Scam telemarketers spoofing our NOC phone number for callerid

Wed Oct 6 15:43:49 UTC 2010

Digital all the way through. No sip. No outside access to the PBX subnet either. Just a mininute ago our telco has verified that the calls are not orginating from out phone system. It's a simple caller id spoofing. People don't realize that caller id can be spoofed and therefore are 100% sure that we are makign the harrasing calls. 

Just wanted nanog to be aware of this since the only two numbers that this has happened with are the ones in our ARIN whois records.

----
Matthew Huff       | One Manhattanville Rd
OTA Management LLC | Purchase, NY 10577
http://www.ox.com  | Phone: 914-460-4039
aim: matthewbhuff  | Fax:   914-460-4139

> -----Original Message-----
> From: Jon Lewis [mailto:jlewis at lewis.org]
> Sent: Wednesday, October 06, 2010 11:34 AM
> To: Matthew Huff
> Cc: '(nanog at nanog.org)'
> Subject: RE: Scam telemarketers spoofing our NOC phone number for callerid
> 
> On Wed, 6 Oct 2010, Matthew Huff wrote:
> 
> > Our system is PRI based, not sip.
> 
> PRI for origination and termination...but what are your phones?  Old
> school or VOIP/SIP?  If your phone system supports SIP clients, it really
> ought to be IP restricted to only allow your phones access, or use
> something like fail2ban to stop the SIP scanners from eventually gaining
> access.
> 
> ----------------------------------------------------------------------
>   Jon Lewis, MCP :)           |  I route
>   Senior Network Engineer     |  therefore you are
>   Atlantic Net                |
> _________ http://www.lewis.org/~jlewis/pgp for PGP public key_________
-------------- next part --------------
A non-text attachment was scrubbed...
Name: Matthew Huff.vcf
Type: text/x-vcard
Size: 1612 bytes
Desc: Matthew Huff.vcf
URL: <http://mailman.nanog.org/pipermail/nanog/attachments/20101006/fbc7ca2c/attachment.vcf>