HBX Networks Weekly WarDial.
Released March 9, 2004.
by hairball, hairball@usa.com

The following range was scanned for carriers:
1-800-200-0000 thru 1-800-200-9999

Found 35 Carriers Total.
     Found 3 BBS Systems.
     Found 3 PPP Sessions.
     Found 8 Network Devices

Found 2 Useful Passwordless Systems
     1-800-200-0724: SCO Unix with root access
     1-800-200-3264: Ascend Pipeline Server (has outgoing telnet)

The following scan was completed using ToneLoc 1.10 with an external Hayes 2400 Smart Modem.
HBX Feels that this is the best possible war dialing setup, as the Hayes 2400 can detect a wide
range of signal types and has the fastest handshake of any modem.  It also has the ability to hang
up and move on when it encounters voice.

After the scan was completed, we at HBX went thought the logs and connected to each of the carrier
numbers to form this report (with session logs).

For your safety, you may want to dial these numbers using AT&T's dial-around system.  Simply dial:

10-10-288-0#,,,, 1-800-200-XXXX#

This will cause an ANI fail and the calls will be harder to trace.  We use this for all of our
scanning, and it has gone unnoticed for over 30,000 calls (and climbing by the day!).
Oh yeah, this is free and in most cases doesn't ever show up on your bill.

Enjoy!

http://www.hbx.us/


----- 1-800-200-0244 ----------

Phone Company: AT&T
Phone Company: 1-800-222-3000

Details: PPP Session


----- 1-800-200-0261 ----------

Phone Company: AT&T
Phone Company: 1-800-222-3000

Details: PPP Session


----- 1-800-200-0280 ----------

Phone Company: AT&T
Phone Company: 1-800-222-3000

Details: Unknown, Probably PPP


----- 1-800-200-0295 ----------

Phone Company: MCI
Phone Company: 1-800-888-1800

Details: 2400 Baud, Unresponsive


----- 1-800-200-0451 ----------

Phone Company: AT&T
Phone Company: 1-800-222-3000

Details: BBS System

<LOG>

Welcome to TBBS!



Enter your FULL Name? mike
Searching User File ...
*** Invalid Logon, Retry

Enter your FULL Name? joe
Searching User File ...
*** Invalid Logon, Retry

Enter your FULL Name? tom
Searching User File ...



Welcome New User!

This system is still under development.  Please disregard most stuff you
see here until we're done putting the system together.

-More-
NO CARRIER

</LOG>

----- 1-800-200-0480 ----------

Phone Company: Sprint
Phone Company: 1-800-795-1004

Details: Unresponsive


----- 1-800-200-0497 ----------

Phone Company: AT&T
Phone Company: 1-800-222-3000

Details: Network Hardware

<LOG>

Welcome to 3Com Total Control HiPer ARC (TM)
Networks That Go The Distance (TM)

login:

</LOG>

----- 1-800-200-0563 ----------

Phone Company: AT&T
Phone Company: 1-800-222-3000

Details: Unknown, Gives "#", Does not appear to be actual root prompt

<LOG>

#

</LOG>


----- 1-800-200-0724 ----------

Phone Company: AT&T
Phone Company: 1-800-222-3000

Details: SCO UNIX Box, (root with blank password)

<LOG>

Password:
Login incorrect

Wait for login retry: .
login: root
Password:
Last successful login for root: Mon Mar 08 16:09:12 2004 on tty1a
Last unsuccessful login for root: Tue Oct 14 13:13:53 2003 on tty1a

                          SCO OpenServer(TM) Release 5

                  (C) 1976-1998 The Santa Cruz Operation, Inc.
                  (C) 1980-1994 Microsoft Corporation
                              All rights reserved.

                        For complete copyright credits,
                   enter "copyrights" at the command prompt.

you have mail
Terminal type is scoansi
# id
uid=0(root) gid=3(sys) groups=3(sys),0(root),1(other)
# uname -a
SCO_SV scosysv 3.2 5.0.5 i386
#

</LOG>


----- 1-800-200-0922 ----------

Phone Company: MCI
Phone Company: 1-800-888-1800

Details: 2400 Baud, Unresponsive


----- 1-800-200-1993 ----------

Phone Company: AT&T
Phone Company: 1-800-222-3000

Details: Unresponsive


----- 1-800-200-2623 ----------

Phone Company: Unknown
Phone Company: 1-877-973-7767

Details: Network Hardware

<LOG>

Welcome to 3Com's SuperStack II Remote Access System 1500

login:

</LOG>


----- 1-800-200-2834 ----------

Phone Company: DBA LCI International
Phone Company: 1-800-860-1020

Details: BBS System

<LOG>

Welcome to  NewsBBS11!


Enter your FULL Name: joe
JOE
Is this correct (Y/N)? Y
Sorry, but this is a closed system.
NO CARRIER

</LOG>

----- 1-800-200-2922 ----------

Phone Company: AT&T
Phone Company: 1-800-222-3000

Details:  Special Ringing, Unresponsive


----- 1-800-200-3264 ----------

Phone Company: MCI
Phone Company: 1-800-888-1800

Details: Unprotected Network Hardware, Dialin Server Control Console with telnet and rlogin

<LOG>

** Ascend Pipeline Terminal Server **

crl-ras-max> help
help
?                   Display help information
help                   "     "        "
quit                Closes terminal server session
hangup                 "      "       "       "
test                test <phone-number> [ <frame-count> ] [ <optional fields> ]
local               Go to local mode
remote              remote <station>
set                 Set various items. Type 'set ?' for help
show                Show various tables. Type 'show ?' for help
iproute             Manage IP routes.  Type 'iproute ?' for help
dnstab              Manage local DNS table.  Type 'dnstab ?' for help
slip                SLIP command
cslip               Compressed SLIP command
ppp                 PPP command
menu                Host menu interface
telnet              telnet [ -a|-b|-t ] <host-name> [ <port-number> ]
tcp                 tcp <host-name> <port-number>
ping                ping <host-name>
ipxping             ipxping <server-name>
traceroute          Trace route to host.  Type 'traceroute -?' for help
rlogin              rlogin [ -l user -ec ] <host-name> [ -l user ]
open                open < modem-number | slot:modem-on-slot >
resume              resume virtual connect session
close               close virtual connect session
kill                kill <session ID>
pptp                pptp <server-name>
l2tp                l2tp <server-name>
ara                 ARA command
crl-ras-max> telnet

telnet> open nova.hbx.us

Connecting to nova.hbx.us (151.201.137.32) ...
Escape character is '^]'
Connected

FreeBSD/i386 (nova.hbx.us) (ttyp0)

login:

</LOG>



----- 1-800-200-3372 ----------

Phone Company: AT&T
Phone Company: 1-800-222-3000

Details: Unknown, Responds with unviewable characters


----- 1-800-200-3527 ----------

Phone Company: DBA LCI International
Phone Company: 1-800-860-1020

Details: 1200 Baud, Unresponsive


----- 1-800-200-3531 ----------

Phone Company: DBA LCI International
Phone Company: 1-800-860-1020

Details: 1200 Baud, Unresponsive


----- 1-800-200-3939 ----------

Phone Company: Unknown
Phone Company: 1-877-973-7767

Details: Unresponsive


----- 1-800-200-4102 ----------

Phone Company: MCI
Phone Company: 1-800-888-1800

Details: *BUSY*


----- 1-800-200-4607 ----------

Phone Company: Business Telecom Inc
Phone Company: 1-800-849-2111

Details: Unresponsive


----- 1-800-200-4771 ----------

Phone Company: Allnet
Phone Company: 1-800-466-4600

Details: Network Hardware

<LOG>

User Access Verification

Username: cisco

Login Incorrect

Authentication Failed. Contact the System Administrator

NO CARRIER

</LOG>


----- 1-800-200-4960 ----------

Phone Company: AT&T
Phone Company: 1-800-222-3000

Details: Unknown, Identifies itself as "NDC AFT  1.00"

<LOG>

NDC AFT  1.00
LOGIN:admin
PASSWORD:
*ERROR 001* INVALID USERNAME OR PASSWORD
LOGIN:root
PASSWORD:
*ERROR 001* INVALID USERNAME OR PASSWORD
LOGIN:root
PASSWORD:
*ERROR 002* MAXIMUM LOGIN ATTEMPTS EXCEEDED.
DISCONNECTING

NO CARRIER

</LOG>


----- 1-800-200-5070 ----------

Phone Company: MCI
Phone Company: 1-800-888-1800

Details: Network Hardware

<LOG>

** Ascend TNT Terminal Server **


Login: admin
Password:
Unknow User


Login: admin
Password:
Unknow User


Login: root
Password:
Unknow User


NO CARRIER

</LOG>

----- 1-800-200-5717 ----------

Phone Company: Unknown
Phone Company: 1-877-973-7767

Details: Immediate Disconnection


----- 1-800-200-6166 ----------

Phone Company: AT&T
Phone Company: 1-800-222-3000

Details:

<LOG>

Starting SecurID Authentication...
User ID:
Access Denied
User ID: guest
Enter PASSCODE:
Access Denied
User ID: guest
Enter PASSCODE:
Access Denied
SecurID Authentication fails!

</LOG>


----- 1-800-200-6590 ----------

Phone Company: Unknown
Phone Company: 1-703-453-8500

Details: 2400 Buad, Unresponsive


----- 1-800-200-6714 ----------

Phone Company: Unknown
Phone Company: 1-877-340-2555

Details: Unresponsive


----- 1-800-200-7054 ----------

Phone Company: MCI
Phone Company: 1-800-888-1800

Details: Unresponsive


----- 1-800-200-7131 ----------

Phone Company: MCI
Phone Company: 1-800-888-1800

Details: Network Hardware

<LOG>

Username: cisco
Enter PASSCODE:

% Authentication failed.


User Access Verification

Username: cisco
Enter PASSCODE:

% Authentication failed.


User Access Verification

Username: admin
Enter PASSCODE:

% Authentication failed.

NO CARRIER

</LOG>


----- 1-800-200-7463 ----------

Phone Company: Unknown
Phone Company: 1-877-973-7767

Details: Unresponsive


----- 1-800-200-8114 ----------

Phone Company: IXC Long Distance
Phone Company: 1-800-994-9638

Details: BBS System, Functional, Identifies itself as "The Pi-2000  Electronic Data Interchange  BBS"
         Last entry made to front page was in December, 1993.

<LOG>

ClipBoard v2.07 - PI_NET_148

MSG: INTERROGATE WELCOME
Press <Escape> to enter BBS or wait 10 seconds:
                                               ClipBoard v2.07 - Released on Sa0
MSG: LOGON WELCOME1
MSG: LOGON WELCOME2

Do you want ANSI Graphics?([Return] = Y): (n)


   ZBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB?
   3333333333333333333333333333333333333333333333333333333333333333333333333
   3333210   IMMMM;  R     IMMMMM;  IMMMM;  IMMMM;  IMMMM;          01233333
   3333210   :    :  :           :  :    :  :    :  :    :  PI-Net  01233333
   3333210   LMMMM<  : DDD IMMMMM<  :    :  :    :  :    :          01233333
   3333210   :       :     :        :    :  :    :  :    :          01233333
   3333210   P       P     HMMMMM<  HMMMM<  HMMMM<  HMMMM<          01233333
   3333333333333333333333333333333333333333333333333333333333333333333333333
   @AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAY


What is your first name?

</LOG>


----- 1-800-200-8905 ----------

Phone Company: MCI
Phone Company: 1-800-888-1800

Details: Unknown, Connects and prints "ICA" over and over

<LOG>

ICAICAICAICAICAICAICAICAICAICAICAICAICA

</LOG>


----- 1-800-200-9724 ----------

Phone Company: AT&T
Phone Company: 1-800-222-3000

Details: Unresponsive


----- 1-800-200-9909 ----------

Phone Company: AT&T
Phone Company: 1-800-222-3000

Details: Unknown, Possibility Network Hardware

<LOG>

login: root
Password:
Authentication failure

login: root
Password:
Authentication failure

login: cisco
Password:
NO CARRIER

</LOG>


----- END OF LIST ----------
