Security Incidents mailing list archives
RE: Company being War Dialed
From: nospam () none net
Date: Tue, 22 Apr 2003 11:33:23 -0500 (CDT)
Tracing is the incorrect term. What you meant to say was it would be more difficult to identify the source number. You dont trace a call with ANI. Alot of your ability to identify the source number is determined by what type of lines you own. PRI's provide source numbers using the d channel. T1's do not use a d-channel and you would need to rely on SMDR records, which is transfered after the call, analog doesnt pass the number (with the exception of Caller ID, which is useless. ANI is a service that can be requested to provide numbers when you normally dont have the capability to get them. Hope this helps clear up a few things. On Mon, 21 Apr 2003 James.Jackson () broadwing com wrote:
They may be calling through a provider that is not passing on the ANI which would make tracing the call more difficult. James -----Original Message----- From: public list [mailto:nospam () none net] Sent: Monday, April 21, 2003 1:06 AM Cc: incidents () securityfocus com Subject: Re: Company being War Dialed If you have PRI lines you should have their numbers. If you are using analog or t1's you rely on the phone company. In which case you may consider ANI. A good way to stop wardialing, telco firewalls. www.securelogix.com On Thu, 17 Apr 2003, Fred Kreitzberg wrote:The war dialing started last night and has continued throught the day.They are being very noisy, staying on the line with a steady beep, beep, beep long enough to leave a voice message. The calling has occcured on two different prefixes so I am concerned my company is being targeted.Our local service provider's security and fraud team has not been ableto identify a single source of the calls.We have recently done our own War-dail and feel we know all our modemsare secured correctly.Any thoughts on additional steps I should be taking? thanks Phred -- __________________________________________________________ Sign-up for your own FREE Personalized E-mail at Mail.com http://www.mail.com/?sr=signup------------------------------------------------------------------------ ----Attend Black Hat Briefings & Training Europe, May 12-15 in Amsterdam,theworld's premier event for IT and network security experts. Thetwo-dayTraining features 6 hand-on courses on May 12-13 taught byprofessionals.The two-day Briefings on May 14-15 features 24 top speakers with novendorsales pitches. Deadline for the best rates is April 25. Registertoday toensure your place. http://www.securityfocus.com/BlackHat-incidents------------------------------------------------------------------------ ---------------------------------------------------------------------------- ---- Attend Black Hat Briefings & Training Europe, May 12-15 in Amsterdam, the world's premier event for IT and network security experts. The two-day Training features 6 hand-on courses on May 12-13 taught by professionals. The two-day Briefings on May 14-15 features 24 top speakers with no vendor sales pitches. Deadline for the best rates is April 25. Register today to ensure your place. http://www.securityfocus.com/BlackHat-incidents ------------------------------------------------------------------------ ----
Travis Good, CISSP ---------------------------------------------------------------------------- Attend Black Hat Briefings & Training Europe, May 12-15 in Amsterdam, the world's premier event for IT and network security experts. The two-day Training features 6 hand-on courses on May 12-13 taught by professionals. The two-day Briefings on May 14-15 features 24 top speakers with no vendor sales pitches. Deadline for the best rates is April 25. Register today to ensure your place. http://www.securityfocus.com/BlackHat-incidents ----------------------------------------------------------------------------
Current thread:
- Company being War Dialed Fred Kreitzberg (Apr 19)
- Re: Company being War Dialed Brett Glass (Apr 19)
- Re: Company being War Dialed Kurt Seifried (Apr 21)
- RE: Company being War Dialed Curt Purdy (Apr 21)
- Re: Company being War Dialed public list (Apr 21)
- <Possible follow-ups>
- Re: Company being War Dialed James . Phillips (Apr 21)
- RE: Company being War Dialed James . Jackson (Apr 21)
- RE: Company being War Dialed nospam (Apr 23)