whois records.
----
Matthew Huff=A0=A0=A0=A0=A0=A0 | One Manhattanville Rd
OTA Management LLC | Purchase, NY 10577
http://www.ox.com | Phone: 914-460-4039
aim: matthewbhuff=A0 | Fax:=A0=A0 914-460-4139
> -----Original Message-----
> From: Jon Lewis [mailto:jlewis@lewis.org]
> Sent: Wednesday, October 06, 2010 11:34 AM
> To: Matthew Huff
> Cc: '(nanog@nanog.org)'
> Subject: RE: Scam telemarketers spoofing our NOC phone number for calleri=
d
>=20
> On Wed, 6 Oct 2010, Matthew Huff wrote:
>=20
> > Our system is PRI based, not sip.
>=20
> PRI for origination and termination...but what are your phones? Old
> school or VOIP/SIP? If your phone system supports SIP clients, it really
> ought to be IP restricted to only allow your phones access, or use
> something like fail2ban to stop the SIP scanners from eventually gaining
> access.
>=20
> ----------------------------------------------------------------------
> Jon Lewis, MCP :) | I route
> Senior Network Engineer | therefore you are
> Atlantic Net |
> _________ http://www.lewis.org/~jlewis/pgp for PGP public key_________
--_002_483E6B0272B0284BA86D7596C40D29F9E2C7B80778PUREXCH07oxco_
Content-Type: text/x-vcard; name="Matthew Huff.vcf"
Content-Description: Matthew Huff.vcf
Content-Disposition: attachment; filename="Matthew Huff.vcf"; size=1612;
creation-date="Wed, 06 Oct 2010 11:38:19 GMT";
modification-date="Wed, 06 Oct 2010 11:38:19 GMT"
Content-Transfer-Encoding: base64
QkVHSU46VkNBUkQNClZFUlNJT046Mi4xDQpYLU1TLVNJR05BVFVSRTpZRVMNCk46SHVmZjtNYXR0
aGV3DQpGTjpNYXR0aGV3IEh1ZmYNCk9SRzpPVEEgTWFuYWdlbWVudCBMTEMNClRJVExFOkRpcmVj
dG9yIG9mIE9wZXJhdGlvbnMNClRFTDtXT1JLO1ZPSUNFOig5MTQpIDQ2MC00MDM5DQpBRFI7V09S
SztQUkVGOjs7MSBNYW5oYXR0YW52aWxsZSBSb2FkO1B1cmNoYXNlO05ZOzEwNTc3O1VuaXRlZCBT
dGF0ZXMgb2YgQW1lcmljYQ0KTEFCRUw7V09SSztQUkVGO0VOQ09ESU5HPVFVT1RFRC1QUklOVEFC
TEU6MSBNYW5oYXR0YW52aWxsZSBSb2FkPTBEPTBBPQ0KUHVyY2hhc2UsIE5ZIDEwNTc3DQpYLU1T
LU9MLURFRkFVTFQtUE9TVEFMLUFERFJFU1M6Mg0KVVJMO1dPUks6aHR0cDovL3d3dy5veC5jb20N
CkVNQUlMO1BSRUY7SU5URVJORVQ6bWh1ZmZAb3guY29tDQpYLU1TLU9MLURFU0lHTjtDSEFSU0VU
PXV0Zi04OjxjYXJkIHhtbG5zPSJodHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS9v
dXRsb29rLzEyL2VsZWN0cm9uaWNidXNpbmVzc2NhcmRzIiB2ZXI9IjEuMCIgbGF5b3V0PSJsZWZ0
IiBiZ2NvbG9yPSJmZmZmZmYiPjxpbWcgeG1sbnM9IiIgYWxpZ249ImZpdCIgYXJlYT0iMTYiIHVz
ZT0iY2FyZHBpY3R1cmUiLz48ZmxkIHhtbG5zPSIiIHByb3A9Im5hbWUiIGFsaWduPSJsZWZ0IiBk
aXI9Imx0ciIgc3R5bGU9ImIiIGNvbG9yPSIwMDAwMDAiIHNpemU9IjEwIi8+PGZsZCB4bWxucz0i
IiBwcm9wPSJvcmciIGFsaWduPSJsZWZ0IiBkaXI9Imx0ciIgY29sb3I9IjAwMDAwMCIgc2l6ZT0i
OCIvPjxmbGQgeG1sbnM9IiIgcHJvcD0idGl0bGUiIGFsaWduPSJsZWZ0IiBkaXI9Imx0ciIgY29s
b3I9IjAwMDAwMCIgc2l6ZT0iOCIvPjxmbGQgeG1sbnM9IiIgcHJvcD0iYmxhbmsiIHNpemU9Ijgi
Lz48ZmxkIHhtbG5zPSIiIHByb3A9InRlbHdvcmsiIGFsaWduPSJsZWZ0IiBkaXI9Imx0ciIgY29s
b3I9IjAwMDAwMCIgc2l6ZT0iOCI+PGxhYmVsIGFsaWduPSJyaWdodCIgY29sb3I9IjYyNjI2MiI+
V29yazwvbGFiZWw+PC9mbGQ+PGZsZCB4bWxucz0iIiBwcm9wPSJlbWFpbCIgYWxpZ249ImxlZnQi
IGRpcj0ibHRyIiBjb2xvcj0iMDAwMDAwIiBzaXplPSI4Ii8+PGZsZCB4bWxucz0iIiBwcm9wPSJh
ZGRyd29yayIgYWxpZ249ImxlZnQiIGRpcj0ibHRyIiBjb2xvcj0iMDAwMDAwIiBzaXplPSI4Ii8+
PGZsZCB4bWxucz0iIiBwcm9wPSJ3ZWJ3b3JrIiBhbGlnbj0ibGVmdCIgZGlyPSJsdHIiIGNvbG9y
PSIwMDAwMDAiIHNpemU9IjgiLz48ZmxkIHhtbG5zPSIiIHByb3A9ImJsYW5rIiBzaXplPSI4Ii8+
PGZsZCB4bWxucz0iIiBwcm9wPSJibGFuayIgc2l6ZT0iOCIvPjxmbGQgeG1sbnM9IiIgcHJvcD0i
YmxhbmsiIHNpemU9IjgiLz48ZmxkIHhtbG5zPSIiIHByb3A9ImJsYW5rIiBzaXplPSI4Ii8+PGZs
ZCB4bWxucz0iIiBwcm9wPSJibGFuayIgc2l6ZT0iOCIvPjxmbGQgeG1sbnM9IiIgcHJvcD0iYmxh
bmsiIHNpemU9IjgiLz48ZmxkIHhtbG5zPSIiIHByb3A9ImJsYW5rIiBzaXplPSI4Ii8+PGZsZCB4
bWxucz0iIiBwcm9wPSJibGFuayIgc2l6ZT0iOCIvPjwvY2FyZD4NClJFVjoyMDA5MDEwOVQxNTI4
MTRaDQpFTkQ6VkNBUkQNCg==
--_002_483E6B0272B0284BA86D7596C40D29F9E2C7B80778PUREXCH07oxco_--
