d3crypt

Some numbers (new)

393 posts in this topic

Yup. That one belongs to the telco too. 31xx is kinda mix and match phone company stuff and subscribers.

 

EDIT: I found this earlier, and didn't feel like making a new post; http://www.rcn.com/chicago/help/phone/call-forwarding

 

I kinda like the way RCN did remote call forwarding. Partly just because it's an interesting way to use a DMS-250 or -500 or whatever, but also because there's definitely a few numbers out there besides what they've listed.

Edited by ThoughtPhreaker
0

Share this post


Link to post
Share on other sites

952-361-6680  -- National Weather Service for Minneapolis/St.Paul, MN.  Dial 1 at the first prompt, and 1 at the second prompt, to get to the recorded local forecast.  DTMF A causes the recording to start over, and DTMF C stops the recording and gives a quick cheep, followed by silence, and another cheep a few seconds later - then disconnects.

 

I'm thinking the cheeps on DTMF C are looking for input, but I haven't figured out what they're looking for yet...

Edited by codemonkey
1

Share this post


Link to post
Share on other sites

I think this is a Nortel PBX. This is something quite a few of them do, even the really old ones. Like this (or pretty much all) Safeways for example; 503-675-2500. After getting the D in response to the C tone, if you press *, it'll respond with *16. This seems to be completely undocumented behavior; I've looked up and down the manuals, and nothing seems to mention it at all.

 

Fortunately, Andrew actually happens to have a Nortel auto-attendant that responds to the same thing. A while back, he filmed how it's consoles reacted to just this.

 

 

320-450-9999 - Funny intercept rec, badly spliced together AIS message recorded onto 15A

301-604-9952 - Milliwatt on a 15A! I have no idea why they did this either, since the 5ESS can generate it's own milliwatt just fine, but they did. And it bleeds onto all the adjacent announcements; 301-604-9951

712-546-7336 - Thingie, answsers with weird, dual tones. Waits for DTMF?

0

Share this post


Link to post
Share on other sites

Interesting.  I'll have to play more with it when I get a chance, just to see what else (if anything) I can find.

 

Thanks for the info!

0

Share this post


Link to post
Share on other sites

1-952-652-0000

 

This number is a payphone emulator, you can redbox it and such. (Lucky225 from 2600)

0

Share this post


Link to post
Share on other sites

Very bizarre ringing tone (Japanese, maybe?) followed by solid tone... Foreign milliwatt equivalent?

Very nice! I have no idea what that is (I'm guessing a Japanese switch), but it accepts DTMF.

PBX test line of some sort?

That ringback almost sounds vaguely British except for the lack of break in the middle ("centre"?).

0

Share this post


Link to post
Share on other sites

360-484-9999 - Unsuped low tone forever. Doesn't seem to accept MF or DTMF

 

Here's a scan of an XO DMS-500. For those of you not familiar with XO, they're more of an ISP then a phone company, so a DMS-500 is a little out of place in their hands. Anyway, it wasn't a bad scan :) .

510-5800099 - Ringout0098 - Reorder via SS70097 - Ringout0096 - Reorder via SS70095 - Ringout0094 - Ringout to VMB0093 - Ported, ringout to Callmanager VMB (CNAM: XOINTERNALHERND)0092 - Ported, ringout to Callmanager VMB (CNAM: XOINTERNALHERND)0091 - ACB via SS70090 - IVR, XO Northern California operations0089 - Ringout0088 - IVR, XO Northern California operations0087 - Fax0086 - Ringout to VMS0085 - Fax0084 - Ringout to VMS0083 - Ringout, forward to stock EDRAM CBCAD0082 - Ringout to full VMB0081 - Fax0080 - Pager NIS0079 - Ringout0078 - Ringout0077 - Ringout to Sprint VMB for XO tech0076 - VMS0075 - Ringout to Cisco VMS0074 - VMS0073 - Recording w/packet loss, "You have reached an unalloated number at XO Communications. Message CUCMVCXN" (CNAM: XOINTERNALHERND)0072 - Fax0071 - Ringout to VMS0070 - Ringout to VMS0069 - VMS0068 - Ringout to VMB (CNAM: XO FREMON)0067 - Ringout to VMS0066 - VMS0065 - Ringout0064 - Forward or port? Ringout to AM (CNAM: XO FREMON)0063 - Forward or port? Shitty trunk to rep, "Hi, this is Dave" (CNAM: XO FREMON)0062 - VMB, Fremont Operations Hotline0061 - Ringout to VMS0060 - Ringout to full VMB0059 - VMB0058 - 300 baud modem in reverse-answer mode. Security system?0057 - rec, "To complete this call, you must dial a 1 plus the area code. Please hang up and try your call again."0056 - Cell0055 - Ringout to non-existant VMB0054 - rec, "Welcome to the XO long distance network"0053 - Ringout to VMB, California dispatch hotline0052 - Ringout to VMB0051 - Ringout to VMS0050 - Ringout to VMB0049 - ACB via SS70048 - Ringout0047 - Ringout to VMS0046 - Cisco Unity VMB0045 - Ringout to VMS0044 - Reorder via SS70043 - Subscriber? Ported0042 - Sonus stock NIS rec0041 - ACB via SS70040 - Sonus stock NIS rec0039 - Cisco Unity VMS0038 - Ringout0037 - Reorder via SS70036 - Ringout to VMS0035 - Ringout0034 - XO employee mobile? (CNAM: XOINTERNALHERND)0033 - Ringout0032 - Modem0031 - Modem0030 - Ringout0029 - Ringout to VMS0028 - Ringout0027 - Recording w/packet loss, "You have reached an unalloated number at XO Communications. Message CUCMVCXN"0026 - Dialtone0025 - Reorder via SS70024 - Ringout to VMB0023 - YCDNGT via SS70022 - Reorder via SS70021 - Subscriber? (CNAM: XO FREMON)0020 - Pacific Bell DMS-100 NIS0019 - VMS0018 - Reorder via SS70017 - Ringout0016 - Stock EDRAM CBCAD0015 - VMS0014 - Ported, loud ring to unsetup VMB0013 - Reorder via SS70012 - "You've reached Nexlink test box number two..."0011 - Ringout0010 - IVR, XO Northern California operations0009 - Reorder via SS70008 - Stock EDRAM CBCAD0007 - Ringout to VMB0006 - Ringout0005 - Dialtone0004 - CBCAD via SS70003 - Forward to cell phone w/Anypath VMB0002 - 100-type test0001 - VMS0000 - Reorder via SS7
0

Share this post


Link to post
Share on other sites

878-332-2997 Goes straight to my switch's "if you'd like to make a call" recording.

878-332-2999 Level 3 LD verification recording

878-332-2099 Goes straight to my switch's NIS recording

0

Share this post


Link to post
Share on other sites

Jman, it's funny how I only get various "things" after calling them (such as busy or reorder via SS7, getting an NIS recording via SS7, or getting a Long Lines recording from 121T) with the exception to the verification recording (332-2999).

 

SS7 Reroute instead of NIS.mp3

0

Share this post


Link to post
Share on other sites

Maybe your LD carrier is picking a different route every time.  These are intra-LATA calls for me so they're probably routing the same way every time when I dial them.

0

Share this post


Link to post
Share on other sites

Does the route that gives you a reorder only happen during the daytime on weekdays? For what it's worth, a 4ESS catches the cause codes for both those numbers when I try them. CBCAD on 2099, and YCDNGT after a pause on 2997. It could be you're just getting a 4ESS that doesn't have that particular recording in service right now.

 

Anyway, that's weird - I don't think I've ever heard a switch give a permanent signal recording in response to a cause code. I think the weirdest thing I've gotten is from the DMS-100 I'm on right now - some cause codes make it play a recording saying the feature I'm trying to use isn't available on my line. If I can find it, I'll post it here and stick up a recording.

 

Since this is the some numbers thread, here's a scan of a switch in Indiana

317-6840002 - Subscriber, ported to Brighthouse0003 - 105-type lookalike on POTS line? Possibly responds to MF0004 - Ringout0009 - rec, "We're sorry for the delay, your call is important to us. A representative will assist you as quickly as possible if you will please wait on the line. Thank you for your patience."0010 - CBCAD/CAC error rec, quickly spoken0011 - Cornbreath NIS rec, edited to take "We're sorry"0012 - Cornbreath CBCAD rec, via speakerphone0013 - Cornbreath dial 950 before CAC rec0014 - Cornbreath ACB rec0015 - Cornbreath CBCAD rec0016 - Cornbreath CBCAD from the phone you are using rec, via speakerphone0017 - Dialing 1/0 + NPA not necessary rec0018 - Hummy dial 1/0 + NPA first rec0019 - Hummy/weird compressor effect, Cornbreath dialing CAC first not necessary rec0020 - Echoey (2-wire?) trunk to other switch or PBX, ringout. Switchroom phone?0021 - Cornbreath dialing 950 before CAC not necessary rec0022 - Cornbreath CBCAD/call your operator to help you0023 - # cannot be reached from calling area rec0024 - Reorder via distant end0025 - YCDNGT via SS70026 - 100-type test0027 - 105-type lookalike0028 - Reorder via distant end, not via DMS?0029 - Reorder via distant end, not via DMS?0030 - Reorder via distant end, not via DMS?0031 - ACB via SS70032 - 105-type test0034 - Reorder via distant end, not via DMS?0035 - Busy signal via distant end0036 - 100-type test0037 - YCDNGT via SS70041 - Forwards to 684-0041 in your NPA via MCI LD, switch 2BF0042 - Business0044 - Ring x 1 + ACB cause code0045 - Reorder via distant end, not via DMS?0046 - Fax, on PBX? Ported to MCI Local0047 - Subscriber, ported to Uverse0048 - Business0050 - rec, "If you wish to talk to customer service, dial 12. If you need to report a power outage, dial 13. Thank you."0053 - rec, "All circuits are busy in the paging system. You are the next in line."0054 - rec, "Thank you for calling Community Hospital. I'm sorry, all of our attendants are busy right now. Please stay on the line, and someone will be with you as soon as possible."0056 - Blank announcement?0057 - Cornbreath rec, CBCAD/call your operator to help you0058 - Reorder via distant end, not via DMS?0059 - Ring x1 to reorder. Blank or broken announcement?0060 - Subscriber0061 - Business w/PBX, ported0065 - Ringout (CNAM: AT&T)0067 - Busy signal via SS70069 - Ringout0071 - Ringout (CNAM: AT&T)0072 - AIS report, DISCO0073 - Busy signal via SS70074 - Ringout0075 - CBCAD via SS70076 - CBCAD via SS70077 - CBCAD via SS70078 - CBCAD via SS70080 - Ringout (CNAM: AT&T)0082 - rec, "You have reached Ameritech repair service. All repair attendants are busy at this time due to severe weather in the 812 calling area. If you will stay on the line, your call will be answered in the order in which it was received. We're sorry for the delay."0083 - rec, "You have reached Ameritech repair service. All repair attendants are busy at this time due to severe weather in the 317 calling area. If you will stay on the line, your call will be answered in the order in which it was received. We're sorry for the delay."0084 - rec, "You have reached Ameritech repair service. All repair attendants are busy at this time due to severe weather in the 219 calling area. If you will stay on the line, your call will be answered in the order in which it was received. We're sorry for the delay."0090 - rec, "This is the Indianapolis power and light company. Our customer service hours are 7 AM to 6 PM Monday to Friday. Our customer service lines are temporarily busy. Please wait on the line, and your call will be answered in the same order it was received. Thank you for calling."0091 - rec, "The centralized scheduling department is now closed. The hours are monday through friday 7:30 am to 6 PM. If this is a stat or same day order or if you are calling on a Saturday or Sunday, please hang up and call the appropriate department."0098 - Ringout0099 - Business
0

Share this post


Link to post
Share on other sites

Here's some door phones or something at a Windstream CO in Arkansas. You'll have to make a noise every so often to keep it from hanging up on you. And yes, you can talk to anyone passing by;

 

501-906-0512

501-906-0516

0

Share this post


Link to post
Share on other sites

Here's some door phones or something at a Windstream CO in Arkansas. You'll have to make a noise every so often to keep it from hanging up on you. And yes, you can talk to anyone passing by;

 

501-906-0512

501-906-0516

These like that one phone number up in Canada?

0

Share this post


Link to post
Share on other sites

Exchange 516676

9900 Milliwatt

9901 All circuits are busy 086T

9902 NIS

9903 NIS

9904 NIS

9905 RNA

9906 NIS

9907 RNA

9908 RNA

9909 RNA

9910 Click / Dead Air (Maybe Loop)

9911 LD carrier access code needs to be proceeded by 950

9912 RNA

9913 RNA

9914 RNA

9915 RNA

9916 RNA

9917 NIS

9918 NIS

9919 NIS

9920 RNA

9921 RNA

9922 RNA

9923 RNA

9924 RNA

9925 RNA

9926 NIS

9927 NIS

9928 NIS

9929 NIS

9930 NIS

9931 RNA

9932 Milliwatt

9933 RNA

9934 RNA

9935 RNA

9936 RNA

9937 NIS

9938 RNA

9939 Busy

9940 NIS

9941 NIS

9942 NIS

9943 NIS

9944 NIS

9945 Milliwatt

9946 RNA

9947 RNA

9948 RNA

9949 RNA

9950 NIS

9951 NIS

9952 NIS

9953 NIS

9954 NIS

9955 Greenvale Garage (Most likely place they park their trucks)

9956 RNA

9957 RNA

9958 NIS

9959 NIS

9960 NIS

9961 RNA

9962 NIS

9963 RNA

9964 RNA

9965 NIS

9966 FAX

9967 NIS

9968 Dead Air

9969 NIS

9970 Busy

9971 NIS

9972 Fast Busy

9973 NIS

9974 NIS

9975 NIS

9976 Due to heavy calling to the exchange you are calling we cannot complete your call

9977 Due to an area code code change you have to dial 1+631

9978 RNA

9979 RNA

9980 RNA

9981 RNA

9982 RNA

9983 RNA

9984 RNA

9985 RNA

9986 NIS

9987 RNA

9988 RNA

9989 RNA

9990 RNA

9991 NIS

9992 NIS

9993 NIS

9994 RNA

9995 RNA

9996 RNA

9997 Busy

9998 NIS

9999 RNA

=============== Moderator's Note ===============

Thank you for using Binrev. This post has been moved as this thread is the more appropriate place for scans. No content has been edited and you will not receive any warning points. If you feel you are receiving this message in error, please hang up and send PM to a sysop. This is a recording. Two-one-M.

Edited by scratchytcarrier
0

Share this post


Link to post
Share on other sites

712-744-3000-3099 - This whole hundred block just pauses for a few seconds, and then lets out an eeiry hum. I'm guessing it's just an old DID block The Phone Company forgot about

The humming noise also seems to respond to input noise. If you are monitoring with earphones through an inter box, tap on the handset, blow into the mouthpiece or even throw DTMF at it. The hum goes away briefly (compander?) and you hear a little bit of echoey white noise. That and the connection delay makes me think these must be analogue wire carrier trunks of some sort.

EDIT ADD: I'll attach a recording demonstrating this. If you listen through headphones you'll hear the effects I described better (might not be very noticeable through speakers.) In this recording I'm mostly tapping on the microphone of my 2500 and blowing into it, connecting and disconnecting the handset rapidly and sending DTMF. I also knocked the switchhook around a little bit in the beginning, but it didn't really seem to do anything.

7127443000.wav

Edited by scratchytcarrier
0

Share this post


Link to post
Share on other sites

218-488-8888

From the same exchange as the "ask your mother to help you" error messages (2184880001) so I'm sure it has something to do with the humourous folks that run that phone company over in Minnesota.

0

Share this post


Link to post
Share on other sites

253-785-0549 Telemarketers Nightmare

516-759-9900 Milliwatt

516-759-9925  The LD access code must be proceeded with 950

516-759-9926  The Carrier Access code has not been selected

516-759-9927  Your call cannot be completed due to restrictions on the line or the incorrect carrier access code

516-759-9929 An carrier access code is requered to make this call.

516-759-9945 Millawatt line

516-759-9946 Fax

0

Share this post


Link to post
Share on other sites

Awesome, I'm glad to see some people are getting back into scanning. Here's kind of an interesting scan I did of the New Mexico TW DMS-500. Lemme know if you can figure out what those later numbers are.

 

505-338

1101 - Ringout
1102 - 100-type milliwatt
1103 - 100-type milliwatt
1104 - 102-type milliwatt
1105 - 105-type test
1106 - Ringout
1107 - Ringout
1108 - Echo test
1109 - Reorder via SS7
1110 - Ringout
1111 - EDRAM remote call forwarding prompt
1112 - Busy signal via SS7
1113 - Ported to mobile carrier
1117 - Fax. Ported?
1120 - John Doyle CBCAD
1122 - Dialing 1 not necessary rec
1123 - ACB rec
1124 - Permanent signal rec
1125 - YCDNGT
1126 - Dial 1/0 first rec
1127 - CBCAD from the phone you are using
1128 - YCDNGT
1129 - YCDNGT
1130 - Noot lady CBCAD
1131 - YCDNGT
1132 - YCDNGT
1133 - YCDNGT
1134 - CBCAD from the phone you are using
1135 - YCDNGT
1136 - rec, "Your service has been suspended. Please contact your TW Telecom business office."
1137 - rec, "The number you have dialed has been temporarily disconnected"
1138 - Pause, reorder via SS7
1139 - Ringout
1140 - Ported, business
1141 - Stock rec, "The last call to your telephone has been traced. If you want to take action, contact your police department. Please hang up now."
1142 - Stock rec, "The last call to your telephone cannot be traced. Please consult the introductory pages of your telephone directory for further instructions. Please hang up now."
1143 - rec, "Thank you for TW Telecom for your long distance carrier. 505-338."
1144 - rec, "Your service has been restricted."
1146 - SIT + ID "505-338". Blank announcement?
1147 - rec, "Please enter a code to remotely access a feature."
1148 - Busy signal via DMS
1149 - Reorder via DMS
1150 - Pause + disconnect?
1151 - Pause + error message via SS7?
1152 - Ringout
1153 - Ringout
1155 - Ringout bridge
1156 - Business
1157 - Ringout
1158 - Ringout
1159 - NIS message via 5ESS. Ported to Centurylink?
1161 - Fax
1162 - Ringout
1163 - Modem
1164 - Modem, connects silently on 7/E/1, 8/N/1
1165 - Ringout
1166 - Ringout
1167 - Ringout
1168 - Ported number, ringout?
1169 - rec, "I'm sorry, the voicemail system is down for maintenance."
1170 - Loud, weird modulated sound
1171 - Supes silently
1173 - Ported number, fax
1174 - Ported number, ringout
1175 - Silence w/o supe?
1177 - Ringout
1178 - Weird PSK noises?
1179 - Sine wave tone + silence
1180 - NIS message via other 5ESS w/lots of annc crosstalk. Ported to Centurylink?
1181 - Same as 1180
1182 - Same as 1180
1183 - Weird thingie. Begins call in loopback mode, possibly with delay. Responds to DTMF; * gives 3 sine wave tones, waits for five digits. # to confirm? 7x+ is invalid, 80000, 81xxx is valid. Something to do with the switch maybe?
1184 - Silence w/o supe
1186 - Thingie, starts with loopback, eventually goes to 1x burst of milliwatt and hangs up
1187 - Ringout
1189 - Fax
1190 - Ringout
1191 - Google voice subscriber
1192 - Ringout
1193 - Modem, Cisco router
1194 - Ringout
1195 - Ringout
1196 - Ringout
1197 - Reorder via DMS
1198 - DMS ring to Cisco Annunciator announcement, "We are currently closed. Please call back later."
1199 - ALBSNMOCPS0 (Sonus ID? Actually corresponds to CLLI of Comcast switch)

If you're interested in messing around with TW switches, the DMS-500s on the west coast like to put their test numbers in 11xx. The ex-Xspedius 5ESSes are typically 91xx, and I think the native TW 5ESSes are 99xx. There's also some Sonus switches on their network installed in the early, mid 2000s. No idea where any of their test numbers are, though.

1

Share this post


Link to post
Share on other sites

Are there still any telco newslines, or have they all been obsoleted by the Internets?

0

Share this post


Link to post
Share on other sites

I think it's been kinda broken for a while, but the Verizon eWeb voice portal claims to have a news function; 866-489-3932

0

Share this post


Link to post
Share on other sites

707-562-00X3,04,05,06,07,08,09,10,11,12.. foreign sounding (Pink Floyd) ring 2 times which goes to a reorder.... wtf?

707-562-9999 "This is a recording"

707-562-1010 Number changed announcement, I can hear a mechanical movement on the exchange and the last 4 digits of the numbers being announced, not on the "707" area code though probably because that never changes.  (faint wink at end? or am I imagining things in the sounds from announcement machines again?)

707-562-9090,92,93,4... - CBCAD sexy voice

707-562-9091 - fax

707-562-0120 - fax/carrier(?)

707-562-9099 - r/o

 

707-562 is a DMS-10S in Walnut Creek in the San Fran LATA (https://www.telcodata.us/view-switch-detail-by-clli?clli=WNCKCAGEDS0

http://www.phworld.org/switch/ntess.htm

 

heheh, I also inadvertently learned that 707-561's *69 does not honor *67...oops.

Edited by phonetrovert
0

Share this post


Link to post
Share on other sites

Nice! You might find more interesting stuff in 11xx, though. In any case, that's one of those TW DMS-500s.

 

heheh, I also inadvertently learned that 707-561's *69 does not honor *67...oops.

 

Yeah, some states do that where they'll let you call someone back, but they legally can't show you the number if there's a privacy bit. If anybody ever calls you back that way, you can just hang up on them.

 

843-913-0001 - Old school Verizon 411 branding announcement, complete with Darth Vader

0

Share this post


Link to post
Share on other sites

Nice! You might find more interesting stuff in 11xx, though. In any case, that's one of those TW DMS-500s.

 

 

 

heheh, I also inadvertently learned that 707-561's *69 does not honor *67...oops.

 

Yeah, some states do that where they'll let you call someone back, but they legally can't show you the number if there's a privacy bit. If anybody ever calls you back that way, you can just hang up on them.

 

843-913-0001 - Old school Verizon 411 branding announcement, complete with Darth Vader

that 843 number is sweet! I remember the James Earl Jones announcements, how long ago was that from?

 

1199 is a milliwatt, when it goes silent it seems to respond to DTMF

1150 is silent briefly then to reorder

1111 is silent long to reorder

1130,1,2,3,5, is a man "we're sorry, your call did not go through, will you please try your call again" twice then to reorder

1134 is a voicemail box..(1134 = hell :) )

1136 "Thank you for using TW telecom for your long distance provider"

1137,8,9 reorder

 

 

Didnt do the whole 11xx range, just played around a bit. Definitely did find some stuff I didnt hear yet in 11xx, thanks for the tip.

Edited by phonetrovert
0

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!


Register a new account

Sign in

Already have an account? Sign in here.


Sign In Now