November 2021 - VoiceOps - lists.voiceops.org

SentryPeer: A distributed peer to peer list of bad IP addresses and phone numbers collected via a SIP Honeypot
by ghenry＠suretec.co.uk July 4, 2023

July 4, 2023

Hi all, I hope you don't mind the post, but thought this might be of use and in the spirit of release early, release often I've done an alpha release: https://github.com/SentryPeer/SentryPeer There's a presentation too if you'd like to watch/read where I hope to go with this: https://blog.tadsummit.com/2021/11/17/sentrypeer/ Working on the API and web UI next, then the p2p part of it. Feel free to submit any feature requests or have a play :-) Thanks for reading and any feedback is welcome! -- Kind Regards, Gavin Henry.

4 9

VoIP SMS Campaign Fees
by nate＠blastcomm.com Feb. 23, 2022

Feb. 23, 2022

Sorry if this was already discussed and I missed it. I saw a notice on our Voip Innovations account today that any business DID's that send SMS messages to a consumer in any way now have to be registered with 'Campaignregistry.com' Looks like this requires a $200 signup, and then potentially $10/month/DID. Anyone already gone through this? Talking to VI, it seems they're not even sure, but it's a VI requirement to be registered by Dec 15. The whole process seems confusing. VI Makes it seem like non-compliance will be expensive. $10,000/violation keeps being referenced. Would each one of my customers be considered a separate campaign at $10/month?

9 9

Verizon Wireless Contact
by cwhelan＠staff.gwi.net Jan. 21, 2022

Jan. 21, 2022

Hello everyone, I know this is a long shot, but I'm hoping someone on here works for Verizon Wireless or knows someone that is in a position to assist us. Recently, a change to call routing occurred and Verizon Wireless calls are now being delivered across our tandem instead of a SIP peer. Ideally, I would like to establish a SIP trunk to Verizon Wireless but changing the call flow is the short term goal. Thanks in advance for your help! Christopher Whelan Director of Network Engineering GWI office 207-602-1115 *cell* 207-751-5013 www.gwi.net

2 1

VoIP SMS Campaign Fees
by abalashov＠evaristesys.com Nov. 29, 2021

Nov. 29, 2021

I use Twilio extensively for network and system monitoring-related texts to? myself. Don?t care about fees, charge me whatever, just please don?t make it stop working or make me do more paperwork. This stuff sounds like a possible source of disruption or additional paperwork and for the mere possibility alone, I burn with the blinding white-hot hatred of a thousand angry suns and the vengefulness of a spiteful Old Testament god. ? Sent from mobile, with due apologies for brevity and errors. > On Nov 29, 2021, at 5:03 PM, Peter Beckman <beckman at angryox.com> wrote: >

1 0

Robocall/reputation lookup and call blocking
by jstalder＠panterranetworks.com Nov. 23, 2021

Nov. 23, 2021

For inbound spam/robocall blocking, we use a reputation score threshold from the common vendors to determine whether a given call should be marked as just ?spammy? or rather blocked entirely. As of late, we?re receiving more and more complaints of inbound calls being blocked due to VERY bad reputations (i.e. 100 out of 100). In most/all cases, the callers are large organizations? hospitals, pharmacies, insurance companies, etc. It appears many of the large companies haven?t bothered to SHAKEN sign their calls nor manage their reputations via https://calleridreputation.com, https://calltransparency.com, etc. Many use a single TN for all their outbound calls. ;-( Our strong suspicion is that because large carriers have whitelisted the calling TNs and the importance of valid calls, spoofers are hot to use them and the reputation databases reflect that. Problem for us, of course, is that our customers want to receive calls from the real organizations but we have no way of determining which calls are real and which are not. Only the TN reputation score from industry databases and call headers are available. Just curious what others are doing and seeing ?in the wild?. Is playing the whack-a-mole whitelisting game really the best solution? An alternative idea of letting all bad reputation calls through and simply marking them as ?spammy?, regardless of score, seems like a cop-out. -Joel *Joel Stalder* *Director, North American Network Operations* *+1.408.400.3830* [image: Panterra_newest_logo150] *"The Unified Cloud Service Provider"*

1 0

some of my customers DID show as Possible Spam
by igoldstein＠telego.net Nov. 19, 2021

Nov. 19, 2021

We get Support Tickets from our clients that when they call their Customers, their customers see the call from Possible or Potential Spam etc I reached out to our vendor we use for Termination, who is an aggregator and they say the issue is with the person getting the call, Why is this happening to my customers DIDs? We get this complaint from several of our clients Could it be that our vendor is using a bad carrier to terminate the calls? could it be some spammer used my customers DID as their ANI so it got flagged as spam ? has anyone dealt with this or a similar issue ? -- Izzy G

9 13

Interesting proactive email from Telnyx
by caalvarez＠gmail.com Nov. 15, 2021

Nov. 15, 2021

We're just barely trying them out, mostly for SMS. Prices seem pretty high compared to our other providers so it's really just a convenience/test at this point. But this was interesting: Dear customer, Telnyx has reason to believe that sip.telnyx.com will be targeted in a subsequent DDoS attack tomorrow (Monday the 15th of Nov). During attacks, it is likely we will block traffic from non-trusted sources. To help achieve this Telnyx has proactively created a list of trusted IPs using customer authentication IPs, successful registrations, and historical traffic. However, we strongly encourage all customers to check their records and add any IP that they may be using, to their Access Control IP List as per the following instructions: https://telnyx.com/release-notes/allowed-ip-mission-control <http://email.mg.telnyx.com/c/eJydUU1zmzAQ_TVwYfBgBAgOHIypa3twJk7sOu2FkcXiqB…> Thank you for your understanding, The Telnyx Team Thing is though, they don't seem to let you whitelist a subnet or range. Entering a couple dozen IPs is not great.

2 1

ANIs flagged as telemarketer/spammer/scammer
by abalashov＠evaristesys.com Nov. 14, 2021

Nov. 14, 2021

Hi, So, of course, it is a known problem in the legitimate side of the lead engagement call centre, survey, etc. business that ANIs get flagged as "telemarketer" pretty quickly and start showing up that way on people's phones. Your normative viewpoint on that may vary depending on what you think of lead gen calls, but regardless, a reasonable person would differentiate between: (1) Legitimate outbound dialing operations that are following up with leads who provided their phone number and agreed to be called (at least, as a matter of clicking "accept" on _something_), or for some other legitimate mass-dialing purpose, and who actually own the DID inventory from which they present local-market ANIs and can in fact be reached on those numbers; (2) Illegal spammers who use fake ANIs and call people who did not in any way consent to being called by them. I am trying to learn a bit more about how this is done and what a legitimate, above-board business can do about it. Ignoring the factor of third-party call-screening apps (which most people with a mobile don't use), where is this generally implemented? As I understand it, T-Mobile do it on the network level. I have T-Mobile myself, and probably 2/3rds of unfamiliar numbers, including quite legitimate ones, show up as "Scam Likely" ? I know that's come up on the list before. AT&T displays "Telemarketer"; do they do it that way too, or do they use a Google Android feature for that which they enable as part of their carrier defaults for carrier-issued phones? What about other carriers and Android? As far as I know, Apple don't do anything like this. Do people with iPhones just not receive this "service"? How does that work? Asking where the central, or the most influential authority lies and who provides it goes to the heart of the real question, which is: what can a legitimate business do if their number has been blacklisted this way? As I understand it, the maintainers of these lists, along with the criteria for getting on them, are elusive and inscrutable, and there's really no recourse and no appeals process. I furthermore understand that this has led to the widespread approach of rotating ANIs, but that's a losing battle; they get flagged too. I imagine it won't be long before the criteria for "Scam Likely" are just "number appears to call lots of numbers in this rate centre and otherwise hasn't been around very long". But this is all just conjecture on my part; I really don't know much about how my carrier, anyone's carrier, or some BigCo that's behind my mobile OS decides that a call is a "telemarketer" or "scam" call. If anyone can shed some light on how this really works and what, if anything can be done about it, I would be most appreciative. -- Alex Balashov | Principal | Evariste Systems LLC Tel: +1-706-510-6800 / +1-800-250-5920 (toll-free) Web: http://www.evaristesys.com/, http://www.csrpswitch.com/

8 14

Can't Figure This Scam Out
by voiceops＠lict.com Nov. 11, 2021

Nov. 11, 2021

One of our clients is a small private school. For the past month, the school has been getting calls meant for other schools in the general area (within 20 miles or so) We have been able to get limited information from the caller like what number did they dial. They are definitely not dialing our client's DIDs. It seems that they are dialing a number that they found on an internet search, and the call is then forwarded to one of the DIDs at the school. We are seeing matching CDR records for our PBX and our carrier's CDR billing reports, so it does not look like a SIP hack. It seems that the number is forwarded for just a few minutes to our school, then goes dead, or rings busy, no longer forwarded to our client. The pattern here is that the caller obtained the number from an internet search of a school in the area. These are real people calling, as we have been able to call them back and verify. The callers who reached our client are as bewildered as we are. I am sure this is some sort of scam -- but I can't figure out what it is. Are the scammers recording the lines and seeing if they hear financial information? Seems like a longshot, but that is the only thing I can think of. I know there is little that can be done to prevent a call being forwarded to you upstream of the carrier, but would love to hear anyone's thoughts about this.

7 9

Verizon says they have "no relationship" to port from thinQ/Commio
by caalvarez＠gmail.com Nov. 11, 2021

Nov. 11, 2021

A customer is porting a number to VZW, and they can't figure it out. They called me to ask if I had "more info" to help them port out from Commio. My return call went to VM, so I don't have more info, but thought I'd ask here on the list. Any ideas on how this can be, or what to recommend? I know Verizon is a small carrier, and may not be wise to the ways of telecom.

4 8