Scan of 0800-591-XXX by Keltic Phr0st Started : Monday, 24/06/1996 at 00:19:52.21 Finished : Monday, 02/07/1996 at 08:14:00.00 Number Description ====== =========== 016 : PBX? [British Telecom Customer Relations] 022 : Integrated Services Message Manager 026 : Diverter 027 : Carrier : Tymnet X.25 Network! 028 : Answering Machine 031 : British Telecom Payphones, leave TN, NOF and and KN after tone * 046 : Abbey National Meridian Mail VMS 047 : Abbey National Meridian Mail VMS 051 : British Gas Helpline 052 : Accounting Office [British Telecom?] 053 : Answering Machine 055 : Street Lamp Reporting for Waverley District Council 056 : Street Lamp Reporting for Waverley District Council 057 : Emergency Services 058 : Street Lighting 068 : Diverter 069 : Diverter 070 : BT Answering Machine [Access Code : 11 ] 076 : BT Answering Machine [2 Digit Access Code] 077 : BT Answering Machine [2 Digit Access Code] 078 : BT Answering Machine for Bill Payments [2 Digit Access Code] 083 : Bill Ingram (?) 094 : Race Annoucements 115 : Bradford and Bingley Voice Mail System 118 : Ring Out 123 : Electro?? Electrical??? 126 : KE Mule Tools Security 128 : Number has been changed to - 0800-001-002 [British Gas CSs] 129 : Ring Out 131 : Rennie Systems 133 : Ford Motor Contracting / Recovery 136 : Some fucking Haulage firm 137 : Rudimentary Voice Mail System, Key # for Mailbox Selection off main 140 : Woodridge Haulage Co. 143 : Ring Out 144 : NRG Refrigeration Co. 145 : Not sure - uses DayLink though, recorded message, no MF 148 : Ring Out 150 : Ring Out 151 : Ring Out 155 : Ring Out 156 : Ring Out 160 : Ring Out 161 : Ring Out 162 : Fax Machine 163 : Newjers Taxi Firm 166 : Yorkshire Windows Sale's Enquiries [Answering Machine] 168 : Ring Out 169 : Ring Out 175 : Ring Out 178 : Some recorded message about flare gases - British Gas? 179 : Yorkshire Post Newspaper 180 : Ring Out 181 : Ring Out 182 : Answering Machine [2 digit Access Code] 183 : Ring Out 185 : Diverter -> Associated Newspapers Emergency Hotline 188 : Ring Out 191 : Diverts on Pickup to Cummins Engine Company 193 : Bradford and Bingley Voice Mail System 196 : Wincanton Transport 197 : Call Queuing system from HELL 198 : Call Queuing system from HELL (Diverts to the previous number) 202 : Some Joinery firm 203 : Jewish Womans Aid Answering Machine 205 : Answering Machine 206 : Man and Co. Answering Machine 208 : Ring Out 209 : Ring Out 213 : Fax Machine 215 : Bishop Scientific UK Limited 218 : MicroTech Security Limited 219 : Ring Out 221 : Robinsons Preservation Answering Machine 226 : Ring Out 228 : Ring Out 229 : Recorded Message courtesy of DayLink 230 : Ring Out 231 : Ring Out 232 : Ring Out 234 : British Telecom 235 : Ring Out 239 : Bradford Bakers 241 : BT Answering Machine [2 Digit Access Code] 242 : BT Answering Machine [Access Code : 12] 243 : Busy 244 : Ring Out 246 : Ring Out 248 : Busy 250 : Fax Machine 251 : Ring Out [ All these numbers connect ] 252 : Ring Out [ after a pause and a short ] 253 : Ring Out [ ... like the ] 254 : Ring Out [ Error Recorder? Methinks ] 255 : Ring Out [ I smell a diverter!!! ] 256 : Ring Out [ See below for more details... ] 257 : Ring Out [ ] 258 : Ring Out [ ] 259 : Swan Petroleum Meridian Voice Mail System 261 : Ring Out 262 : Ring Out 263 : Royal Mail CashTel? Bloke was 'not at liberty to discuss...' 268 : This is a messaging Service, *, Password, 4 digits 270 : Hmmm... Got some northern lass out of her bed! 272 : Carrier : AIX Version 3 [Unix System - Yummy] 273 : Ring Out 274 : Again, very tired sounding woman... 275 : Ring Out 281 : Answering Machine? VMS? Try again later... Some Travel Firm. 282 : This is a messaging Service, *, Password, 4 digits 284 : Ring Out, Diverts after nth ring, twice 285 : Same Answering Machine as the DT one Ray gave us... 287 : T. Robins Answering Machine 289 : Ring Out 290 : Voice Answer - at 6:48 am??? 291 : Ring Out 293 : Didn't quite catch the name... 294 : AA General Assistance? 295 : Ring Out 299 : Busy 307 : Ring Out 308 : North East Garages 312 : Ring Out 313 : Ring Out 315 : Ring Out 316 : Ring Out 320 : Ring Out 325 : Ring Out 328 : Ring Out 330 : Ring Out 331 : Pandora Haulage Company 332 : Answering Machine 334 : Ring Out 335 : Carrier : Does nothing - VERY Strange Connect 339 : UB Frozen and Chilled 342 : Yorkshire and Humberside Local Unit - Daylink Service 345 : Fax Machine 347 : Ring Out 349 : Ring Out 360 : Ring Out 362 : Pemia Catering? 363 : Ring Out 366 : Number has been changed - 0500-10-11-12 367 : Ring Out 368 : Ring Out 371 : Nestle Rowentree York Voice Mail System, *, #, Mailbox Number 373 : Answering Machine 378 : British Telecom Pension Centre 384 : Ring Out 385 : British Telecom Pension Centre 386 : Ring Out 389 : Kelso Repair Centre 391 : Diverter, Just goes to DayLink... 395 : First Carpets - Security 419 : Ring Out 500 : Northern Rock Direct Meridian Mail System 501 : Ring Out 511 : Ring Out 516 : Ring Out 518 : Ring Out 519 : Ring Out 521 : Ring Out 522 : Answering Machine, same model as 591-285 523 : Antigua and Co. Answering Machine [Access Code : 11] 525 : Ring Out 527 : Response Answering Machine? 530 : Sounded like "bleurgh bleurgh Police" when he picked up... 531 : Ring Out 532 : Ring Out 539 : Spring Blinds Answering Machine 541 : BrickDyne(?) Answering Machine 542 : Ring Out 544 : Ring Out 547 : Answering Machine 548 : BT Pensions Centre 552 : Ring Out 558 : Ring Out 563 : CandyWestGate Answering Machine, FUCKING LOUD RECORDING 565 : Ring Out 568 : Ring Out 569 : Ring Out 570 : Answering Machine 571 : "Hello, Buisness Systems?" 574 : Delay, then NU -> Possible International Routing 575 : Ring Out 579 : Ring Out 581 : Ring Out 585 : Ring Out 586 : Zucchini Bathroom's Answering Machine 588 : Ring Out 589 : Ring Out 590 : Ring Out 591 : Ring Out 595 : Diverts on First Ring to DayLink 600 : Sounds like Telecom Eirann... 602 : Message Desk System, # then ID 603 : Ring out 605 : Some Hospital Operations Cancellation Line... H0h0h0h ;) 607 : CourierCard summat or other - maybe the guy was foreign? 608 : Ring out 610 : Very pissed off sounding woman... 613 : Enviromental Agency Services Answering Machine [2 digit Access Code] 614 : Ring out 615 : Daylink Message 616 : Ring out 619 : Ring out with occaisonal supervisory tone in background - V. weird. 621 : Kiernan Paints 623 : Ring out 624 : Ring out 625 : Ring out 626 : Ring out 630 : Ring out 635 : Carrier : +++ [Issues the 1st Char. 4 times, then ATH0] 636 : Ring out 637 : RAC Rescue 638 : Ring out 640 : Ring out 641 : Ring out 646 : Answering Machine [Eurasia Crafts?] 648 : Ring out 649 : Ring out 650 : Birdseye Answering Machine [Response Model?] 651 : Superseal Answering Machine 657 : Rings Twice, Blasts Carrier, then waits - PBX? 658 : Rings Like a Dialtone, DTMF Chirp, AngleSea Helpline - MessageDesk 659 : NTS Helpline - Answering Machine 663 : Ring out 664 : Ring out 665 : MailLink, American Merchant Bank, in 'The City'. 667 : Ring out 669 : Ring out 673 : "Sorry, the helpline..." [Try again during office hours] 679 : Strange AM - automated voice like the 2 digit access code ones 681 : Fax machine 682 : Co-Operative Bank Helpline 683 : Ring out 686 : Ring out 687 : Ring out 688 : Tesco ClubCard Helpline 690 : Viking Hotel, BlackPool 692 : Ring out 694 : Ring out 696 : Standard Tel Banking Emergency Hotline, Password, 4 digits 697 : Blah Blah Blah Information Service answering machine 699 : Answering Machine 700 : Ring out 701 : Answering Machine 702 : Ring out 709 : Delay, then - BT Leeds 711 : Ring out 712 : Ring out 713 : Ring out 714 : Ring out 717 : Delay, then Ring out 720 : Some Medical Emergency Helpline - gives out 0113-222-5000 729 : SRG Architectural Products Answering Machine [accepts DTMF] 735 : Shaw's Garages 737 : Fiat House? 746 : Stirling Council Emergency Repairs 748 : Ring out 751 : Excel Logistics 752 : Ring out 756 : Ring out 759 : Bluh blah blah Water? 763 : Ring out 767 : Ring out 769 : Ring out 770 : Delay, then ring out [slightly lower cadence than any others...] 772 : Ring out 775 : Message Desk System? Sounds like it... [CellHire] 778 : Ring out 779 : Ring out 780 : Highland House Voice Mail System - Meridian Mail System 781 : BT transport depot - internal use only 782 : Carrier : Enter PASSCODE: [Unlimited attempts] 783 : Cathy Abbot at the Bard information line [Answering Machine] 784 : Fax Machine 787 : Ring out 789 : Ring out 791 : Ring out 793 : Air Products, Finland 794 : Ring out 798 : Lackenby(?) Health Centre, British Steel 799 : Ring out 801 : Ring out 803 : Ring out 804 : Ring out 811 : Fax Machine 812 : Fax Machine 813 : Fax Machine 814 : Fax Machine 815 : Fax Machine 818 : Answering Machine 820 : Ring out 821 : British Telecom Service Centre 822 : British Telecom Service Centre, Chester - Emergency Provisions 826 : Ring out 827 : SCE Answering Machine - full of bods wanting to buy Pentium systems 829 : Fax Machine 830 : Ring out 831 : Ring out 832 : Carrier : West Bromwich Building Society [Uses Data Lock 4000] 834 : VoiceMail System : Some insurance firm - *, 1234 [20] 835 : ChatShop Answering Machine 838 : [?] Doesn't ID itself... 839 : Fax machine 840 : Ring out 841 : Impact Servicing? 843 : Ring out 844 : Answering Machine - doesn't ID itself, very clear recording 845 : Ring out 847 : Ring out 849 : Ring out 852 : Ring out 854 : 'Hello, good morning, can I help you?' - Doesn't ID itself. [!] 855 : Carrier : Press , Please enter password. 857 : Busy 858 : Ring out 859 : Ring out 860 : Answering Machine, don't know who's.. 861 : Carrier : Asks for User ID and Password 862 : Fax Machine 864 : Diverts to cellular? Didn't catch the companies name. 868 : Ind. Unity of Oddfellows Answering Machine [2 digit Access Code] 869 : DT like ring - Ring out 870 : Ring out 872 : Delay then Ring out 873 : Ring out 874 : Pitney Bowes Answering Machine, same as 285 875 : Some pre-school thingy Answering Machine 876 : Warrington Watch - some crime prevention Answering Machine... 877 : Ring out 878 : Ring out 879 : The number called has been changed to 01706-705-100 880 : Very clearly spoken answering machine... 883 : Snack Factory confirmation line - Answering machine 884 : UDI Business 885 : Ring out 886 : Foxes Biscuits - think the access code is 13 [Answering Machine] 887 : Ring out 888 : SyraVision? Answering Machine 891 : Ring out 892 : Forwards to VMS / PBX thang, 3 digit numbers, I'll come back to it 895 : Ring out 896 : Ring out 897 : Ring out 902 : Ring out 903 : JLA Sales Office Answering Machine [2 digit access code] 904 : The number is changed to - 0191-419-1883 907 : Number is not available 908 : Another 2 digit access code answering machine 910 : Finney Hotel answering machine 911 : Leyland/Daf commercial breakdowns 914 : Ring out 919 : Leyland/Daf commercial breakdowns (?) 922 : Number has been changed to 0113-254-3994 924 : Ring out 925 : Ring out 928 : Ring out 934 : Ring out 935 : Ring out 939 : Didn't catch the company name 940 : Faberge consumer helpline [Answering machine] 942 : Ring out 945 : Some petrol firm... [Answering Machine : Access code : 12] 946 : Ring out 948 : Ring out 949 : Greenflag National Breakdown 957 : Ring out 961 : Ring out 962 : Ring out 964 : Express Housing? 972 : Ring out 973 : Carrier : Very similar to 635, 1200bps LAP-M 975 : British Telecom, didn't catch the department name 977 : Ring out 981 : Mydrin - Got a receptionist 985 : BT Business Connections [seem to be well clued up...] 987 : Some haulage company 988 : North East Communications 989 : 0150082? Some kid answered the phone... 991 : Some Banking service 993 : Leeds hospital fund 995 : Syntegra - The development team for BT. Bonus! 996 : The number has changed - 0500-591-996 997 : Eclipse Magnetics 998 : Ring out 999 : Ring out By Christ, my ear and fingers hurt after that one... You should try scanning out 1000 numbers by hand using pulse dialling sometime... OK, the range 25X seems to belong to BT Buisness Communications, based on information gleaned from trashing - One AM in particular belonged to BT and was logged at 591-257; By logical conclusion it would seem that several other BT Machines also occupy that range. One to definitely watch... Very strange exchange - 99.9% British with one or two tiny exceptions - lots of funny stuff like diverters, too. I must find more exchanges like this! Strangest of all was 591-4XX. Only one number Rings, and it rings out... OOoooh WeeeeH ooOOOO! Numbers 003 - 006 used to be Scottish Widows Direct Sales machines, but for some mysterious reason they all died before I'd had a chance to hack 'em. The Tymnet dialup was a surprise to say the least - I just hope it's not the one that all the lamers on DMBBS are talking about. At least it doesn't allow access to CIS or Delphi - Should prolong the active life of the Dialup! 591-031 : BT Payphones ====================== Hell, I may try engineering these guys for my local IPOMS number... as it stands, they ask for the telephone number, key number and Nature of the fault. I'll try em this week. 591-781 went like this: Them : Yeah. Me : Hello, is that Amdahl Computers? Them : No. This is a LinkLine Number. Where are you calling from? Me : Glasgow. Is this Amdahl? Them : How did you get this number? Me : Gee, I, err, must have misdialled. Sorry. Them : Yes, I think you got a digit wrong there. Goodbye. Several points to note about the above: 1. Most customers in the DDSN don't even know the name of the product theyr'e using. Do you say to your friends "I'll use my Relate 2000 to call you"? Nope. You just use the simple, generic, PHONE. Most people answer when questioned 'Errr, it's our 0800 / Freefone number'. LinkLine is a term I rarely hear used outside of BT these days... 2. The stroppy reaction when I rang through - Usually, the other end are falling over themselves to sell their product to you - after all, you are costing them money just by ringing them! No response at all. Their was absolutely -no- background noise at all, either. 3. Why the hell did she need to know where I got the number and where I was calling from? Call me paranoid, but this looks very hush-hush, esp. with the non-descript carrier next to it... Later investigation and subsequent social engineering revealed the number to be assigned to a British Telecom Transport Depot. The answering switchboard operator didn't have a clue what hit her, as I fired questions at her about circuit ID codes, DN translations and service databases. She eventually relented, and gave me another number : 140-554. Whether this is another LinkLine number or a very, very weird district code, [A big fucking massive CUNT of a Bus went past just as she was talking about this, and I'd already asked her for it two or three times...], I have no idea. I'll check that out tonight when I have the time. [Addendum - It aint a Linkline number...] ...And next up tonight, ladies and gentlemen, we have: Mailbox Hack of 0800-591-775: CellHire ====================================== Wait for message - Key *, spell by name using Company Directory Facility, and obtain the names of all the employees, ergo: Unlimited attempts at Mailbox guessing - Dumb system! Hit *, then ** to login to boxes. 100 : Gives general Announcement, call this number : 01904-633-003 102 : Hasn't been initialised 321 : ? 323 : Paul Gilmour 325 : Liz Shepard 326 : Mark Burnett 330 : Helen Possil 331 : David Gilbertson 332 : David Gayle 333 : Tim Williams 334 : ??? 335 : Bruce Mcleod 337 : Blank! 339 : Marketing Assistant 340 : Peter Burnett 341 : Alison Chipley 342 : Jane Rusling 353 : Andrew Scott 356 : ??? 357 : ??? 375 : ??? Lee Adee [ Possibly the people ] Tom Clayton [ who's mailboxes are ] Peter Briars [ marked as a ??? ] General Delivery [ ] Kevin Shepard [ ] Mailbox Hack of 0800-591-834 : Gulfplan Insurance ================================================= GolfPlan / GulfPlan(?) Insurance. Seems they ain't too popular with their customers, judging by the amount of shit they seem to be ranting about... eg: "Debit my card, and I'll call my solicitor". I counted 3 messages out of 4 similar to the above. To access the system: Key 2, 2, *, 1234 or 1, *, 1234 Top Level Menu ============== 1 Retrieve messages 2 Send messages 3 Distribution list 4 Mailbox settings 5 Extension settings 6 Transfer out to... 7 Administrative changes 1. Retrieve Messages ==================== 1 Replay 2 Save 3 Delete 4 Copy 6 Time and Date 7 Skip 2. Send Messages ================ Enter Mailbox number, then 1 to proceed [didn't mess with this!] You can get other boxes by selecting send [2] and then keying the box number, then aborting. Eg: Password for ALL Boxes is 1234 - Two digit boxes only! 20 Default greeting box [This one, seem to have admin privs] 21 Agents lines 22 Existing policy holders lines 23 New Buisness lines 24 Information Dept. 25 Marketing Dept. 26 Didn't have a greeting 27 Claims Dept. 3. Distribution List ==================== Enter 5 Mailboxes, * to finish mailbox entry, # to stop / abort. Uses voice prompting to start keying. 4. Mailbox Settings =================== 1 Edit greetings 2 Edit name 3 Edit password 4 Change mailbox mode 5 Notification 6 Date and Time settings 5. Extension settings ===================== 1 Change number 2 Screening 3 Holding 4 Edit second extension 6. Transfer options =================== 1 Transfer out to a Mailbox 2 Transfer out to another extension / number(?) 7. Administrative menu ====================== 1. Extension ------------ Add an extension Assign an extension to a mailbox 2. MailBox ---------- Add a Mailbox Turn a MailBox On/Off Class of Service Reset password Notification Notification tense Notification password Lamp light 3. Channel ---------- 1 Reset one channel 2 Reset all channels 4. Utilities ------------ 1 Message waiting lamp 2 Voice prompting 3 Time and Date It doesn't appear to allow you to transfer out anywhere, but I'll verify that later on... 591-838 ======= Doesn't identify itself - a bit of social engineering is in order. "Hello, is that Amdahl Computers?" "No, not at all." Hmmmm. 591-854 ======= Waaaah! This number held my line open! And it didn't ID itself! 591-945 ======= Hey hey hey! If the Esso pisses me off again, I can order 20,000 gallons of petrol for them! Well, after all that, I've got loads to do and work on - no fucking way is this getting released, I've put over a week of hard graft into it! It's certainly helped my SE skills - amazing how fast you think on your feet when your'e trying to get some info from a BT employee!