RE: Company being War Dialed

From: James.Jacksonat_private
Date: Mon Apr 21 2003 - 12:07:02 PDT

  • Next message: Michael Scheidell: "Re: Tracking proxies on port 1180/1182"

    They may be calling through a provider that is not passing on the ANI
    which would make tracing the call more difficult.
    
    James
    
    -----Original Message-----
    From: public list [mailto:nospamat_private]
    Sent: Monday, April 21, 2003 1:06 AM
    Cc: incidentsat_private
    Subject: Re: Company being War Dialed
    
    
    
    If you have PRI lines you should have their numbers.
    If you are using analog or t1's you rely on the phone company. In which
    case you may consider ANI.
    
    A good way to stop wardialing, telco firewalls.
    www.securelogix.com
    
    On Thu, 17 Apr 2003, Fred Kreitzberg wrote:
    
    > The war dialing started last night and has continued throught the day.
    They are being very noisy, staying on the line with a steady beep, beep,
    beep long enough to leave a voice message.  The calling has occcured on
    two different prefixes so I am concerned my company is being targeted.
    >
    > Our local service provider's security and fraud team has not been able
    to identify a single source of the calls.
    >
    > We have recently done our own War-dail and feel we know all our modems
    are secured correctly.
    >
    > Any thoughts on additional steps I should be taking?
    >
    > thanks
    > Phred
    > --
    > __________________________________________________________
    > Sign-up for your own FREE Personalized E-mail at Mail.com
    > http://www.mail.com/?sr=signup
    >
    >
    >
    ------------------------------------------------------------------------
    ----
    > Attend Black Hat Briefings & Training Europe, May 12-15 in Amsterdam,
    the
    > world's premier event for IT and network security experts.  The
    two-day
    > Training features 6 hand-on courses on May 12-13 taught by
    professionals.
    > The two-day Briefings on May 14-15 features 24 top speakers with no
    vendor
    > sales pitches.  Deadline for the best rates is April 25.  Register
    today to
    > ensure your place. http://www.securityfocus.com/BlackHat-incidents
    >
    ------------------------------------------------------------------------
    ----
    >
    
    ------------------------------------------------------------------------
    ----
    Attend Black Hat Briefings & Training Europe, May 12-15 in Amsterdam,
    the 
    world's premier event for IT and network security experts.  The two-day 
    Training features 6 hand-on courses on May 12-13 taught by
    professionals.  
    The two-day Briefings on May 14-15 features 24 top speakers with no
    vendor 
    sales pitches.  Deadline for the best rates is April 25.  Register today
    to 
    ensure your place. http://www.securityfocus.com/BlackHat-incidents 
    ------------------------------------------------------------------------
    ----
    
    
    



    This archive was generated by hypermail 2b30 : Mon Apr 21 2003 - 14:28:52 PDT