d3crypt

Some numbers (new)

393 posts in this topic

1 hour ago, yuu said:

508-747-9990    Answers with a click, 3 # DTMF tones, then silence. Hang up at 14 sec. 
508-747-9992    "All circuits are busy" From Verizon phone "We are unable to complete your call at this time" Sprint phone.
508-747-9998    6 DTMF (508747) Burst, click, term at 14 sec.
508-746-9911    Milliwatt?? It seems a bit higher.
508-746-9999    6 DTMF (508746) Burst, click, term at 14 sec.
508-224-9998    6 DTMF (508830) Burst, click, term at 14 sec.

There's a lot of ringouts on numbers that are one digit apart like a loop. Not sure what the deal is. These are all from a 5ESS.

Anyone have any idea what 747-9990 is? Or 746-9911?

746-9911 is a modem carrier. You must be pretty young, not knowing what that is.:)

Edited by xhausted110
0

Share this post


Link to post
Share on other sites

 

Quote

212-650-7149 - City College of New York Recorded Message

 about how that number has been spoofed a bunch of times by telemarketing scammers. Said in the most blunt, frustrated tone.

That's on a Callxpress VMB :) .

 

Quote

746-9911 is a modem carrier

 

When I try and connect, something prints out M345| several times. I think you can make it stop with a control character, but it won't reply with anything any more readable. CNAM is Verizon, though.

Speaking of modems though, +54-11-4333-9998 is a modem on an Argentinan switch. I think it's a DMS-100, but can't swear to it. 9992 in that exchange sounds like it might be a room monitor or an echo test on a messed up trunk or something.

+7-495-642-9150 - DISA. Definity?

+7-495-644-4844 - Russian hotel with auto-attendant

+7-495-783-3578 - MOH, lots of companding fuzz

503-221-5435 - Phone patch for TV station, reacts strangely to DTMF

So that 747-9990 number hangs up immediately after those three # tones. That might be some sort of status indicator, and it'll only accept input if something changes locally. There's always the possibility it wants to be interrupted too.

Edited by ThoughtPhreaker
Forgot to call 747 number
0

Share this post


Link to post
Share on other sites

403-260-2308,299-2308 - Weird device, picks up with tone + 4th row DTMF
403-691-2308 - Spits back cause code. Try calling this one from a bunch of different long distance carriers.
403-288-2308 - Cycles through recordings on DMS - NIS, dialing 1/0 not necessary, dial 1/0 first, CBCAD,
403-288-2311 - Cycles through recordings on DMS - Per call caller ID blocking, various trace recordings
403-288-2314 - Cycles through recordings on DMS - LD CAC error, payphone CBCAD
780-968-2308 - Plays tone and hangs up

It's weird hearing a switch cycle through recordings like that. I think the only other one I've heard do that is a United Tel DMS in Pennsylvania.

0

Share this post


Link to post
Share on other sites

I've been really busy this week, so er, here's a bunch of crap.

780-453-2308 - Otis elevator via PBX

610-863-0004 - rec, "To confirm, press one. Or to forward to a different number, press two. To cancel, please hang up now."

610-863-0023 - Modem, Adtran TA-3000

610-863-0086 - ANAC. SASS?

610-588-0081 - Picks up with high pitched tone, pauses, plays more tones. CO trunk testing doohickey?

610-588-0091 - Thingie, picks up immediately and starts sending reorder. From PBX? Hangs up after several pulses

610-588-0098 - Nortel EDRAM, "Please enter a code to remotely access a feature"

610-599-0072 - Warbly, old tape ACB rec

610-599-0075 - 0075 - AT&T toll rec, "Access through this long distance carrier is denied."

610-599-0090 - Modem, Cisco router

610-599-0096 - 300 baud modem

 

Did I mention Commonwealth Telephone is awesome? Here's a 5ESS scan too. Just because.

832-251

9900 - Permanent signal rec
9901 - Ringout (CNAM: FREEDOM TAX)
9902 - NIS rec
9903 - rec, "We're sorry, we cannot process your custom calling request at this time. Will you try again later?"
9904 - CBCAD rec
9905 - rec, "We're sorry, you have dialed a number which cannot be reached from your calling area."
9906 - Party not accepting calls w/privacy bits rec
9907 - Anonymous call rejection on rec
9909 - CBCAD/dial 1/0 first rec
9910 - Same as 9904
9911 - CBCAD from the phone you are using rec
9912 - rec, "We're sorry, this telephone line is currently arranged for local calls only. The number you have called is not a local call."
9913 - Coin deposit rec
9914 - Anonymous call rejection off rec
9916 - ACB rec
9917 - Same as 9916
9918 - Same as 9916
9919 - rec, NPA changed to 936
9920 - Same as 9904
9921 - Same as 9904
9922 - Same as 9904
9923 - Same as 9904
9924 - Ported to TW Sonus, NIS rec
9925 - rec, dialing 950 before CAC not necessary
9926 - Dialing LD CAC not necessary rec
9927 - CBCAD/CAC error rec
9928 - ACB rec, alternate take
9929 - Network difficulties rec
9930 - CBCAD rec
9931 - rec, CBCAD/call your attendant to help you
9932 - rec, "Your feature is working correctly. However, your request could not be completed due to limitations with the number involved. You will not be charged for the activation of this feature."
9933 - rec, "We're sorry, the line you are trying to reach has again become busy. You will have to re-activate your feature."
9934 - rec, "We are sorry, the line you are using is not equipped for this service."
9935 - rec, "We're sorry, the party you are calling is not accepting calls at this time."
9936 - rec, "Thank you. Your auto-redial or call return requests have been cancelled."
9937 - rec, "Thank you. The number you are trying to reach is busy. If it becomes free in the next thirty minutes, you will receive a special ring."
9938 - *57 success rec
9939 - rec, "We're sorry, your call forwarding and selective call forwarding features cannot be active at the same time."
9940 - YCDNGT rec
9941 - <off-frequency? tones> "The person you are trying to reach is on another call. Please call again later."
9942 - <off-frequency? tones> "Please do not hang up, the person you are trying to reach is finishing another call, and knows you are trying to reach them. Please stay on the line, and your call will be answered shortly."
9943 - rec w/TTY, "It is now necessary to dial the area code then the number to complete this call.", repeats in Spanish
9944 - Same as 9904
9945 - Same as 9904
9946 - Same as 9904
9947 - rec, "You have reached the Southwest DS1 office."
9948 - Same as 9904
9949 - Same as 9904
9950 - Same as 9904
9951 - Ported to TW Sonus, NIS rec
9952 - Same as 9904
9953 - Same as 9904
9954 - Same as 9904
9955 - Same as 9904
9973 - rec, LD CAC must be preceeded by 950
9980 - Subscriber, ported to Level3
9983 - Same as 9904
9984 - Subscriber, ported to Comcast
9986 - Intercept/disconnected business DA
9987 - Intercept/disconnected business DA
9995 - Intercept/AIS DISCO
9996 - Intercept/AIS DISCO
9999 - 102-type test

0

Share this post


Link to post
Share on other sites

Holy shit, 832-251-9900 takes the cake for the worst quality recording I've ever heard! Sounds like they just held the microphone up to a blastingly loud speaker phone. Oddly, the bad quality recording times out to a much better quality version of the same one.

0

Share this post


Link to post
Share on other sites

Hmm, really? I just get one version of the recording that plays twice and hangs up. Just for the sake of night and day, here's the same thing from an AXE-10; 405-382-9126.

0

Share this post


Link to post
Share on other sites
On 1/13/2016 at 4:27 PM, ThoughtPhreaker said:

520-387-8200 - Sensaphone

 

That number does something pretty strange, it'll go to different voicemail systems sometimes, and sometimes it'll go to the sensaphone. I even got a british voicemail with a British ring! Unfortunately, my Radio Shack handset in line recorder doesn't work anymore, but I made a video of it.

I can remember getting these:

Standard cell phone voicemail box not set up yet message (you know the one)

"Welcome to Cisco Unity Messaging!..."

"Press 1 to leave a voicemail, or start faxing at any time."

"The person you have dialed can't take your call now..."

"Please leave your message after the tone..." -asterisk voice

"Please record your message after the tone" -Professional, southern voice

European ring (Might be a ring from Skype, it has that echo) going to American ring and "Thank your for calling. Press 1 to leave a message, to leave a fax press 2, or begin faxing at any time."

And when you finally do get the sensaphone, You get two slightly out of sync ring tones. Also, the time is wrong and it says there was a power failure for 0 seconds.

 

 

0

Share this post


Link to post
Share on other sites
23 hours ago, ThoughtPhreaker said:

Hmm, really? I just get one version of the recording that plays twice and hangs up. Just for the sake of night and day, here's the same thing from an AXE-10; 405-382-9126.

Here's a video of it:

And the AXE-10, just for comparison:

I need a better recording method.

The IP phone is using SCCP on Asterisk 1.8.13.0.

0

Share this post


Link to post
Share on other sites

Are you sure you're not hitting some bad routes? Here's what I get consistently on all three;

http://thoughtphreaker.omghax.ca/audio/swbell_permanentsignal_axe10.wav

http://thoughtphreaker.omghax.ca/audio/swbell_permanentsignal_5ess.wav
http://thoughtphreaker.omghax.ca/audio/5203878200_sensaphone.wav (because of the way I was recording, the second repetition + ambient noise got cut off. Sorry.)

 

I dunno if this technically belongs in the some numbers thread, but 959-1200 on some GTE switches will go to a secondary ANAC. On a GTD-5 in Fort Wayne, it actually went to one on an AP/APMax instead of the usual Cognitronics doohickey.

0

Share this post


Link to post
Share on other sites

212-255-9901 "Due to year 2000 testing, the system will be unavailable from 5pm to 9pm"

My guess on this one is that someone decided to "temporarily" overwrite the verification announcement with this message for a bank, because they were out of announcement channels, and forgot about it. 16 years later...it's still here.

212-757-9901 -- (Male voice, possibly switchman) We're sorry, but since you did not select a long distance company, this call cannot be completed as dialed. To place this call in an emergency, dial 0, and an operator will assist you. You may designate a long distance company to handle this type of call by calling a New York Telephone service representative during regular business hours.

That one went to reorder for 2 minutes or so after I called it.

Edited by xhausted110
0

Share this post


Link to post
Share on other sites
On 3/19/2016 at 0:00 AM, xhausted110 said:

I've been scanning 212-NXX-9901 tonight. Attached is what I have so far.

9901.txt

Did you hear this recording of all, I think, of the verification recordings in 212 that I made a few (6!) years ago?  I tried to only include one verification recording per CLLI, so if I got one on the first NXX in that CLLI, I moved on to the next switch and didn't dial the other codes.  FWIW, the EQ is probably messed up on both.  I may have been stupid enough back then to record it through a phono input (what's an RIAA equalization curve?) but I don't remember.

http://jmana9.com/audio/212_Verification.mp3

Also:

http://jmana9.com/audio/718%20Verification.mp3

0

Share this post


Link to post
Share on other sites

I was scanning some really remote switches in Alaska and Nunavut today, and found some gems.

867-980-0000
867-980-9999 

These two are both intercept messages from the DMS-10 in Grise Fiord, the most northly human settlement in North America. They are recorded in the Inuktitut language, spoken by Inuit natives that were displaced and moved to the High Arctic by the Canadian government. 

907-852-9901 Intercept with weird tones after SIT
907-852-0000 Barrow, Alaska Weather Phone by Astac
907-367-9999 Please Enter Your Mailbox Number"

These three are from Barrow, Alaska, the most Northerly town in the United States. I am curious as to what those tones are on the 852-9901 number. Will def be doing more scanning tonight.
 

0

Share this post


Link to post
Share on other sites

907-852-9901 - The tones after the SIT are TTY tones, also called TDD or telecommunications device for the deaf, devices used to send text over phone lines. They use 5 bit baudot, so capital letters only, plus some symbols, it's 50 baud / bits per second I think. There's some data after the recording too, I'm sure the one at the beginning says "HD" and the one after says the announcement text.




============ Moderator's Note ============

TDD/TTY baud rates tend to vary but you are for the most part correct. 45.5 and 50 baud are probably the most common and I've even called at least one that ran at 100 baud. The "standard" (meaning, most widely agreed-on) parameters are 1start/5 data/1.5 stop. This format is also very widely used on packet radio nets and the RTTY software MMTTY can be easily configured to generate and receive TDD-format data. With an acoustic coupler of some sort connected to the microphone and headphone-out jacks of a sound card, or even a pair of inter boxes, it's possible to use it as a computer-based TDD system (I've done it).

ANSI 8N1/7E1 format (ASCII) is also sometimes used but that sounds like a regular computer modem.
-Scratchy

Edited by scratchytcarrier
0

Share this post


Link to post
Share on other sites

+1 360 514-9902 - Wimactel COCOT (NT Millennium, eh) at Vancouver Mall; upstairs, hallway off the cafeteria near the bathrooms--

+1 700 555-4141 rings then gives a Pat Fleet CBCAD on that COCOT. +1 360 700-4141 generates a SIT and displays an error message on the unit's VFD.

0

Share this post


Link to post
Share on other sites

+1 206 233 9982-9999 - the number is IN service, please try your call again (?? weird) then goes to busy signal for 4 seconds, pauses 1 second, goes to busy again, sometimes goes to 'if you'd like to make a call please hang up and try again' after ringing after some popping sounds

 

0

Share this post


Link to post
Share on other sites

 

Quote

+1 206 233 9982-9999 - the number is IN service, please try your call again (?? weird) then goes to busy signal for 4 seconds, pauses 1 second, goes to busy again, sometimes goes to 'if you'd like to make a call please hang up and try again' after ringing after some popping sounds

 

The AIS report defaults to the number being in service. It was installed relatively recently (2010 or so?), so there's a lot of old numbers that're still configured to go to AIS in the switch, but don't have any record on the AIS itself. The busy tone is actually offhook tone generated by the AIS. The first popping noise you hear after that is battery drop; your switch is telling anything that might be connected to your phone line that the AIS hung up, and the call has been torn down.

When it sees you're still on, it'll ring you to the permanent signal recording. It can't start immediately, because it's always playing repeatedly; that way, they can bridge as many people as they want onto a single announcement machine at the switch, and just mute the callers. Anyway, at that point, all the popping sounds (save for maybe one; 5ESSes like to give you two battery drops) are coming from the recording itself.

That's probably way more than you wanted to know, but yeah :) . Before I forget too,

515-309-0001 - Weird thingie, answers w/4th row SF tone + 4th column DTMF tone

515-309-0002 - Ringout to Glenayre VMB, unmanned switch site, refers to 800-332-2385 for trouble reports (NOC)

515-309-0003 - Ringout to thingie, 300 baud modem in reverse answer mode?

515-309-0009 - rec from weird hardware, "The number you have called is no longer in service." <- Does anybody know what's generating the recording for this one?


971-230-0001 - DMS remote call forwarding prompt
971-230-0005 - Weird thingie, answers w/4th row SF tone + 4th column DTMF tone
971-230-0006 - Same as 0005

971-230-0014 - Thingie, 300 baud modem in reverse answer mode
971-230-0023 - rec, "We're sorry, we are unable to complete your call as dialed. Please redial with the area code and the telephone number."

971-233-0008 - 300 baud modem, answers with PASSWORD?

971-233-0033 - Modem

971-233-0039 - Thingie, answers with burst of 2200 hertz.

+32-1126-8199 - Picks up with SF tone after several rings? Got ringout next few times.

Edited by ThoughtPhreaker
0

Share this post


Link to post
Share on other sites
20 minutes ago, ThoughtPhreaker said:

That's probably way more than you wanted to know, but yeah :) .

That is super interesting and technical!  I love and appreciate your posts, i have a good time calling the strange numbers.  Next up I need to get a modem going!

My POTS line is from a CenturyLink fiber GPON connection - will it have identical behaviour to a copper POTS line, or do you think it's some sort of VoIP going on?  I guess even if it is VoIP, it's going to CenturyLink's systems so should be pretty damn close to copper.

0

Share this post


Link to post
Share on other sites

Glad you liked it :) . I've never seen one in person, but I've heard Centurylink likes to use Calix ONTs. If that's true, I think it's IP transport over the GPON network before hitting a DSx card on the switch serving standard POTS. Makes you wonder what they do when someone orders a PRI.

EDIT: Yup. Looks like it's transported over IP using some pseudowire standard.

http://portal.calix.com/portal/calixdocs/mktg/w/2013ugc-training/c7tdmgw.pdf

336-526-0002 - rec, Embarq business office message

336-526-0004 - rec, dial NPA before number (spliced together from time stretched Cognitronics phrases)

Edited by ThoughtPhreaker
0

Share this post


Link to post
Share on other sites

Hey! Sorry it's been so long, I've been working on a really long/in-depth text file, so that's why I haven't made a lot of posts. It might be at least a couple more days, so here's a scan in the meantime.

515-733

1200 - 100-type test
1201 - Meatwitch VMS
1202 - 102-type test
1203 - CBCAD via SS7
1204 - Reorder via distant end
1205 - 105-type test
1206 - Cognitronics ANAC, sends cause code that generates reorder via SS7 when done
1207 - 102-type test        \
1208 - Reorder via distant end  / Loop; only allows ~30 seconds of audio
1209 - Reorder via distant end
1210 - 105-type lookalike
1211 - Reorder via distant end
1218 - Subscriber
1221 - Ported to Mediacom, Meatswitch rec, "The number you are calling is temporarily unavailable. Please try later."
1227 - Business
1235 - Permanent signal rec
1241 - Subscriber
1242 - Modem. 1200 baud?
ENTER PASSWORD
1249 - Modem, 1200/7/E/1
*
SELECT: DISPLAY:1=TRUNK,2=SXS;INPUT:3=TRUNK,4=SXS;5=DELETE;7=MSG
1250 - Ancient AIS, # changed to 515-733-9999
1251 - CBCAD rec
1253 - Jane Barbe dial 1/0 first rec, clicking, DTMF 3100-63? audible in background
1256 - Same as 1235
1257 - ACB rec, weird feedback noise at end
1258 - Coin deposit rec
1259 - CBCAD/CAC error rec
1260 - rec, "We're sorry, your pre-subscribed or dialed long distance company no longer provides service from your calling area. If you feel you have reached this recording in error, please check the number and try your call again."
1261 - Telco facility trouble rec
1262 - LD CAC CBCAD rec
1263 - rec, "Welcome to GTE Express Dialtone. If you wish to order telephone service, please hang up, then pick up and dial 483." <lots of weird feedback noises>
1264 - Ancient AIS, NIS rec
1265 - rec, "You have called a party on your own line. Please hang up, give the called party time to answer, and then pick up your receiver."
1268 - LD CAC required rec
1270 - # cannot be reached from calling area rec
1271 - Dialing 1/0 not necessary rec
1274 - rec, dialing LD CAC not necessary <dialtone + dialing audible in background>
1293 - ETC AIS rec, # not accepting calls w/privacy bits

 

0

Share this post


Link to post
Share on other sites

I've been scanning my local prefix, randomly with TBA on a Palm Vx. Not much luck since I'm quite rural, eventually I hope to move up to the 404 area code as that's not long distance.

As of today am through 770-574-00xx to 11xx, with one catch;

770-574-0084 modem noise like fax or dial up

0

Share this post


Link to post
Share on other sites

*



SELECT: DISPLAY:1=TRUNK,2=SXS;INPUT:3=TRUNK,4=SXS;5=DELETE;7=MSG


OOOOO!! Think that might be an administrative console on a DMS/EAX? (STCYIAXPDS0)

0

Share this post


Link to post
Share on other sites

 

Quote

770-574-0084 modem noise like fax or dial up

 

That's a fax :/ .

It looks like you're served of a remote of the Bremen DMS-100, so the the host switch (770-537 specifically) would probably be the best place to look. From an old copy of the Bellsouth test directory, I found a few interesting things. Just scraps, sadly; Bellsouth switches can be a little hard to sift through, but it's something.

770-537-6715 - Line restricted/# cannot be reached rec
770-537-6728 - Switchroom? (CNAM: A T T)
770-537-6729 - CBCAD rec

Notice the different ring and the echo on 6728. Pacific Bell DMS-100s ring like that when you're using three-way, and their switchroom numbers do, in fact, have the exact same thing right down to the echo. I'm guessing they're bridging switchroom calls into something echoey, maybe to record/announce the calls.

EDIT: I should probably mention, toll-frees tend to occasionally have modems if you're worried about your local calling area. The tradeoff is you will want to send a privacy bit before a call. Or else you'll get people calling you back trying to sell you random crap.

Quote

OOOOO!! Think that might be an administrative console on a DMS/EAX? (STCYIAXPDS0)

 

Nope. Not sure about the 5EAX, but the DMS-10 uses this weird, SL-1-style command line for administration according to the PDFs I have on it. I'm thinking this might have something to do with the weird AIS in the office. I dunno if I have bad terminal settings or what, but 1, 2, 4, 7 and 8 all respond with "INPUT NOT ACCEPTED; RE-ENTER:". The other numbers wait for four digits (it still won't accept 1, 2, 4, 7, and 8) before giving me the same thing. I can't remember where exactly, but there's another Iowa Telecom exchange with that same old AIS that has the exact same issue. So when I did a search and found this, I just sorta assumed at the time it was broken or something.

Edited by ThoughtPhreaker
0

Share this post


Link to post
Share on other sites

So I was picking around some the switches up in Olney, IL (look into Evan Doorbell's recent recordings as to why that place is of particular interest), and I found something... Odd... That I need a little more exploration with.

618-879-9979, which I figured would be either a test number, or some sort of Telco item (believe it's a GTD-5 switch?)... So I've got it to ring out, then read as an 'Invalid Number' on a subsequent call, then reorder on the next... And this is all with one originating phone company. It's probably just a routing thing, but I'd like to get a little more data from my phellow phreaks.

I'll try to capture some audio, because one of the ringouts I got was weird... About 30 seconds of standard ring, then about 10 seconds of a ring of a slightly higher frequency, like it connected to another circuit.

0

Share this post


Link to post
Share on other sites

Found some test numbers on that St. Louis 1AE going away in June... Might be worth seeing if there's a loop around involved.

 

TL-100: 314-831-1369

TL-102: 314-831-1900

0

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!


Register a new account

Sign in

Already have an account? Sign in here.


Sign In Now