Re: Company being War Dialed

We've seen instances here with the symptoms you describe. In our case, it was a fax marketeer who was war dialing our entire prefix looking for fax machines.
We used a machine with a modem & mgetty+sendfax to confirm by routing a number of unused voice lines to the box.

james r phillips
I/S Security Compliance & Quality Assurance

                                                                                                                                     
                      "Fred Kreitzberg"                                                                                              
                                      cc:                                                                                 
                                                 Subject:  Company being War Dialed                                                  
                      04/17/2003 06:13 PM                                                                                            
                                                                                                                                     
                                                                                                                                     

The war dialing started last night and has continued throught the day. They are being very noisy, staying on the line with a steady beep, beep, beep long enough to leave a voice message. The calling has occcured on two different prefixes so I am concerned my company is being targeted.

Our local service provider's security and fraud team has not been able to identify a single source of the calls.

We have recently done our own War-dail and feel we know all our modems are secured correctly.

Any thoughts on additional steps I should be taking?

thanks
Phred

--
__________________________________________________________
Sign-up for your own FREE Personalized E-mail at Mail.com
http://www.mail.com/?sr=signup
----------------------------------------------------------------------------


Attend Black Hat Briefings & Training Europe, May 12-15 in Amsterdam, the
world's premier event for IT and network security experts.  The two-day
Training features 6 hand-on courses on May 12-13 taught by professionals.
The two-day Briefings on May 14-15 features 24 top speakers with no vendor
sales pitches.  Deadline for the best rates is April 25.  Register today to

ensure your place. 
http://www.securityfocus.com/BlackHat-incidents
----------------------------------------------------------------------------


----------------------------------------------------------------------------

Attend Black Hat Briefings & Training Europe, May 12-15 in Amsterdam, the 
world's premier event for IT and network security experts.  The two-day 
Training features 6 hand-on courses on May 12-13 taught by professionals.  
Do you need more help?
In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software:
Learn more about Pantek's Technical Support offerings
Place an order for 24/7/365 Technical Support here
Learn more about Pantek, who we are, and what we do
Chat with a Live Operator
Related securityfocus.com Links
bugtraq
certification
focus-bsd
focus-ids
focus-ih
focus-linux
focus-ms
focus-sun
focus-unix-other
focus-virus
forensics
incidents
libnet
linux-secnews
ms-secnews
pen-test
secpapers
secprog
sectools
secureshell
security-basics
securityjobs
sf-news
vuln-dev
webappsec
Request more information about Pantek
The two-day Briefings on May 14-15 features 24 top speakers with no vendor 
sales pitches.  Deadline for the best rates is April 25.  Register today to 
ensure your place. 
http://www.securityfocus.com/BlackHat-incidents 

----------------------------------------------------------------------------

Do you need help?

In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software: Learn more about Pantek's Technical Support offerings Place an order for 24/7/365 Technical Support here Learn more about Pantek, who we are, and what we do Chat with a Live Operator Related securityfocus.com Links bugtraq certification focus-bsd focus-ids focus-ih focus-linux focus-ms focus-sun focus-unix-other focus-virus forensics incidents libnet linux-secnews ms-secnews pen-test secpapers secprog sectools secureshell security-basics securityjobs sf-news vuln-dev webappsec Request more information about Pantek