I have a customer that had 600 minits of phone calls (29) to holland in a 3 day period of time
they have a td1232-1 no disa card installed , password not default , and a tvs 200 vm unit
i have checked system programming it all looks normal , of course the phone company just knows it had to be a fault or loophole in the system
has anybody had or heard of this lately ?
can system reports on smdr go back month and for this ?
it could be through the vm, check manager mailbox password is on and not changed. look for extensions fwd or external notification on mailbox is set to premium number, check all mailbox's especially one that has no extension assigned.
smdr if turned on and not collected has a buffer, but will only hold about 100 records and will lose them if the power is off, but the unit probably is not turned on to collect smdr if it has nothing connected to the port
I've seen this several times before on Panasonic systems. One customer (a flower shop) ended up with a bill for thousands of dollars for calls to a Caribbean country. We found that someone hacked into the voice mail and put a foreign phone number in the notification (outdial) field in one of the mailboxes. They would then call in, leave a short message and the system would "think" it was making multiple attempts to dial a pager.
Obviously, Panasonic systems are very popular world-wide, so they are targets for these people. The only things you can do is the following:
1. Change all mailbox passwords, especially in 997, 998 and 999. Remember that they default with no password.
2. Delete all mailboxes that are not being used.
3. Restrict outward dialing on the voice mail ports unless this feature is absolutely necessary.
4. Restrict the phone system from dialing international calls.
5. Have the service provider block international calling unless the customer really needs it.
i have not had a chance to check the voice mail on site yet , i have seen and worked on systems with the problem that you are talking about , but these calls differ in that they went non stop for hours per call at a time
they do have passwords assigned to 998 & 999 that are not the default type
they are using pac bell lines
Some detective work is in order any dutch or europeans working at this location?
is there any custom features on the lines 3 way calling unattended conference capability?? if this place makes a lot of calls don't count on a month. if they are not using remote notification by all means lock down voicemail ports and possibly
lock down the whole system with forced accounting
if they will let you...do an audit of all the ext's dont forget x jacks on the system modems hanging off x jacks from a infected computer with a dialer program are famous for holland calls....
for grabbing a trunk and racking a huge bills after hours don't rule out single line jacks hanging off the ni ahead of the system or an LI down the street
the number of staff personel is less than 10 , and most are hispanic
just your basic programming , no computer savi personel , checked the system progams nothing out of place
i will check there computer access to lines
again
If it is through the vm, it is more than likely that it is from the outside and someone should go on site and lock down the system until it is fully checked out. Make sure fwd external is disabled for ext that don't need it or are not used
If they use Analogue PSTN lines, not
ISDN surely someone could have been making calls by tapping in to the cable in the street.
I know of technicians who site in the MDF calling their friends on other people's phone lines all the time.
It is possible, but they need to make sure the system is locked down, it is our responsibility as the techs to keep the system as safe as we can and make sure there are strong passwords on the systems
:thumb: thank you all for your in put !
i was able to get to the job site and check the vm unit it was hijacked on 3 mail boxes to phone # 90114525979712
as usual try to control mb users ! the weakest and most difficult loop hole to control !
i'am still trying to figure out how it worked out to 600 minits on only 29 calls , i would have expected several hundred calls and this was done in only 3 or 4 days
next step control the users and plug the leak !
600 minutes divided by 29 calls, only average about 20 minutes/call. Not unreasonable. All to the same number.... people lined up to receive calls? Large family? Call forward or some sort of access through another system in Holland using some sort of DISA arrangement? Whatever.