k-17-(8)-01

OoO=o=oOO=o=O=OoO=o=oOO=o=O=OoO=o=oOO=o=O=>
    OoO=o=oOO=o=O=OoO=o=oOO=o=O=OoO=o=oOO=o=O=>
                             OoO=o=oOO=o=O=>
:    -`-             -`-      OoO=o=oOO=o=O=>
;  _|_--oOO--(_)--OOo--_|_      OoO=o=oOO=o=O=OoO=o=oOO=o=O=>
   |   ˇ K-1ine Zine !   |      OoO=o=oOO=o=O=>
    ! issue 17, volume 8 ˇ      OoO=o=oOO=o=O=OoO=o=oOO=o=O=>
       ---------O^O----        OoO=o=oOO=o=O=OoO=o=oOO=o=O=>
;.              |__|__|       OoO=o=oOO=o=O=OoO=o=oOO=o=O=OoO=o=oOO=o=O=>
                  || ||       OoO=o=oOO=o=O=OoO=o=oOO=o=O=OoO=o=oOO=o=O=>
            ooO Ooo          OoO=o=oOO=o=O= OoO=o=oOO=o=O=OoO=o=oOO=o=O=>
                          OoO=o=oOO=o=O=OoO=o=oOO=o=O=LoveO=o=oOO=o=O=OoO=o=>
   ;`-.> July 2001 <=o=O=o=O=o=O


      'Eternal Response'


			Freedom is slavery.
			Ignorance is strength.
			War is peace.
                			-- George Orwell	
 
_____________________________________________________________________________


» .- Words from the Editor -. «                                              |

*: [-] Introduction .......................................... The Clone    :*
*: (-) Contact Information ................................... The Clone    :*
*: (-) Affiliate Web-Links ................................... Nettwerked   :*
*: (-) Advertisment .......................................... HackerSalvage:*
*: (-) Advertisment .......................................... FlipperSmack :*
*: (-) Advertisment .......................................... Nettwerked   :*
*: (-) Link of the Month ..................................... The Clone    :*
*: (-) K-1ine Mirrors ........................................ The Clone    :*
____________________________________________________________________________

» .- Documents -. «                                                          |

*: (x) 'Canadian COCOT Unrestricted Line Exploit' (update).... The Clone    :*
*: (x) 'Def Con 9, Destination: home' ........................ p_bang       :*
*: (x) 'Caller ID Basics' .................................... M. Slawson   :*
*: (x) 'Project: INWATS; 909-6000 | 909-9000 Suffix Skan' .... The Clone    :*
_____________________________________________________________________________

» .- Conclusion -. «                                                         |

*: [-] Credits ............................................... The Clone    :*
*: [-] Shouts ................................................ The Clone    :*
_____________________________________________________________________________ 

   
  - Introduction:

   Weoooo!@#, it's that time again - fo attdah issue of K-1ine 'zine. I've been
having a great fuckin' summer... went to Def Con (#9) once again this year
(see: www.nettwerked.net/Nettwerked_Movie.html) and met a ton of cool people,
and a couple uncool people. I helped Pinguino with the Flippersmack table
and we managed to help spread da word about Flippersmack AND K-1ine zine. The
minute I came back from Vegas, I hopped on my computer and checked my e-mail; had
an INBOX full of about 20 messages from the people I met -- checked the K-1ine mailing
list and saw that over 30 people had joined my list makin' my total subscriber number
to over 100. 

I apologize for not having a lot of articles for you all this month, but I suppose I
have an excuse. ;-)

Enjoy and contribute something!

- The Clone

--

-->

Contact Information;
=-=-=-=-=-=-==-=-=-=

Comments/Questions/Submissions: theclone@hackcanada.com

On IRC: irc.2600.net - #hackcanada, #teamphreak

Shoot me an ICQ message: (UIN) 79198218

Check out my site: (Nettwerked) http://www.nettwerked.net

-->

=-=-=-=-=-=-==-=-=-=
Affiliate Web-Links:
=-=-=-=-=-=-==-=-=-=

Damage Incorporated http://www.freeyellow.com/members6/damage-inc/index.html
Grass Hopper Unit   http://www.ghu.ca
Hack Canada         http://www.hackcanada.com
H410G3N-dot-com     http://www.h410g3n.com
Phreak BC           http://www.phreakbc.com
PyroFreak           http://www.multimania.com/pyrozine/index.html
Team Phreak         http://www.2600sucks.com/teamphreak
TRAPFONE            http://www.trapfone.com *

* = featured sites of Nettwerked Incorporated

-->                                               

<theclone> Hello my fellow Anti-social widget medelling 
           foilage covered birth canals!

-
 
                             -- Advertisment --


          +++              WWW.HACKERSALVAGE.COM               +++

           HackerSalvage.com is a non-profit website dedicated to
            keeping old hardware in circulation. Many of us have
           piles of it sitting around but can't just toss it out.
             Here you can post computer items for sale or post a
           want ad for items you are looking for. A perfect place
           to get rid of perfectly good junk.... and get some new
                         stuff to rebuild the pile.
          +++                                                  +++


-

Flippersmack AD -

"Flippersmack is a culturemag for a penguin generation. What does this
mean? Articles and reviews from your favorite writers. The low-down on
what's fresh in tech, comics, movies, and music. Wrapped in a style all
its own."

"We will strive to release Flippersmack every week; a taste of insanity to
inspire, inform, and entertain. From the creators of System Failure and
Avalanche, there's a new zine out on the net: FLIPPERSMACK!"

You can read the first twelve issues at:

http://www.nettwerked.net/flippersmack001.txt
http://www.nettwerked.net/flippersmack002.txt
http://www.nettwerked.net/flippersmack003.txt
http://www.nettwerked.net/flippersmack004.txt
http://www.nettwerked.net/flippersmack005.txt
http://www.nettwerked.net/flippersmack006.txt
http://www.nettwerked.net/flippersmack007.txt
http://www.nettwerked.net/flippersmack008.txt
http://www.nettwerked.net/flippersmack009.txt
http://www.nettwerked.net/flippersmack010.txt
http://www.nettwerked.net/flippersmack011.txt
http://www.nettwerked.net/flippersmack012.txt

DEF CON 9 UPDATE:

 Scavenger Hunt Winners
   The winners were the "A-Team" which consisted of Circuit, Random Dent,
   and Fantom. Second place was "Exxodus" with Siviak, Wolfe, Banshee,
   and Texorist. They won original artwork and items from different
   vendors at DefCon.

(... personally I thought the Exxodus team would win. After Banshee
 stripped completely naked in front of me (the judge) I would have
awarded it to her team. Anyways... congrats to the A-Team on the victory ...)

--

NEWS (July 20th) Def Con 9 coverage for 'Nettwerked: The Movie' is now
    	     online! Please download from the following mirrors:

       Disclaimer: If you're under 18, don't watch this video.
 Contains scenes of nudity and drunkin' hackers 'n' phreakers acting silly.

* Mirror #1: http://lumo.eghetto.ca/~theclone/defcon9.wmv 
 (the_p0pe's server, Nova Scotia, Canada, 4Mbps)
     
* Mirror #2: http://www.pstis.com/defcon9.wmv
 (h410g3n's server, Edmonton, Canada, 4Mbps)
    
* Mirror #3: http://www.h410g3n.com/defcon9.wmv
 (h410g3n's server, Leduc, Canada, 4Mbps)
     
* Mirror #4: http://www.plappy.com/defcon.wmv
 (Plappy's server, Edmonton, Canada, 2Mbps)

* Mirror #5: http://the.wiretapped.net/multimedia/defcon9.wmv
 (Wiretapped.net server, Sydney, Australia, 10Mbps)

Help mirror my video! 32.1MB's, 103 kb's / sec,
43:36 minutes, Windows Media Format; MPEG-4. 

Send all new mirror URLs to: theclone@hackcanada.com

		Official Nettwerked Movie web-page: 
	      www.nettwerked.net/Nettwerked_Movie.html
--

--=[ LINK OF THE MONTH ]=--

 Every month I post one really great "link of the month" on every issue
of K-1ine magazine. The link can be anything in the technology industry,
music scene, rave scene, punk scene, or even a good article you read on a
news site. I'll be taking submissions via e-mail, ICQ, or IRC right away;
so get your links in and maybe you'll see it in the next issue of K-1ine!

For the month of July, the link of the month is:

		http://www.hactivist.com/
		  Hacktivism at its best

[submitted by: The Clone]

-- 

K-1ine Mirrors:

        http://the.wiretapped.net/security/info/textfiles/k1ine/


"Wiretapped.net is an Australian site offering an archive of open
source software, informational and advisory textfiles and radio/conference
broadcasts covering the areas of network security, network operations,
host integrity, cryptography and privacy. We aim to become the largest
archive of this nature in the Asia/Pacific region through steady growth
of our archives and regular updates to them (most updated nightly).
We are proudly telehoused on a 10Mbit/sec connection by Connect.com.au using
OneGuard hardware donated by eSec Limited. The archive, along with its
sister site on the same machine, The AusMac Archive, generates between 10
and 60 gigabytes of outbound traffic daily. Wiretapped.net is hosted in
                        Sydney, Australia."

--




	-= [ Canadian COCOT Unrestricted Line Exploit ] =-


The Clone / 06.03.01

(updated: 07.07.01)

-=

[ index ]

- disclaimer -

- intro -

- documentation -

- research -

- outro -

- credit -

- contact info -

-=

  disclaimer: Do not attempt following exploit. Having telco security 
              after you isn't a fun experience. If you attempt this
              exploit and do get caught, I am in no way responsible.

  intro: This document has been written to point out another payphone
         vulnerability that I recently discovered while experimenting
         with two types of COCOTs: the Canada Payphone Corporation / AT&T
         'Elcotel Eclipse', and the Paytel Canada 'Protel'.


  documentation;

 For over two decades, payphone companies have been working ways to make
their payphones more profitable, user-friendly, and secure both in the area
of physical security (to protect from vandals) and line-security (to protect
from phone phreakers).

Starting in the late nineteen-eighties, payphone companies have started to be
successful in stopping the exploitation of their phones by people using
blueboxes, redboxes, beige boxes, and more recently NOS (not in service) 
INWATS numbers for unrestricted line dropping.

In western Canada, where Telus has a monopoly over the payphone market, Telus
has successfully been able to patch the unrestricted line problem. For example:
you pick up the receiver on a Telus payphone, dial a toll free number (800)
and the number you dialed happens to be out of service and hangs up on you;
the payphone will automatically recognize this and seize the phone line.
 
However, I've found that in the last two years that certain COCOTs have been
vulnerable to line seizing exploitation. In March of 2000, I found that a large
portion of the older AT&T Elcotel model 9520c's tend to have a lot of problems
with seizing not-in-service calls. Line seizing exploitation on Elcotel 9520C's
now looks as though it is virtually extinct because a majority of the older and
all of the newer 9520C's have now been fixed by Canada Payphone Corporation
(Elcotel's Canadian distributor).

"Just when AT&T, Elcotel, Canada Payphone Corporation, and Paytel Canada 
        thought the days of line seizing exploitation was over..."

1. In order to make this particular exploit work, you need to call an 
   out-of-service/hanging number such as this one: 1-800-909-0261.

2. After the call connects, you will hear the line hang for approximately
   15 seconds.

3. Now wait for another 5-10 seconds, and the line you called will hang 
   and supervise.

4. At this point the vulnerable phone you are on will try to seize the line
   and make you redial the number. Instead, you will get a normal dial tone.

5. Immediately after getting the dialtone on the phone, enter any area 
   code and any number you wish to call; local or long distance.

6. Your call will connect as if you had placed 25 cents into the payphone,
   and directly dialed the number.

 Q: "What does my caller identification information
     show on the received party's CID display?"
   
 A: If you called from any Paytel Canada COCOT, your CID info will show
    "Paytel Canada" and its assigned phone number. If you call from an
    Elcotel Eclipse COCOT, your CID information will show "Unknown Name"
    and its assigned phone number.

-

research:

-Recommended COCOT research sites-

(H/P)

www.nettwerked.net
www.hackcanada.com
www.ghu.ca

(Corporate)

www.elcotel.com
www.paytel.ca (.com)
www.protel.com

-Relevant COCOT images-

Elcotel Eclipse image: www.nettwerked.net/eclipse.jpg
Paytel 'Protel' image: www.nettwerked.net/paytel.jpg

-

outro:

This file just goes to prove that one of the many exploits
that worked on the payphones of yesterday DO still work on
newer payphones of today, and likely tomorrow if COCOT manu-
facturing and distribution companies don't get a clue as to
how their own payphone equipment works. 

How long is it going to be before these telecom companies
start adopting some sort of a standard for properly securing
POTS-copper lines? Until then, phreaks around the nation will
continue to exploit this ancient form of toll-fraud that hurts
these companies revenues by millions of dollars each fookin' year!

--

credit: Alan (780); thanks for the additional info. =]

contact info:
e-mail: theclone@hackcanada.com
irc: irc.2600.net #cpu (key), #hackcanada, #teamphreak
urls: www.nettwerked.net | www.2600sucks.com/teamphreak

-endz-


--


			
		  Def Con 9, Destination: home

by: p_bang


For those of you that haven't heard, (or have not seen the Nettwerked 
Movie), I seemed to have made an appearance at Defcon 9 this year.  During 
the drunken ordeal, my wallet got stolen, and this is the short version of 
how I managed to travel back to Canada.

Anyways, thanks to KK and Myself (rubi-con boys from Detroit),  I got to the 
airport Monday morning, and the fun began...


Got to the airport, had to get on my knees and BEG for a boarding pass. 
(they don't like you not having id)

Plane was delayed 3 hours because SanFran was fogged over

Had to beg AGAIN for a boarding pass to Vancouver, this time I was downright 
pissed off (they HATE giving boarding passes to anonymous people on 
international flights.)

plane was delayed 3 hours because of fog

plane's external lights were not working (electrical?) delayed another hour

plane's 'air-tight' seal on door was not working (can someone say 
"oxygen-mask"?) delayed another FIVE (5) HOURS!!!   -did I really want to 
board this flight? No.

Plane CANCELLED because of 'technical issues' - Thank God.

Finally, after midnight, we board, and take off.  This plane at least had 
headlights, and a door that wouldn't suck me out into the darkness.

around 2:00 or 3:00 - we land in Vancover.

Ooh, my favourite:  Customs.

"What do you mean, you don't have any ID?"
"My wallet got stolen, don't fuck with me. I'm not in the mood."
"Excuse me, while I call my boss, I've never handled this type of situation 
before"
"Go for it."
--five minutes later, and with security guards surrounding me--
"Sir, you are going to be checked into 'immigration'."
"Sure, but can your goons come with me?  I feel insecure without them."
"They are here to protect my Country."
"YOUR Country?  I pay for your salary.  Think about me when you get laid off 
because of cutbacks."
--five minutes of being 'escorted' later--
"Sir, where do you work?"
"Advanced Network Technologies."
"So, uh, you went to school for that here in Vancouver?"  -insert sarcastic 
tone here
"Nope.  I went to school in Alberta."  -(note: Vancouverites hate Albertan 
rednecks)
"Whatever. You are free to go"
--five minutes later.  goon-free.--

I walk up to the "high-security area" - basically where they shove stuff up 
your ass, put your socks through the x-ray machine, and do chemical 
analysis' of your hat.   I have two options: 1. Get fucked over by mounties 
with rubber gloves, x-ray machines, and screwdrivers, or 2. walk through the 
small door marked "diplomats".

A quiet alarm sounds when I open the door.

"Sir, do you know what this door is for?"
"It's late, I'm pissed-off, and Yes."
"Ok, let's see your papers"
(at this point, I hand the lady a sheet of paper that is used for flights 
into Canada. Written in the name is "Bill Gates" and no other line is 
written on, except for a large "APPROVED" stamp that immigration hastingly 
signed)

"Sir, what is in the bags?"
"High-security, I cannot tell you that"
"Ok, go ahead"

At this point, I could not help but laugh as I was escorted past the rubber 
gloves, metal-detectors, and goons.  I had gotten away with it, and was 
finally in freedom again.

The situation was perfect, then reality hit.

It is 4:00 in the morning.
I am in Vancouver (I live 3 hours away)
I have no wallet (stolen at defcon)
I have $15 US

Damn, what a bitch.

Anyways, I found a Television normally used for flight schedules, and being 
the hacker that I am, I decided to change the channel.

Shit. It worked.

So there I was, curled up in an airport with "Super Chanel" blaring into the 
darkened, empty, airport.  Good night.

8:00am I awaken. Tired, pissed-off, and hungry.

I go to buy 1. a pack of smokes (high-priority) 2. Coffee (just as high) 3. 
food (If you've ever met me, you'd think I didn't know what this stuff is)

Numbers 2 and 3 were not a problem.  Smokes, on the other hand, eluded me. 
For a while.

"Export-A Light, please"  (a Canadian brand of smokes)
"Let me see some ID, sir."  (What's with this 'Sir' thing?)
"Don't fuck with me. If you had any idea what I've been through these couple 
of days, I would not even be paying for them"
"If you don't show me some ID, you WON'T be paying for them, or receiving 
them, either!"

This was not good.

I turn around, hand the guy behind me $6, and say, in a sarcastic, 
pissed-off voice: "Export-A Light!"

30 seconds later, I was enjoying my cigarette, and making my large, 
cardboard sign that read:

"Wallet got stolen.
No money.
I want to go home.
Please help."

It only took me about half-an-hour, and many pissed off people later, to get 
the $53 I needed to get a bus-ride home.

Home, sweet, home.

--


		Caller ID Basics

Michael W. Slawson


	Executive Summary
	Introduction
	Background
	Specifics
	Caller ID On Call Waiting
	Conclusion
	Glossary
	Bibliography


		Executive Summary

Caller ID (CID), or Calling Number Delivery (CND) as it is sometimes called, came about as
an extension of Automatic Number Identification (ANI).  ANI is a method that is used by telephone
companies to identify the billing account for a toll call.  Although ANI is not the service that
provides the information for CID, it was the first to offer caller information to authorized parties. 
The CID service became possible with the implementation of Signaling System 7 (SS7).

The CID information is transmitted on the subscriber loop using frequency shift keyed (FSK)
modem tones.  These FSK modem tones are used to transmit the display message in American
Standard Code for Information Interchange (ASCII) character code form.  The transmission of the
display message takes place between the first and second ring.  The information sent includes the
date, time, and calling number.  The name associated with the calling number is sometimes
included also.  Since the time CID was first made available it has been expanded to offer CID on
Call Waiting (CIDCW) as well.  With CIDCW the call waiting tone is heard and the identification of
the second call is seen.

The purpose of this paper is to gather information from multiple sources dealing with CID
and to present that information in a manner such that the reader can gain a basic understanding of
CID and its operation.

		Introduction

Although several articles about Caller ID have been written, the most complete information
and definitions are still contained within Bellcore specifications.  By combining general information
from some of these articles with the specifics from the Bellcore specifications this paper will give a
better basic understanding of CID in one central source.

Caller ID is the identification of the originating subscriber line.  Although Caller ID is the
most common name for the service, a more appropriate name would be Calling Number
Identification since it is the directory number of the originating line that is used as the identification. 
In cases where the name and the number are sent, the name that is used is that which is
associated with the number in the directory listing.  The telephone company has no way of
knowing who the actual caller is.

The CID information is sent on the destination subscriber loop between the first and second
ring by means of two modem tones.  The information is transmitted serially in FSK mode using one
of the tones to represent a logic 1 (mark) and the other to represent a logic 0 (space).  Caller ID
uses the same frequencies, modulation type, and data format as the Bell type 202 modems[1].

The message consists of a Channel Seizure string followed by a Mark string and then the
caller information.  The information is sent in one of two formats.  The Single Data Message
Format (SDMF) contains the date, time, and calling number.  The Multiple Data Message Format
(MDMF) contains the date, time, calling number, and the name associated with that number. 
Optionally, the number and name fields may contain data indicating that the information has been
blocked by the caller or is unavailable.


		Background

The method for sending and displaying the CID information during a silent interval between
rings was invented by Carolyn A. Doughty.  This invention was filed for a United States Patent on
July 12, 1983.  It was assigned patent number 4,582,956 on April 15, 1986 with AT&amp;T Bell
Laboratories (now Lucent Technologies Incorporated) listed as the assignee.[2]

Caller ID was first offered in New Jersey in 1987 by New Jersey Bell[3].  The telephone
company was interested in trying to earn additional revenue from its investments in new high-speed
network signaling systems[4].  These new systems use a separate call data circuit based on the SS7
standard to handle the setup, termination, supervisory signals, and other data concerning a call.
This separate call data circuit can handle the processing of multiple calls very quickly and eliminates
certain types of toll fraud[5].

Prior to SS7 telephone companies used ANI for call billing purposes.  With only a few
exceptions, the billing information about the caller was not sent beyond the central office that
provided that caller's service.  The exceptions to this were authorized parties such as 911 services,
law enforcement agencies, and more recently 800 and 900 number subscribers.  Even today, ANI
is still used by these parties[5].  Since ANI is completely independent of CID it will deliver the
originating number even when the originator has blocked their number for CID purposes.

With the installation of the new SS7 systems it became practical to forward the calling
party's identification through the telephone network to the central office serving the called party. 
This aspect of SS7 is known as Calling Party Number Message (CPNM).  The CPNM includes the
calling party's telephone number, and whether or not the calling party wants their number blocked
from being seen by the called party.  Note that the CPNM is sent out on all telephone calls that are
made, regardless of whether or not the calling party wants their number blocked[5].

A major issue that came up with the offering of CID was that of privacy.  In several states
the implementation of CID was slowed by privacy advocate groups.  These groups claimed that CID
was an invasion of privacy.  In April of 1994, the Federal Communications Commission (FCC)
issued a ruling that established a national standard for CID and the delivery of the caller's number
into the switched network.  Local and long distance telephone companies that were equipped to do
so had to exchange CPNMs.  Along with this, the telephone companies had to offer blocking on a
per call basis so that the caller could block their number from being delivered to the called party[4]. 
The CPNM is still delivered to the final central office serving the end subscriber, but the number is
then blocked and the CID message marked as private.

		Specifics

Caller ID, as it is most commonly called, is a term that encompasses more than one type of
caller identification.  Calling Number Delivery refers to the most basic type of CID.
It is delivered in SDMF and includes the date, time, and calling number.  Calling Name Delivery (CNAM)
is an enhancement of Calling Number Delivery that adds the calling name and is sent in MDMF.

Bellcore has stated that a possible future objective may be to phase out the SDMF and use
only the MDMF.  In the event that SDMF is phased out, the name field in a MDMF message would
be left out for customers who subscribe to number delivery only[6].

The CID information is sent serially at a rate of 1200 bits per second using continuous-phase binary
frequency shift keying for modulation.  The two frequencies used to represent the binary states are
1200 Hz for the Mark (logic 1) and 2200 Hz for the Space (logic 0).  The data is sent asynchronously
between the first and second ring at a signal level of -13.5 dBm.  The level is measured at the central
office across a 900 ohm test termination[7].

Following a minimum of 500 ms after the end of the first ring, the sequence of transmission
begins with a Channel Seizure.  The Channel Seizure is a string of 300 continuous bits (250 ms) of
alternating &quot;0&quot;s and &quot;1&quot;s.  This string starts with a "0"; and ends with a
"1".  A Mark Signal of
180 mark bits (150 ms) is sent immediately following the Channel Seizure Signal.  The purpose of
the Channel Seizure Signal and the Mark Signal is to prepare the data receiver in the Customer
Premise Equipment (CPE) for the reception of the actual CID message[7].

Once the Channel Seizure and Mark Signals have been sent the CID information is then
transmitted starting with the Least Significant Bit (LSB) of the most significant character.
This is true for both SDMF and MDMF[6].  Each character in the message consists of 8 bits.
For displayable characters these bits represent a code defined by the American Standard Code for
Information Interchange.  When transmitted the character's 8 bits are preceded by a start bit
(space) and followed by a stop bit (mark) giving a total of 10 bits sent for each character.  The CID
information is followed by a checksum for error detection[7].  


		Figure 1 - Sequence Layout and Timing

The checksum word is a twos complement of the modulo 256 sum of each bit in the other
words of the message.  The Channel Seizure and Mark Signals are not included in this checksum. 
When the message is received by the CPE it checks for errors by taking the received checksum
word and adding the modulo 256 sum of all of the other words received in the message.  The
addition done by the CPE does not include the Channel Seizure and Mark Signals, nor does it
include the received checksum word.  The result of this addition should be zero to indicate that no
errors have been detected[8].

Figure 2 shows a CID message in SDMF.  For ease in describing the process of determining
the checksum, the decimal values will be used for the calculations.

Character             Decimal   ASCII  Actual
Description           Value     Value  Bits      (LSB)
-------------------   -------   -----  ---------------
Message Type (SDMF)       4            0 0 0 0 0 1 0 0
Message Length (9)       18            0 0 0 1 0 0 1 0
Month (December)         49       1    0 0 1 1 0 0 0 1
                         50       2    0 0 1 1 0 0 1 0
Day (25)                 50       2    0 0 1 1 0 0 1 0
                         53       5    0 0 1 1 0 1 0 1
Hour (3pm)               49       1    0 0 1 1 0 0 0 1
                         53       5    0 0 1 1 0 1 0 1
Minutes (30)             51       3    0 0 1 1 0 0 1 1
                         48       0    0 0 1 1 0 0 0 0
Number (6061234567)      54       6    0 0 1 1 0 1 1 0
                         48       0    0 0 1 1 0 0 0 0
                         54       6    0 0 1 1 0 1 1 0
                         49       1    0 0 1 1 0 0 0 1
                         50       2    0 0 1 1 0 0 1 0
                         51       3    0 0 1 1 0 0 1 1
                         52       4    0 0 1 1 0 1 0 0
                         53       5    0 0 1 1 0 1 0 1
                         54       6    0 0 1 1 0 1 1 0
                         55       7    0 0 1 1 0 1 1 1
Checksum                 79            0 1 0 0 1 1 1 1


		Figure 2 - A Caller ID message in SDMF

The first step is to add up the values of all of the fields (not including the checksum).
In this example the total would be 945.  This total is then divided by 256.  The quotient
is discarded and the remainder (177) is the modulo 256 sum.  The binary equivalent of 177
is 10110001.  To get the twos compliment start with the ones compliment (01001110), which
is obtained by inverting each bit, and add 1.  The twos compliment of a binary 10110001 is
01001111 (decimal 79).  This is the checksum that is sent at the end of the CID information.
When the CPE receives the CID message it also does a modulo 256 sum of the fields, however it
does not do a twos complement.  If the twos complement of the modulo 256 sum (01001111) is
added to just the modulo 256 sum (10110001) the result will be zero.

If the result is not zero then the message is discarded.  It is important to note that there is
no error correction in this method.  Even if the CPE were to notify the central office of errors, the
central office will not retransmit the information.  If an error is detected, the CPE receiving the
message should display an error message or nothing at all[8].  Although Bellcore SR-TSV-002476
recommends that the CPE display an error message if erroneous data is received, most CPE
manufacturers have elected to just ignore the errored message.

The content of the CID message itself depends on whether it is in SDMF or MDMF.  A
message in SDMF includes a Message Type word, a Message Length word, and the actual
Message words.  A message in MDMF also includes a Message Type word, a Message Length
word, and the actual Message words, but additionally includes Parameter Type and Parameter
Length words.  There are certain points within these messages where up to 10 Mark bits may be
inserted to allow for equipment delays in the central office[7].  These Stuffed Mark bits are
generally not necessary.

The Message Type word defines whether the message is in SDMF or MDMF.  It will be a
binary 00000100 (decimal 4) for SDMF or a binary 10000000 (decimal 128) for MDMF.  The
Message Length will include the number of characters in the message.  This length does not
include the checksum at the end of the message.  For SDMF the minimum length will be 9
characters.  The minimum length for MDMF will depend on whether the customer has subscribed to
CNAM service as well as CND.  In the case of CND only the minimum length will be 13 characters. 
If the customer also has CNAM then the minimum will be 16 characters.  In all three of the
minimums mentioned there will be no actual number or name delivered.  The field will be marked
either "O" (Out of area) or "P" (Private)[6].

Figure 3 shows an example of a minimum message layout for SDMF.  The number will not
be delivered because it has been blocked by the calling party.  The CPE will receive the date, time,
and a "P" to indicate that the caller's identification has been blocked at the caller's request.

Character             Decimal   ASCII   Actual
Description           Value     Value   Bits      (LSB)
-------------------   -------   -----   ---------------
Message Type (SDMF)       4             0 0 0 0 0 1 0 0
Message Length (9)        9             0 0 0 0 1 0 0 1
Month (December)         49       1     0 0 1 1 0 0 0 1
                         50       2     0 0 1 1 0 0 1 0
Day (25)                 50       2     0 0 1 1 0 0 1 0
                         53       5     0 0 1 1 0 1 0 1
Hour (3pm)               49       1     0 0 1 1 0 0 0 1
                         53       5     0 0 1 1 0 1 0 1
Minutes (30)             51       3     0 0 1 1 0 0 1 1
                         48       0     0 0 1 1 0 0 0 0
Private                  80       P     0 1 0 1 0 0 0 0
Checksum                 16             0 0 0 1 0 0 0 0


	 Figure 3 - A SDMF minimum message layout

Figure 4 shows an example of a message in MDMF that contains both a number and a name.


Character                    Decimal   ASCII   Actual
Description                  Value     Value   Bits      (LSB)
--------------------------   -------   -----   ---------------
Message Type (MDMF)            128             1 0 0 0 0 0 0 0
Message Length (33)             33             0 0 1 0 0 0 0 1
Parameter Type (Date/Time)       1             0 0 0 0 0 0 0 1
Parameter Length (8)             8             0 0 0 0 1 0 0 0
Month (November)                49       1     0 0 1 1 0 0 0 1
                                49       1     0 0 1 1 0 0 0 1
Day (28)                        50       2     0 0 1 1 0 0 1 0
                                56       8     0 0 1 1 1 0 0 0
Hour (3pm)                      49       1     0 0 1 1 0 0 0 1
                                53       5     0 0 1 1 0 1 0 1
Minutes (43)                    52       4     0 0 1 1 0 1 0 0
                                51       3     0 0 1 1 0 0 1 1
Parameter Type (Number)          2             0 0 0 0 0 0 1 0
Parameter Length (10)           10             0 0 0 0 1 0 1 0
Number (6062241359)             54       6     0 0 1 1 0 1 1 0
                                48       0     0 0 1 1 0 0 0 0
                                54       6     0 0 1 1 0 1 1 0
                                50       2     0 0 1 1 0 0 1 0
                                50       2     0 0 1 1 0 0 1 0
                                52       4     0 0 1 1 0 1 0 0
                                49       1     0 0 1 1 0 0 0 1
                                51       3     0 0 1 1 0 0 1 1
                                53       5     0 0 1 1 0 1 0 1
                                57       9     0 0 1 1 1 0 0 1
Parameter Type (Name)            7             0 0 0 0 0 1 1 1
Parameter Length (9)             9             0 0 0 0 1 0 0 1
Name (Joe Smith)                74       J     0 1 0 0 1 0 1 0
                               111       o     0 1 1 0 1 1 1 1
                               101       e     0 1 1 0 0 1 0 1
                                32             0 0 1 0 0 0 0 0
                                83       S     0 1 0 1 0 0 1 1
                               109       m     0 1 1 0 1 1 0 1
                               105       i     0 1 1 0 1 0 0 1
                               116       t     0 1 1 1 0 1 0 0
                               104       h     0 1 1 0 1 0 0 0
Checksum                        88             0 1 0 1 1 0 0 0


	Figure 4 - A CID message in MDMF

In Figure 4, if the number and name had not been included then the parameter types for
those fields would be different.  These alternate parameter types are used to signify that the data
contained in that parameter is the reason for its absence.  The parameter type for the number
section would have been a binary 00000100 (decimal 4) and the parameter type for the name
section would have been a binary 00001000 (decimal 8).  When the parameter type signifies that
the data contained is the reason for that fields absence, the parameter length is always a binary
00000001 (decimal 1).  If the reason for absence is that the calling party does not want their
number/name displayed then the parameter data would be a binary 01010000 (ASCII "P") for
Private.  If the reason for absence is that the information is just not available then the parameter
data would be a binary 01001111 (ASCII "O") for Out of area[9].  The number/name may not be
available if the calling party is not served by a central office capable of relaying the information on
through the network.

		Caller ID On Call Waiting

In carrying CID a step further and combining it with Call Waiting, a service commonly
called Caller ID on Call Waiting has been developed.  This feature is also sometimes called Calling
Identity Delivery on Call Waiting.  With CIDCW the identification of the party calling can now be
seen without putting the current call on hold.  CIDCW is done the same way as CID with only a
few exceptions.  One of those exceptions is that CIDCW only uses MDMF so the message type will
always be a binary 10000000 (decimal 128).

Since CIDCW will only take place if a call is already in progress there will never be a ring
signal preceding the message.  The channel seizure signal is not used with CIDCW either.  The
central office gets the CPE's attention by sending it a CPE Alerting Signal (CAS), a two-tone signal
described later.  If the customer's equipment is ready to receive the CID information, it responds to
the CAS by sending the central office an acknowledgment (ACK) signal.  Note that the CPE will
only respond to the CAS signal if it is the only extension that is off-hook[10].  If someone else is
involved in the call on another extension, the CPE will not send an ACK signal to the central office
because it cannot mute the second device.  Most manufacturers detect whether an extension is
off-hook by monitoring the line voltage.  If the line voltage drops below a certain point then it is
assumed that an extension is off-hook.  This can lead to problems in situations where the CPE is
placed on a very long loop.  The long loop reduces the voltage at the CPE and causes its detector
to continuously register an extension off-hook.  At least one manufacturer is getting around this by
designing the equipment to learn the line voltage that it should see during normal operation.  This is
done by taking the device off-hook two or three times so that it can register the normal off-hook
voltage.  If the voltage ever drops below this setting, it assumes that there is another extension
off-hook.  Once the central office sees the ACK signal it sends the FSK data[10].

When the CPE sees the CAS from the central office it mutes the telephone's handset
before sending the ACK and receiving the FSK data.  This act of muting serves two purposes. 

First, it keeps the telephone user from hearing the FSK signal.  But, more importantly it avoids
interference from speech and other noises that would be picked up by the telephone's microphone. 
The muting only has to take place on the end receiving the FSK data since before sending the CAS,
the central office momentarily removes audio to and from the far end of the current call.  The audio
is reconnected after the FSK data has been transmitted[8][10].

The sequence of events that displays the information about the caller begins when the
central office temporarily removes the far end party of the current call and sends a Subscriber
Alerting Signal (SAS) to the near end party.  The SAS is a single frequency of 440 Hz that is
applied for approximately 300 ms.  This is the tone that is heard when a call is in progress and call
waiting beeps to indicate a second call.  The SAS tone is mainly for the user and is not required for
the CPE to receive the CID information.  The SAS tone is followed by a CAS to alert the CPE that it
has CID information to send.  The CAS is a dual tone signal combination of 2130 Hz and 2750 Hz
that is 80 ms in length.  Once the CPE hears the CAS it mutes the handset of the telephone and
returns an ACK signal to the central office.  This ACK signal has a nominal tone duration of 60 ms
and is either a Dual-Tone Multifrequency (DTMF) &quot;A&quot; or a DTMF "D".  The DTMF "D" is the most
common ACK signal and it consists of the frequencies 941 Hz and 1633 Hz.  A DTMF "A" consists
of the frequencies 697 Hz and 1633 Hz.  Once the central office receives the ACK signal it in turn
sends the CID information[7][8][10].  The CPE un-mutes the handset as soon as it finishes
receiving the FSK signal.

A problem that is sometimes experienced with CIDCW is Talkoff.  Talkoff occurs when
the CPE falsely detects a CAS.  Speech can sometimes be interpreted by the CPE's detector as a
CAS from the central office[8].  When talkoff occurs both parties will hear a brief interruption in the
conversation and the party on the far end will hear the ACK signal that is sent to the central office
by the CPE.  When the handset is muted by a talkoff, the CPE will timeout and un-mute the
handset after waiting a set period of time for an FSK signal[11].  Bellcore SR-3004 specifies that
this timeout period should be no more than 501 ms from the end of the ACK signal.  A CPE's
detector will behave differently with different people because of the variations in each persons
voice and speech patterns.  Speech can also cause a valid CAS signal to not be recognized by the
CPE.  When this occurs, it is called a Talkdown.

The last difference between CID and CIDCW is that instead of being preceded by the 300
bits of Channel Seizure Signal and 180 bits of Mark Signal, as with standard CID, the Caller ID
message for CIDCW is only preceded by 80 bits of Mark Signal[8].  CIDCW still uses the checksum
just like CID.


		Conclusion

Although CID can be very useful in screening calls, it is not limited to this application
alone.  For example, a number of business contact-manager software packages have made it
possible to use CID to automatically bring up client information from a database and display it on
the screen of a personal computer (PC) before the call is answered.  Implementation of this requires
a CID hardware device with a data connection to the PC.  As time goes on we will see more and
more uses for CID.  Even though an "Out-of-Area" message may still seen occasionally, it will be
less and less often as the remaining telephone offices which are not yet setup for CID install the
necessary equipment.

Even as there are advances being made in the way Caller ID can be utilized, there are also
advances being made in the customer premise equipment.  Manufacturers are now coming out with
units that allow multiple extensions to be off-hook and still receive CIDCW.  Although the same
manufacturer's equipment must generally be used on all extensions, this does allow more than one
person to be on the same call and still see the identification of a waiting call.  Even the small office
key telephone systems are now offering CID and CIDCW capabilities so that caller information
coming in on a line can be displayed at all stations associated with that line.  Implementation does
not always mean replacing a currently installed telephone system.  Some manufacturers are
offering upgrades to existing hardware by simply replacing specific printed wiring cards.


		Glossary

ACK -- Acknowledgment
ANI -- Automatic Number Identification
ASCII -- American Standard Code for Information Interchange
BFSK -- Binary Frequency Shift Keying
CAS -- CPE Alerting Signal
CID -- Caller Identification or Caller ID
CIDCW -- Calling Identity Delivery on Call Waiting or Caller ID on Call Waiting
CNAM -- Calling Name Delivery
CND -- Calling Number Delivery
CPE -- Customer Premise Equipment
CPNM -- Calling Party Number Message
DTMF -- Dual-Tone Multifrequency
FCC -- Federal Communications Commission
FSK -- Frequency Shift Keying
ID -- Identification
LATA -- Local Access and Transport Area
LSB -- Least Significant Bit
LSSGR -- LATA Switching Systems Generic Requirements
MDMF -- Multiple Data Message Format
OSI -- Open Switch Interval
PC -- Personal Computer
SAS -- Subscriber Alerting Signal
SDMF -- Single Data Message Format
SPCS -- Stored Program Control Switching System
SS7 -- Signaling System 7


		Bibliography

[1] CASE, Publication 918-5477, "T202T Modem Installation and Operation Instructions", Issue 18, August 1987

[2] Internet Web Page, http://www.uspto.gov/, United States Patent And Trademark Office

[3] Anonymous source at Lucent Technologies Incorporated, Telephone interview, 3 December 1996

[4] Wally Roberts, "Caller ID: The Telephone's Status Quo Is Gone" http://www.wally.com/~wally_r/

[5] Wally Roberts, "Caller ID: The Technical 'A-B-Cs'" http://www.wally.com/~wally_r/caller_id/ABCs/index.html

[6] Bellcore, TR-NWT-000031, "CLASS (SM) Feature: Calling Number Delivery", Issue 4, December 1992 (a module of LSSGR, FR-NWT-000064)

[7] Bellcore, TR-NWT-000030, "Voiceband Data Transmission Interface Generic Requirements", Issue 2, October 1992

[8] Bellcore, SR-TSV-002476, "Customer Premises Equipment Compatibility Considerations for the Voiceband Data Transmission Interface", Issue 1, December 1992

[9] Bellcore, TR-NWT-001188, "CLASS (SM) Feature: Calling Name Delivery Generic Requirements", Issue 1, December 1991 (a module of LSSGR, FR-NWT-000064)

[10] Bellcore, TR-NWT-000575, "CLASS (SM) Feature: Calling Identity Delivery on Call Waiting", Issue 1, October 1992 (a module of LSSGR, FR-NWT-000064)

[11] Bellcore, SR-3004, "Testing Guidelines for Analog Type 1, 2, and 3 CPE as Described in SR-INS-002726", Issue 2, January 1995

--


----
DăTă;
Name: Project: INWATS; 909-6000 | 909-9000 Suffix Skan
Date: July 22, 2001
Type: INWATS suffix skan (manual)
Numbers skanned: 3000
NPA: 780
--
	
1-800-909-60xx
--------------
1-800-909-6000 - Frontier Speed-link
1-800-909-6001 - Global Crossings' Speed-link
1-800-909-6002 - Beeping in a Loop
1-800-909-6003 - AT&T Easy Reach 800
1-800-909-6008 - Frontier
1-800-909-6009 - AT&T Easy Reach 800
1-800-909-6010 - Bear-co Engineering
1-800-909-6011 - Frontier
1-800-909-6014 - AT&T Easy Reach 800
1-800-909-6021 - Answering Machine
1-800-909-6034 - Venus Number '4158'
1-800-909-6039 - Names on Trains
1-800-909-6040 - Toronto Loan Accounting
1-800-909-6041 - Terry Hemprey (voice mail)
1-800-909-6042 - All Circuits Busy
1-800-909-6043 - All Circuits Busy
1-800-909-6044 - Voice Mail of David Moore
1-800-909-6052 - AT&T Easy Reach 800
1-800-909-6055 - Budget Steel
1-800-909-6056 - "Hello?"
1-800-909-6059 - JD Digital
1-800-909-6060 - Promotional Interrupt Operator
1-800-909-6062 - AT&T Easy Reach 800
1-800-909-6069 - Regions Life & Health Customer Service Line
1-800-909-6070 - RD Barinko of Norwood's New Jersey
1-800-909-6074 - Voice/Numeric Message System
1-800-909-6084 - AT&T Easy Reach 800
1-800-909-6093 - High Tone (1000hz test number)
1-800-909-6097 - Bill Nycka; Backing Systems Division
1-800-909-6098 - AT&T Easy Reach 800


1-800-909-61xx
--------------

1-800-909-6101 - Don Johnson Associates
1-800-909-6102 - Call Did Not Go Through
1-800-909-6103 - Life Associates
1-800-909-6104 - AT&T Easy Reach 800
1-800-909-6105 - "Siron Sound" (Re-order signal)
1-800-909-6106 - Verizon Excell
1-800-909-6108 - Implay Systems
1-800-909-6109 - Working Solutions
1-800-909-6111 - 0303; Invalid Location
1-800-909-6112 - "Siron Sound" (Re-order signal)
1-800-909-6116 - United Postal Service (DISPATCH NUMBER)
1-800-909-6117 - Stone West 
1-800-909-6118 - AT&T Easy Reach 800
1-800-909-6120 - United States Olympic Committee Elite Athlete Health Insurance Program Information Line 
1-800-909-6121 - Southern Woman's Voice Mail Box
1-800-909-6123 - Family Counseling Services
1-800-909-6124 - Employee Assistance Program of Lousiana
1-800-909-6125 - "Siron Sound" (Re-order signal)
1-800-909-6126 - "Hello"
1-800-909-6129 - AT&T Easy Reach 800
1-800-909-6130 - Voice / Numeric Message System
1-800-909-6131 - Spectrum Pacific
1-800-909-6138 - Voice / Numeric Message System
1-800-909-6140 - AT&T Easy Reach 800 
1-800-909-6143 - Cruise Masters
1-800-909-6144 - Personal Assistant
1-800-909-6145 - AT&T Easy Reach 800
1-800-909-6160 - AT&T Easy Reach 800 
1-800-909-6161 - Bookshop
1-800-909-6164 - Modem Carrier
1-800-909-6165 - Associated Packaging
1-800-909-6166 - "Hello?"
1-800-909-6168 - AT&T Easy Reach 800
1-800-909-6169 - Associated Packaging
1-800-909-6171 - Associated Packaging
1-800-909-6172 - Numeric Messaging System
1-800-909-6173 - Associated Packaging
1-800-909-6174 - Associated Packaging
1-800-909-6176 - Associated Packaging
1-800-909-6179 - Associated Packaging
1-800-909-6180 - Associated Packaging 
1-800-909-6181 - Associated Packaging 
1-800-909-6182 - AT&T Easy Reach 800
1-800-909-6187 - Toll Free Disconnected Number
1-800-909-6194 - AT&T Easy Reach 800
1-800-909-6195 - Jerry 
1-800-909-6197 - AT&T Easy Reach 800
1-800-909-6199 - Sun Graph

1-800-909-62xx
--------------

1-800-909-6200 - Rejuvinique
1-800-909-6201 - Bill Gibson's Voice Mail Box
1-800-909-6205 - DENUS NOT ACTIVE, DENUS:6186 VRU:130 PORT: XX
1-800-909-6206 - "Hello?"
1-800-909-6213 - David Patterson's Voice Mail Box
1-800-909-6215 - Rebbie Thompson, District Attorney General's Office
1-800-909-6216 - Frontier
1-800-909-6217 - Assistant D.A. Tammy Hobby
1-800-909-6219 - Sidco
1-800-909-6222 - FAX On Demand, NBA
1-800-909-6224 - Numeric Message System 

1-800-909-6226 - AT&T Easy Reach 800
1-800-909-6229 - AT&T Easy Reach 800
1-800-909-6230 - Numeric Message System
1-800-909-6231 - Numeric Message System
1-800-909-6238 - AT&T Easy Reach 800
1-800-909-6245 - Call Distribution Number (CDN)
1-800-909-6246 - AT&T Easy Reach 800
1-800-909-6248 - Personal Identification Code System
1-800-909-6259 - Micheal Mason, Independent Life Force Representative
1-800-909-6262 - Sean (he wanted to help me)
1-800-909-6263 - Basement Water Pricing
1-800-909-6264 - "Good afternoon?"
1-800-909-6265 - Antiques
1-800-909-6266 - Interrupt Operator
1-800-909-6268 - Voice Mail / Fax Line
1-800-909-6272 - Stain Safe Company
1-800-909-6274 - AT&T Easy Reach-800
1-800-909-6275 - AT&T Easy Reach-800
1-800-909-6277 - Mars International and Supply
1-800-909-6279 - Entertainment Centre (phone pr0n)
1-800-909-6281 - Brad
1-800-909-6282 - Automatic Voice Message System (Acct: 7734866632)
1-800-909-6283 - "All Circuits Busy" (DTMF '1' played)
1-800-909-6288 - AT&T Easy Reach 800
1-800-909-6293 - Personal Assistant
1-800-909-6294 - Silence (muffled voices in background)


1-800-909-63xx
--------------

1-800-909-6301 - AT&T Easy Reach 800
1-800-909-6307 - Voice Mail Box (ACCT: 14088507354)
1-800-909-6311 - Global-Crossing Conferencing
1-800-909-6320 - AT&T Easy Reach 800
1-800-909-6325 - Personal Assistant
1-800-909-6332 - AT&T Easy Reach 800
1-800-909-6334 - FAX
1-800-909-6335 - AT&T Easy Reach 800
1-800-909-6341 - Luke Folds, Millennium-3 Financial Group
1-800-909-6343 - Modular Design Technologies
1-800-909-6344 - National Blind and Wallpaper Factory
1-800-909-6347 - FAX
1-800-909-6348 - FAX
1-800-909-6350 - AT&T Easy Reach 800
1-800-909-6353 - AT&T Easy Reach 800
1-800-909-6372 - First Star
1-800-909-6373 - United Clocks
1-800-909-6374 - Tom Catral's Voice Mail Box
1-800-909-6380 - Results 2000
1-800-909-6382 - Neda Group
1-800-909-6383 - KCL Financial Group
1-800-909-6384 - Susan's Voice Mail Box
1-800-909-6386 - Mule Hide
1-800-909-6387 - AT&T Easy Reach 800
1-800-909-6388 - Modem Carrier
1-800-909-6390 - Error (PROGRAMMING: 732-920-4900)
1-800-909-6391 - Error (PROGRAMMING: 732-920-4900)
1-800-909-6395 - Richard Simmons Messaging Service


1-800-909-64xx
--------------

1-800-909-6410 - AT&T Easy Reach 800
1-800-909-6414 - Pen Schmeidt Message Service
1-800-909-6418 - Global Crossings Speedlink [4 digit # got me a carrier]
1-800-909-6423 - AT&T Easy Reach 800
1-800-909-6426 - AT&T Easy Reach 800
1-800-909-6427 - Four Seasons Sunrooms
1-800-909-6428 - AT&T Easy Reach 800
1-800-909-6430 - Advanced PCS Members Services
1-800-909-6433 - AT&T Easy Reach 800
1-800-909-6436 - Member Services
1-800-909-6439 - FAX
1-800-909-6443 - MCI WORLDCOM PROGRAM: Expired
1-800-909-6446 - AT&T Easy Reach 800
1-800-909-6448 - MCI WORLDCOM PROGRAM: Expired
1-800-909-6449 - MCI WORLDCOM PROGRAM: Expired
1-800-909-6451 - MCI WORLDCOM PROGRAM: Expired
1-800-909-6452 - Millicron Shareholder Direct (NYSE: MZ)
1-800-909-6453 - AT&T Easy Reach 800
1-800-909-6455 - Hanging Line (exploitable)
1-800-909-6456 - AT&T Easy Reach 800
1-800-909-6457 - MCI WORLDCOM PROGRAM: Expired
1-800-909-6460 - National Teleconference "parts services"
1-800-909-6461 - P.P.D.
1-800-909-6466 - AT&T Easy Reach 800
1-800-909-6468 - Fresh Breath Clinic
1-800-909-6469 - AT&T Easy Reach 800
1-800-909-6470 - Donor Information Centre
1-800-909-6471 - Action Sports Image
1-800-909-6472 - Minnisota Institute for Sustainable Agriculture
1-800-909-6473 - Action Sports Image
1-800-909-6480 - "please wait..."
1-800-909-6481 - "please wait..."
1-800-909-6485 - "please wait..."
1-800-909-6486 - "please wait..."
1-800-909-6487 - "please wait..."
1-800-909-6490 - FAX
1-800-909-6491 - MCI WORLDCOM PROGRAM: Expired
1-800-909-6498 - MCI WORLDCOM PROGRAM: Expired


1-800-909-65xx
--------------

1-800-909-6501 - Golden Sun
1-800-909-6502 - "Siren sound" (Re-order signal)
1-800-909-6503 - Macoy's Enterprise (Telecommunications Specialist)
1-800-909-6506 - MCI WORLDCOM PROGRAM: Expired
1-800-909-6507 - AARP Service From RPS
1-800-909-6509 - FAX
1-800-909-6512 - "Hello?"
1-800-909-6515 - AT&T Easy Reach 800
1-800-909-6516 - Hello Boysey (Asks for 4 digit PIN)
1-800-909-6517 - 'Audix' Voice Mail Box
1-800-909-6518 - 'Audix' Voice Mail Box
1-800-909-6519 - 'Audix' Voice Mail Box
1-800-909-6520 - 'Audix' Voice Mail Box
1-800-909-6524 - AT&T Easy Reach 800
1-800-909-6527 - Convision Air Convey Corporation
1-800-909-6528 - Hoe's Containers
1-800-909-6530 - "The Shade House"
1-800-909-6534 - Fashion and Tool Supply
1-800-909-6537 - Goodman Financial Group
1-800-909-6539 - AT&T Easy Reach 800
1-800-909-6547 - JNL Warranty Post
1-800-909-6548 - Ron-Son Foods
1-800-909-6549 - "Personal Identification Number"
1-800-909-6554 - AT&T Easy Reach 800
1-800-909-6556 - File Maker Incorporated
1-800-909-6557 - MCI WORLDCOM PROGRAM: Expired
1-800-909-6558 - Compu-Case
1-800-909-6561 - MCI WORLDCOM
1-800-909-6563 - AT&T Easy Reach 800
1-800-909-6564 - "i24by7.com"
1-800-909-6567 - High-Tone
1-800-909-6568 - Invalid Number
1-800-909-6572 - Numeric Message System
1-800-909-6573 - AT&T Easy Reach 800
1-800-909-6574 - Numeric Message System
1-800-909-6576 - Numeric Message System
1-800-909-6577 - Numeric Message System
1-800-909-6578 - Numeric Message System
1-800-909-6579 - Numeric Message System
1-800-909-6581 - Numeric Message System
1-800-909-6582 - Numeric Message System
1-800-909-6583 - Numeric Message System
1-800-909-6584 - Dolf Balba
1-800-909-6585 - AT&T Easy Reach 800
1-800-909-6588 - "Please Enter Your PIN"
1-800-909-6589 - AT&T Easy Reach 800
1-800-909-6591 - "Please Enter Your PIN"
1-800-909-6592 - KJ
1-800-909-6594 - AT&T Easy Reach 800
1-800-909-6595 - Beeping In a Loop (re-order signal)
1-800-909-6597 - AT&T Easy Reach 800
1-800-909-6599 - Datebook Publishing

1-800-909-66xx
--------------

1-800-909-6601 - Willy Fabrication & Erection Company
1-800-909-6603 - Century Hillside, blah blah blah
1-800-909-6604 - HLM Electronics Sales Dept.
1-800-909-6605 - Hanging Line (exploitable)
1-800-909-6606 - AT&T Easy Reach 800
1-800-909-6608 - Calling Area
1-800-909-6622 - Barkley Financial
1-800-909-6625 - Roger Casper's Voice Mail Box
1-800-909-6626 - Numeric Message System
1-800-909-6627 - Modem Carrier
1-800-909-6630 - Modem Carrier
1-800-909-6632 - AT&T Easy Reach 800
1-800-909-6634 - Erin
1-800-909-6636 - Amnex USA Incorporated
1-800-909-6637 - Market Packs
1-800-909-6645 - Credit IQ Hotline (ANAC NUMBER)
1-800-909-6647 - Travel Time
1-800-909-6648 - Unstarted Program
1-800-909-6654 - DIV Corporation
1-800-909-6659 - AT&T Easy Reach 800
1-800-909-6661 - John Lumber
1-800-909-6664 - SAS
1-800-909-6665 - Conference Calling Centre
1-800-909-6667 - Scotia Bank National Retail Credit Centre
1-800-909-6670 - Trinky Transport
1-800-909-6673 - Numeric Message System
1-800-909-6675 - Calling Area
1-800-909-6677 - FAX
1-800-909-6678 - Sprint Canada
1-800-909-6679 - 716-833-7005; Disconnected
1-800-909-6680 - AT&T Easy Reach 800
1-800-909-6684 - AT&T Easy Reach 800
1-800-909-6687 - 919-850-0044 changed to 919-261-8401
1-800-909-6690 - AT&T Easy Reach 800
1-800-909-6697 - AT&T Easy Reach 800
1-800-909-6699 - AT&T Easy Reach 800


1-800-909-67xx
--------------

1-800-909-6700 - Convergys
1-800-909-6710 - Hanging Line (exploitable)
1-800-909-6714 - Digital Pager
1-800-909-6715 - All Circuits Busy
1-800-909-6716 - AT&T Easy Reach 800
1-800-909-6717 - Personelle Executive Offices
1-800-909-6718 - Protection Plus
1-800-909-6719 - "Hello?"
1-800-909-6723 - "Hello?" (redneck voice mail)
1-800-909-6724 - Charity Services
1-800-909-6725 - Acidic Exchange Systems Plus
1-800-909-6726 - AT&T Easy Reach 800
1-800-909-6727 - MSAS
1-800-909-6729 - "Hello?"
1-800-909-6730 - FAX
1-800-909-6731 - The Handwriting Hotline
1-800-909-6732 - The Nine Good Habits Hotline
1-800-909-6733 - Reliable Customer Service
1-800-909-6734 - "Please Hang Up And Try Your Call Again!"
1-800-909-6737 - High-Tone
1-800-909-6738 - High-Tone
1-800-909-6741 - "Hello?"
1-800-909-6743 - AT&T Easy Reach 800
1-800-909-6744 - Voice Messaging Service; BOX: 8009096744
1-800-909-6749 - Fone-Pr0n
1-800-909-6750 - Bob Carpenter's Voice Mail Box
1-800-909-6751 - Al's Express
1-800-909-6752 - AT&T Easy Reach 800
1-800-909-6758 - AT&T Easy Reach 800
1-800-909-6759 - Barb-B-Gee Graphics
1-800-909-6762 - AT&T Easy Reach 800
1-800-909-6765 - Hanging Line (exploitable)
1-800-909-6766 - Virtual Voice
1-800-909-6767 - AT&T Easy Reach 800
1-800-909-6770 - AT&T Easy Reach 800
1-800-909-6772 - Marketing Specialists
1-800-909-6775 - AT&T Easy Reach 800
1-800-909-6776 - Altel Customer
1-800-909-6777 - TD Waterhouse
1-800-909-6779 - AT&T Easy Reach 800
1-800-909-6781 - High Tone
1-800-909-6782 - Numeric Message Service
1-800-909-6784 - AT&T Easy Reach 800
1-800-909-6786 - Call Cannot Be Completed
1-800-909-6788 - AT&T Easy Reach 800
1-800-909-6790 - Community Health Partners
1-800-909-6792 - Global-Crossing Conferencing
1-800-909-6795 - Communian
1-800-909-6796 - Global-Crossing's Speedlink

1-800-909-68xx
--------------

1-800-909-6800 - "Call Centre"
1-800-909-6808 - AT&T Easy Reach 800
1-800-909-6809 - AT&T Easy Reach 800
1-800-909-6813 - RCI; Market Vacation Club
1-800-909-6814 - Answering Machine
1-800-909-6815 - Holiday Inn; Orange County
1-800-909-6816 - AT&T Easy Reach 800
1-800-909-6818 - "Hello?"
1-800-909-6823 - Hanging Line (exploitable)
1-800-909-6827 - Suretrade (www.suretrade.com)
1-800-909-6836 - AT&T Easy Reach 800
1-800-909-6838 - Beeping In a Loop (re-order signal)
1-800-909-6839 - AG Edwards Delmaro
1-800-909-6842 - Montana Electric
1-800-909-6851 - SkyTel Voice Mail System
1-800-909-6852 - SkyTel Voice Mail System
1-800-909-6853 - AT&T Easy Reach 800
1-800-909-6854 - SkyTel Voice Mail System
1-800-909-6855 - Adrian Martinaz; Regional Director
1-800-909-6856 - SkyTel Voice Mail System
1-800-909-6857 - SkyTel Voice Mail System
1-800-909-6858 - SkyTel Voice Mail System
1-800-909-6859 - SkyTel Voice Mail System
1-800-909-6860 - SkyTel Voice Mail System
1-800-909-6867 - SkyTel Voice Mail System
1-800-909-6868 - Telemarketing Agency
1-800-909-6870 - SkyTel Voice Mail System
1-800-909-6871 - SkyTel Voice Mail System
1-800-909-6873 - GE Capital Morgage
1-800-909-6878 - AT&T Easy Reach 800
1-800-909-6879 - SkyTel Voice Mail System
1-800-909-6887 - "Hello?" - Howard Black
1-800-909-6888 - Household Financial Services
1-800-909-6890 - SkyTel Voice Mail System
1-800-909-6895 - SkyTel Voice Mail System
1-800-909-6896 - SkyTel Voice Mail System
1-800-909-6897 - Modem Carrier - "PSystem AdministratorPCANYWHERE3"
1-800-909-6899 - CDS Raver And Security

1-800-909-69xx
--------------

1-800-909-6901 - Offices of McCaffine and Whitner Inc.
1-800-909-6902 - Sunny Bars
1-800-909-6903 - AT&T Easy Reach 800
1-800-909-6905 - "Hello?"
1-800-909-6922 - SkyTel Voice Mail System
1-800-909-6923 - Lenon Lion Inn
1-800-909-6926 - Tax Yoshida with CPS
1-800-909-6927 - Sunset Communications
1-800-909-6928 - SkyTel Voice Mail System
1-800-909-6933 - Piesoft Consulting
1-800-909-6934 - SkyTel Voice Mail System
1-800-909-6935 - SkyTel Voice Mail System
1-800-909-6936 - SkyTel Voice Mail System
1-800-909-6938 - SkyTel Voice Mail System
1-800-909-6939 - "Out-of-Service 800 #" - (exploitable)
1-800-909-6940 - SkyTel Voice Mail System
1-800-909-6941 - SkyTel Voice Mail System
1-800-909-6942 - SkyTel Voice Mail System
1-800-909-6943 - SkyTel Voice Mail System
1-800-909-6944 - Modem Carrier
1-800-909-6945 - SkyTel Voice Mail System
1-800-909-6947 - SkyTel Voice Mail System
1-800-909-6948 - SkyTel Voice Mail System
1-800-909-6949 - SkyTel Voice Mail System
1-800-909-6951 - SkyTel Voice Mail System
1-800-909-6952 - SkyTel Voice Mail System
1-800-909-6953 - AT&T Easy Reach 800
1-800-909-6954 - FAX
1-800-909-6955 - Bell Atlantic Communications (Verizon Long Distance)
1-800-909-6957 - SkyTel Voice Mail System
1-800-909-6958 - SkyTel Voice Mail System
1-800-909-6962 - AT&T Easy Reach 800
1-800-909-6963 - Phone Pr0n - Norcom Communications
1-800-909-6964 - AT&T Easy Reach 800
1-800-909-6966 - Stadium Associates Insurance
1-800-909-6968 - AT&T Easy Reach 800
1-800-909-6970 - "Four Digit Group ID, Four Digit Job ID"
1-800-909-6972 - FAX
1-800-909-6976 - AT&T Easy Reach 800
1-800-909-6979 - "Hello?"
1-800-909-6981 - Modem Carrier - "Annex Command Line Interpreter", Nortel
1-800-909-6989 - Jeff Esque - 3M Pharmaceuticals
1-800-909-6990 - AT&T Easy Reach 800
1-800-909-6991 - Co-American Mortgage Services
1-800-909-6992 - Ron's Travel
1-800-909-6994 - Riptor
1-800-909-6995 - CGUN Insurance Voice Mail

1-800-909-7xxx
--------------

1-800-909-7007 - Mutual Help Crisis Line
1-800-909-7016 - "Enter your Phone Number Including the Area-Code"
1-800-909-7033 - "Hello?"
1-800-909-7035 - AT&T Easy Reach 800
1-800-909-7036 - "Hello?"
1-800-909-7039 - Information Request Line
1-800-909-7051 - AT&T Easy Reach 800
1-800-909-7052 - Video-i Corporation
1-800-909-7053 - "i24by7.com"
1-800-909-7054 - AT&T Easy Reach 800
1-800-909-7056 - SkyTel Voice Mail System
1-800-909-7058 - SkyTel Voice Mail System
1-800-909-7059 - AT&T Easy Reach 800
1-800-909-7060 - "Hello?"
1-800-909-7061 - SkyTel Voice Mail System
1-800-909-7062 - SkyTel Voice Mail System
1-800-909-7063 - SkyTel Voice Mail System
1-800-909-7064 - SkyTel Voice Mail System
1-800-909-7065 - SkyTel Voice Mail System
1-800-909-7067 - SkyTel Voice Mail System
1-800-909-7069 - AT&T Easy Reach 800
1-800-909-7070 - Infomercials Information Line
1-800-909-7072 - "Personal Identification Number"
1-800-909-7074 - AT&T Easy Reach 800
1-800-909-7075 - SkyTel Voice Mail System
1-800-909-7076 - SkyTel Voice Mail System
1-800-909-7079 - SkyTel Voice Mail System
1-800-909-7080 - Dedicated Distribution Services
1-800-909-7081 - SkyTel Voice Mail System
1-800-909-7082 - SkyTel Voice Mail System
1-800-909-7085 - AT&T Easy Reach 800
1-800-909-7087 - SkyTel Voice Mail System
1-800-909-7088 - Automated Voice Message Service; Resolution Technologies
1-800-909-7090 - Southwestren Bell
1-800-909-7091 - SkyTel Voice Mail System
1-800-909-7092 - SkyTel Voice Mail System
1-800-909-7095 - SkyTel Voice Mail System
1-800-909-7096 - SkyTel Voice Mail System
1-800-909-7097 - SkyTel Voice Mail System
1-800-909-7098 - SkyTel Voice Mail System

1-800-909-71XX
--------------

1-800-909-7103 - SkyTel Voice Mail System
1-800-909-7104 - SkyTel Voice Mail System
1-800-909-7105 - Hanging Line (exploitable)
1-800-909-7106 - State Commission
1-800-909-7108 - Answering Machine
1-800-909-7111 - AT&T Easy Reach 800
1-800-909-7113 - Conference Coordinator
1-800-909-7114 - GG Schmeidt and Sons
1-800-909-7115 - Hennenoff Heidi
1-800-909-7117 - AT&T Easy Reach 800
1-800-909-7121 - Bookkeeping Services
1-800-909-7132 - Personal Assistant
1-800-909-7137 - Call Home America Ultimate 800 [4 digit #]
1-800-909-7138 - SkyTel Voice Mail System
1-800-909-7139 - Micheal Goodfellow, Micheal Goodfellow Real-Estate
1-800-909-7140 - SkyTel Voice Mail System
1-800-909-7142 - SkyTel Voice Mail System
1-800-909-7143 - SkyTel Voice Mail System
1-800-909-7144 - Offices of 'The Insurance Group'
1-800-909-7145 - SkyTel Voice Mail System
1-800-909-7146 - SkyTel Voice Mail System
1-800-909-7147 - SkyTel Voice Mail System
1-800-909-7148 - SkyTel Voice Mail System
1-800-909-7149 - SkyTel Voice Mail System
1-800-909-7150 - SkyTel Voice Mail System
1-800-909-7151 - AT&T Easy Reach 800
1-800-909-7152 - SkyTel Voice Mail System
1-800-909-7153 - IP-PHONE Dial-Port
1-800-909-7157 - Modem Carrier
1-800-909-7164 - "Alcohol For Less"
1-800-909-7165 - AT&T Easy Reach 800
1-800-909-7167 - Voice Mail Box of Cindy Baker
1-800-909-7168 - SkyTel Voice Mail System
1-800-909-7169 - SkyTel Voice Mail System
1-800-909-7170 - AT&T Easy Reach 800
1-800-909-7172 - AT&T Easy Reach 800
1-800-909-7174 - AT&T Easy Reach 800
1-800-909-7178 - "... ring, ring ..."
1-800-909-7183 - "... ring, ring ..."
1-800-909-7186 - "Hello?"
1-800-909-7187 - "Hello?"
1-800-909-7188 - Voice Mail Box
1-800-909-7192 - "... ring, ring ..."
1-800-909-7193 - "... ring, ring ..."
1-800-909-7194 - Modem Carrier
1-800-909-7197 - "... ring, ring ..."

1-800-909-72XX
--------------

1-800-909-7202 - Frank with MSA
1-800-909-7203 - SkyTel Voice Mail System
1-800-909-7206 - "... ring, ring ..."
1-800-909-7207 - "... ring, ring ..."
1-800-909-7208 - SkyTel Voice Mail System
1-800-909-7209 - SkyTel Voice Mail System
1-800-909-7210 - Modem Carrier
1-800-909-7213 - "... ring, ring ..."
1-800-909-7214 - SkyTel Voice Mail System
1-800-909-7216 - "... ring, ring ..."
1-800-909-7218 - "... ring, ring ..."
1-800-909-7219 - "... ring, ring ..."
1-800-909-7222 - AT&T Easy Reach 800
1-800-909-7225 - Global Crossing's Speedlink
1-800-909-7226 - Greybo Business Forums
1-800-909-7227 - Teressa Robinson
1-800-909-7229 - "Hello?"
1-800-909-7230 - Lion Deswersely
1-800-909-7231 - "... ring, ring ..."
1-800-909-7235 - "... ring, ring ..."
1-800-909-7236 - "... ring, ring ..."
1-800-909-7238 - Dave
1-800-909-7239 - "... ring, ring ..."
1-800-909-7240 - "... ring, ring ..."
1-800-909-7243 - Airtouch Paging
1-800-909-7244 - "Extension: 2438"
1-800-909-7251 - AT&T Easy Reach 800
1-800-909-7253 - "Hello?"
1-800-909-7257 - Video-i Corporation
1-800-909-7258 - Cosmarks Sales and Marketing
1-800-909-7259 - AT&T Easy Reach 800
1-800-909-7262 - Primary Children's
1-800-909-7264 - AT&T Easy Reach 800
1-800-909-7265 - AT&T - "checked for trouble"
1-800-909-7268 - National Ordering Centre
1-800-909-7271 - "... ring, ring ..."
1-800-909-7273 - Numeric Message System
1-800-909-7278 - BMW Parts and Ordering Service
1-800-909-7279 - AT&T Easy Reach 800
1-800-909-7282 - "... ring, ring ..."
1-800-909-7284 - "Good Afternoon Trent Speaking"
1-800-909-7286 - Fatal Travel Leasure Desk
1-800-909-7293 - "... ring, ring ..."
1-800-909-7297 - Happy Paws, Natural Pet Foods
1-800-909-7299 - AT&T Easy Reach 800

1-800-909-73XX
--------------

1-800-909-7311 - AT&T Easy Reach 800
1-800-909-7316 - Pioneer
1-800-909-7321 - North Adwadore
1-800-909-7330 - High Tone
1-800-909-7331 - MCI Worldcom Pre-Paid Card System
1-800-909-7332 - Pure Water
1-800-909-7333 - AT&T Easy Reach 800
1-800-909-7336 - AT&T Easy Reach 800
1-800-909-7337 - Pediatrics
1-800-909-7340 - MCI Worldcom
1-800-909-7345 - DW-Make Oil Specialties
1-800-909-7352 - AT&T Easy Reach 800
1-800-909-7354 - STFI
1-800-909-7362 - Remax
1-800-909-7365 - AT&T Texas Local Service
1-800-909-7367 - Excel - Global Telecommunications
1-800-909-7368 - Merlin Mail
1-800-909-7373 - Service Master Healthcare Service
1-800-909-7375 - "Ronny"
1-800-909-7382 - Voice Mail Box
1-800-909-7385 - Voice Mail Box
1-800-909-7386 - AT&T Easy Reach 800
1-800-909-7389 - AT&T Easy Reach 800
1-800-909-7392 - Lenny

1-800-909-74XX
--------------

1-800-909-7412 - Merrill Lynch
1-800-909-7418 - AT&T Easy Reach 800
1-800-909-7419 - "Please leave your message after the tone"
1-800-909-7422 - Sunny Seal Supplies
1-800-909-7423 - "Thanks for calling for your free cream-of-rice recipe"
1-800-909-7428 - Numeric Message System
1-800-909-7432 - Stevens Grass community
1-800-909-7434 - Lakeside Country Club
1-800-909-7437 - AT&T Easy Reach 800
1-800-909-7445 - AT&T Easy Reach 800
1-800-909-7447 - FAX
1-800-909-7448 - AT&T Easy Reach 800
1-800-909-7449 - Sputal Land
1-800-909-7454 - Farm Bureau Award Headquarters
1-800-909-7460 - Professional Office Protection Hotline
1-800-909-7464 - Rays and Gibsons
1-800-909-7465 - AT&T Easy Reach 800
1-800-909-7468 - "Please Hold"
1-800-909-7469 - EPI
1-800-909-7471 - Capital Music Centre
1-800-909-7475 - ATCO Insurance Services
1-800-909-7476 - Norman Wyatt Insurance Agency
1-800-909-7480 - Voice Mail Box
1-800-909-7481 - "Hello?"
1-800-909-7483 - The Paper Store
1-800-909-7484 - Hang-up
1-800-909-7485 - Dance, Theatre, Waitress/Hostess, Cashier/Clerk, Model
1-800-909-7488 - Pipco
1-800-909-7489 - "Hello?"
1-800-909-7496 - AT&T Easy Reach 800

1-800-909-75XX
--------------

1-800-909-7508 - AT&T Easy Reach 800
1-800-909-7510 - Modem Carrier
1-800-909-7513 - "Hello?"
1-800-909-7514 - Virtual Voice
1-800-909-7516 - Doug Overvold
1-800-909-7517 - Brian Jackaneti
1-800-909-7519 - Telegram Message Service
1-800-909-7521 - AT&T Easy Reach 800
1-800-909-7525 - AT&T Easy Reach 800
1-800-909-7526 - "Allo?"
1-800-909-7527 - Southern Hundred Club
1-800-909-7528 - Voice Conference System
1-800-909-7529 - Woodplans of the Carolinas
1-800-909-7532 - Universal Health Solutions
1-800-909-7537 - "Peads this is Jana"
1-800-909-7541 - "(DTMF 1) Please enter your 4 digit pin"
1-800-909-7546 - Terry Ben Skin Care
1-800-909-7547 - AT&T Easy Reach 800
1-800-909-7548 - Volunteer Cheque Express
1-800-909-7550 - Answering Machine
1-800-909-7552 - Global Crossings Speed Link
1-800-909-7555 - "... on hold ..."
1-800-909-7556 - AT&T Easy Reach 800
1-800-909-7558 - Shopper Division; Electric Mobility
1-800-909-7559 - "French recording"
1-800-909-7560 - AT&T Easy Reach 800
1-800-909-7562 - High Tone
1-800-909-7569 - FAX
1-800-909-7570 - AT&T Easy Reach 800
1-800-909-7571 - "Hello?"
1-800-909-7572 - Love Fargo Educational Financial Services
1-800-909-7577 - AT&T Easy Reach 800
1-800-909-7578 - Gary Lider; Health Care Recoveries Inc.
1-800-909-7595 - FAX

1-800-909-76XX
--------------

1-800-909-7600 - Lionel Alarm Clock
1-800-909-7601 - People Transport
1-800-909-7603 - Hang Line (exploitable)
1-800-909-7606 - Pizza Hut
1-800-909-7608 - SNS
1-800-909-7609 - "Mail Box: 5134"
1-800-909-7611 - "Mail Box of: Kiwi Ping"
1-800-909-7613 - National offices of StarTouch
1-800-909-7616 - Action Aircraft
1-800-909-7618 - Malwire
1-800-909-7624 - Numeric Message System
1-800-909-7626 - Pardom Painting
1-800-909-7628 - Numeric Message System
1-800-909-7631 - CanaDream
1-800-909-7632 - AT&T Easy Reach 800
1-800-909-7633 - "some french guy"
1-800-909-7635 - FAX
1-800-909-7637 - Total Tech Accounting
1-800-909-7639 - Tom McCordey
1-800-909-7641 - "mmmhello?"
1-800-909-7642 - Southern Missori Gas Company
1-800-909-7646 - Local Construction
1-800-909-7659 - "hello?"
1-800-909-7662 - AT&T Easy Reach 800
1-800-909-7667 - "mexican hold music..."
1-800-909-7668 - Customer Resource Centre
1-800-909-7670 - SkyTel 2-Way
1-800-909-7671 - Numeric Message System
1-800-909-7672 - AT&T Easy Reach 800
1-800-909-7678 - "PIN query"
1-800-909-7687 - "900277114020447, DTMF, re-order signal"
1-800-909-7689 - "Please enter your four digit PIN now"
1-800-909-7691 - Tropical Adventures & Adventures Express
1-800-909-7694 - AT&T Easy Reach 800
1-800-909-7697 - Tropical Adventures & Adventures Express
1-800-909-7698 - Voice/Numeric Message System

1-800-909-77XX
--------------

1-800-909-7702 - Numeric Message System
1-800-909-7704 - Tony's Voice Mail Box
1-800-909-7705 - Voice/Numeric Message System
1-800-909-7708 - Numeric Message System
1-800-909-7713 - Numeric Message System (re-order following)
1-800-909-7717 - AT&T Easy Reach 800
1-800-909-7720 - "some silly Las Vegas company"
1-800-909-7723 - AT&T Easy Reach 800
1-800-909-7725 - AT&T Easy Reach 800
1-800-909-7726 - Beeping In a Loop (re-order signal)
1-800-909-7730 - Hoge Poge
1-800-909-7731 - SkyTel 2-Way
1-800-909-7734 - Voice/Numeric Message System
1-800-909-7735 - Voice/Numeric Message System
1-800-909-7736 - "... ring, ring ..."
1-800-909-7737 - "Mail Box #: 9097737"
1-800-909-7738 - "some french lady"
1-800-909-7739 - CEO Voice Mail Box
1-800-909-7740 - Voice/Numeric Message System
1-800-909-7741 - Voice/Numeric Message System
1-800-909-7743 - Greg Chambers' pager service
1-800-909-7751 - Jimmy Neal's answering machine
1-800-909-7753 - AT&T Easy Reach 800
1-800-909-7757 - BAI Biptography
1-800-909-7758 - AT&T Easy Reach 800
1-800-909-7759 - AT&T Easy Reach 800
1-800-909-7763 - CSR Storm Centre
1-800-909-7766 - "Ring, Ring, Ring, *hangup*" (exploitable)
1-800-909-7769 - Human Resources Department; ISMEfector
1-800-909-7772 - "Hi this is Donna how may I help you?"
1-800-909-7781 - "4-digit PIN system"
1-800-909-7782 - AT&T Easy Reach 800
1-800-909-7783 - Global-Crossings Speedlink
1-800-909-7784 - PRTA
1-800-909-7786 - "(DTMF 1) Please enter your 4 digit pin"
1-800-909-7789 - Modem Carrier
1-800-909-7793 - AT&T Easy Reach 800
1-800-909-7794 - "(DTMF 1) Please enter your 4 digit pin"
1-800-909-7796 - AT&T Easy Reach 800 

1-800-909-78XX
--------------

1-800-909-7800 - Lionel Alarm Clock
1-800-909-7803 - "(DTMF 1) Please enter your 4 digit pin"
1-800-909-7809 - AT&T Easy Reach 800
1-800-909-7810 - Numeric Message System
1-800-909-7811 - Numeric Message System
1-800-909-7813 - AT&T Easy Reach 800
1-800-909-7814 - Numeric Message System
1-800-909-7815 - Global Crossings Speedlink
1-800-909-7816 - AT&T Easy Reach 800
1-800-909-7824 - AIDS Line
1-800-909-7827 - Soften New Denmar
1-800-909-7831 - "Good afternoon"
1-800-909-7845 - Alert Technologies, Supply Net Communications
1-800-909-7850 - High Tone
1-800-909-7851 - Bell South Voice Mail Service
1-800-909-7858 - AT&T Easy Reach 800
1-800-909-7859 - AT&T Easy Reach 800
1-800-909-7860 - "Hello?"
1-800-909-7863 - "... ring, ring..."
1-800-909-7864 - Skytel Voice Mail System
1-800-909-7865 - Fone pr0n
1-800-909-7869 - MCI Worldcom calling card system
1-800-909-7875 - Naval Ammunition Technical Support Line
1-800-909-7876 - AT&T Easy Reach 800
1-800-909-7879 - TTY/TDD System
1-800-909-7888 - Corporate Headquarters; DG Systems
1-800-909-7898 - AT&T Easy Reach 800

1-800-909-79XX
--------------

1-800-909-7905 - Answering Machine (Voice Mail option available)
1-800-909-7909 - Corporate Headquarters
1-800-909-7912 - "Hello?"
1-800-909-7918 - "Thank you for calling, our office is currently closed"
1-800-909-7920 - AT&T Easy Reach 800
1-800-909-7924 - Beeping in a loop (re-order)
1-800-909-7925 - "Thank you for calling, our office is currently closed"
1-800-909-7926 - Automotive Warranty Premium Department
1-800-909-7928 - New offices of SW Showtime
1-800-909-7931 - "Thank you for calling, our office is currently closed"
1-800-909-7932 - "Thank you for calling, our office is currently closed"
1-800-909-7935 - Modem Carrier
1-800-909-7938 - "Thank you for calling, our office is currently closed"
1-800-909-7940 - AT&T Easy Reach 800
1-800-909-7946 - "Hello you have reached 'we are your pool service'"
1-800-909-7947 - "Please enter your authorization code now"
1-800-909-7950 - Maximum Impact General Delivery Mail Box
1-800-909-7955 - AT&T Easy Reach 800
1-800-909-7960 - "Thank you for calling metal music"
1-800-909-7962 - "You've reach Eric Farrem with 3M"
1-800-909-7967 - Numeric Message System
1-800-909-7969 - Octel Link Network
1-800-909-7977 - Simon and Schusters PC helpdesk
1-800-909-7979 - "Hello this is Matt, thank you for calling BO FLEX"
1-800-909-7980 - Loan-by-Phone from Energy First Credit Union
1-800-909-7990 - Lousiana Humanities Office
1-800-909-7993 - Answering Machine
1-800-909-7994 - FAX

1-800-909-80XX
--------------

1-800-909-8000 - Trade Labs
1-800-909-8003 - AT&T Easy Reach 800
1-800-909-8004 - "For quality assurance purposes your call may be monitored..."
1-800-909-8006 - Oxford Insurance Agency
1-800-909-8008 - AT&T Easy Reach 800
1-800-909-8011 - AT&T Easy Reach 800
1-800-909-8012 - AT&T Easy Reach 800
1-800-909-8016 - AT&T Easy Reach 800
1-800-909-8020 - Global Crossings Speedlink
1-800-909-8024 - "i-24-by-7 dot com"
1-800-909-8031 - AT&T Easy Reach 800
1-800-909-8034 - Global Crossings Speedlink
1-800-909-8035 - Coffee Break Design
1-800-909-8036 - Global Crossings Speedlink
1-800-909-8040 - AT&T Easy Reach 800
1-800-909-8043 - AT&T Easy Reach 800
1-800-909-8048 - "(DTMF 1) Please enter your 4 digit pin"
1-800-909-8057 - "Thank you for calling IpCo Safety"
1-800-909-8058 - "Thank you for calling IpCo Safety"
1-800-909-8063 - AT&T Easy Reach 800
1-800-909-8064 - Medic-Systems Division; 'High Point'
1-800-909-8065 - "Thank you for calling IpCo Safety"
1-800-909-8067 - "Thank you for calling IpCo Safety"
1-800-909-8068 - "ring ring... ring ring..."
1-800-909-8069 - SkyTel Voice Mail System
1-800-909-8072 - "ring ring... ring ring..."
1-800-909-8078 - Wasa-Papers Products Quality Hotline
1-800-909-8079 - "*beep* Ext. 61262473 is invalid"
1-800-909-8080 - Instrumental Legends
1-800-909-8083 - "Thank you for calling Qualitech"
1-800-909-8084 - Hawkinson Insurance Agency
1-800-909-8088 - "Hello? Voice messaging system"
1-800-909-8090 - Octel Voice Information Processing System
1-800-909-8094 - AT&T Easy Reach 800
1-800-909-8096 - "Hello?"
1-800-909-8099 - Worldcom

1-800-909-81XX
--------------

1-800-909-8100 - "Good morning this is Rosie"
1-800-909-8103 - "(DTMF 1) Please enter your 4 digit pin"
1-800-909-8106 - "Thank you for calling..."
1-800-909-8113 - AT&T Easy Reach 800
1-800-909-8116 - Numerical Message System
1-800-909-8120 - AT&T Easy Reach 800
1-800-909-8121 - Numerical Message System
1-800-909-8122 - "Hello?"
1-800-909-8123 - "Law Courts Associates Answering Service"
1-800-909-8124 - "Hello?"
1-800-909-8125 - "i-24-by-7 dot com"
1-800-909-8127 - AT&T Easy Reach 800
1-800-909-8133 - Helena 10; Call Restricted.
1-800-909-8139 - "Thank you for calling..."
1-800-909-8140 - "Thank you for calling YSKS services..."
1-800-909-8144 - "Hello?"
1-800-909-8145 - AT&T Easy Reach 800
1-800-909-8148 - "After hour peer service..."
1-800-909-8149 - AT&T Easy Reach 800
1-800-909-8156 - Call Home America Ultimate 800
1-800-909-8161 - Country Wide Home Loans
1-800-909-8173 - US Airway National Human Resources Line
1-800-909-8176 - "Hello?"
1-800-909-8177 - "Liquid Container"
1-800-909-8178 - Iron Mountain Services.
1-800-909-8179 - AT&T Easy Reach 800
1-800-909-8180 - "Ring, Ring..."
1-800-909-8182 - "Ring, Ring..."
1-800-909-8183 - Voice Mail System
1-800-909-8188 - Business Opportunity Alliance
1-800-909-8189 - Marian Grave's Medical Products
1-800-909-8190 - Sprint Canada's Automated Receptionist
1-800-909-8191 - AT&T Easy Reach 800
1-800-909-8192 - Linda Hunter
1-800-909-8193 - SkyTel Voice Mail System
1-800-909-8194 - "Ring, Ring..."
1-800-909-8195 - "Ring, Ring..."
1-800-909-8197 - "Ring, Ring..."
1-800-909-8198 - "Ring, Ring..."
1-800-909-8199 - "Hello?"

1-800-909-82XX
--------------

1-800-909-8200 - Columbia House Studio Library
1-800-909-8201 - Wholesale Crack
1-800-909-8202 - Voice Mail Box of Linda Randell
1-800-909-8203 - Voice Mail Box of Lisa Burmingham
1-800-909-8205 - Voice Mail Box of Wayne Thompson
1-800-909-8206 - "Ring, Ring..."
1-800-909-8209 - SkyTel Voice Mail System
1-800-909-8210 - Voice Mail Box of Darrel Short
1-800-909-8211 - Full Spectrum Lending
1-800-909-8212 - Voice Mail Box of Michelle Sheppard
1-800-909-8213 - Full Spectrum Lending
1-800-909-8214 - "Thank you for calling..."
1-800-909-8215 - Full Spectrum Lending
1-800-909-8216 - Work At Home Mail-Order Program
1-800-909-8217 - Full Spectrum Lending
1-800-909-8218 - SkyTel Voice Mail System
1-800-909-8219 - "Ring, Ring..."
1-800-909-8220 - Brenda King; Business Services Group
1-800-909-8221 - Kris Mattigan; Business Services Group
1-800-909-8223 - SkyTel Voice Mail System
1-800-909-8224 - "Ring, Ring..."
1-800-909-8226 - AT&T Easy Reach 800
1-800-909-8231 - "650-8231: leave a message"
1-800-909-8238 - Low Tone
1-800-909-8241 - i-24-by-7.com
1-800-909-8244 - The Cobalt Group
1-800-909-8249 - SkyTel Voice Messaging Service
1-800-909-8250 - AT&T Easy Reach 800
1-800-909-8251 - SkyTel Voice Messaging Service
1-800-909-8253 - "Ring, Ring..."
1-800-909-8256 - Wonder Link Incorporated
1-800-909-8258 - Trapmen and Travel
1-800-909-8259 - AT&T Easy Reach 800
1-800-909-8260 - SkyTel Voice Messaging Service
1-800-909-8261 - SkyTel Voice Messaging Service
1-800-909-8268 - SkyTel Voice Messaging Service
1-800-909-8269 - "Ring, Ring..."
1-800-909-8270 - SkyTel Voice Messaging Service
1-800-909-8271 - AT&T Easy Reach 800
1-800-909-8272 - Kerri Gastrum's Voice Mail Box
1-800-909-8274 - "Ring, Ring..."
1-800-909-8280 - "Ring, Ring..."
1-800-909-8281 - SkyTel Voice Messaging Service
1-800-909-8282 - "This is Michelle may I help you?"
1-800-909-8285 - "Ring, Ring..."
1-800-909-8287 - SkyTel Voice Messaging Service
1-800-909-8288 - AT&T Easy Reach 800
1-800-909-8290 - Numeric Message System
1-800-909-8292 - AT&T Easy Reach 800
1-800-909-8294 - Voice Mail Box: 4971
1-800-909-8296 - "Ring, Ring..."
1-800-909-8297 - "Please enter your four digit pin now"
1-800-909-8298 - Global Express Travel and Cruise
1-800-909-8299 - International Central Randomisation Centre

1-800-909-83XX
--------------

1-800-909-8300 - Columbia House Video Library
1-800-909-8306 - Lynol Sniders
1-800-909-8310 - AT&T Easy Reach 800
1-800-909-8311 - Doner Minerals
1-800-909-8312 - AT&T Easy Reach 800
1-800-909-8313 - AT&T Business Office (Houston Texas)
1-800-909-8316 - Janis Smith's Voice Mail Box
1-800-909-8318 - Janis Smith's Voice Mail Box
1-800-909-8319 - AT&T Easy Reach 800
1-800-909-8320 - "Ring, Ring..."
1-800-909-8321 - AT&T Easy Reach 800
1-800-909-8326 - The Professionals; St.Johns Health Information Centre
1-800-909-8329 - AT&T Easy Reach 800
1-800-909-8330 - James Soyer of 3M Pharmaceuticals (Voice Mail Box)
1-800-909-8335 - RT Martins Real Estate Associates
1-800-909-8338 - "Hello?"
1-800-909-8340 - Technical Support Voice Mail System
1-800-909-8341 - Skytel Voice Messaging Service
1-800-909-8342 - "Hi this is Larry, can't take your call..."
1-800-909-8343 - "Hi this is Larry, can't take your call..."
1-800-909-8344 - "Please hold while I try to locate: Lion and Brenda Howard"
1-800-909-8345 - "Ring, Ring..."
1-800-909-8346 - "Ring, Ring..."
1-800-909-8347 - AT&T Easy Reach 800
1-800-909-8348 - VE-Capital Financial Services
1-800-909-8349 - "Ring, Ring..."
1-800-909-8352 - "Hello, thank you for calling. Please enter your extention"
1-800-909-8354 - AT&T Easy Reach 800
1-800-909-8356 - "Ring, Ring..."
1-800-909-8357 - Skytel Voice Messaging Service
1-800-909-8359 - "Ring, Ring..."
1-800-909-8360 - The X-State Hotline
1-800-909-8362 - "Ring, Ring..."
1-800-909-8364 - Skytel Voice Messaging Service
1-800-909-8365 - AT&T Easy Reach 800
1-800-909-8366 - Voice Mail Box forwarding for BOX # 5003
1-800-909-8370 - Jannons Management
1-800-909-8371 - George at the Design Group
1-800-909-8377 - *high pitched beep* Qwest Operator
1-800-909-8378 - AT&T Easy Reach 800
1-800-909-8382 - Skytel Voice Messaging Service
1-800-909-8384 - Mercury Enterprise
1-800-909-8385 - AT&T Easy Reach 800
1-800-909-8386 - "Ring, Ring..."
1-800-909-8389 - "Ring, Ring..."
1-800-909-8391 - "Ring, Ring..."
1-800-909-8394 - "Ring, Ring..."
1-800-909-8397 - Phone-Bridge Insurance
1-800-909-8398 - "Ring, Ring..."
1-800-909-8399 - JG Financial Service

1-800-909-84XX
--------------

1-800-909-8400 - "This is Marie how can I help you?"
1-800-909-8401 - Skytel Voice Messaging Service
1-800-909-8403 - "Ring, Ring..."
1-800-909-8405 - "Ring, Ring..."
1-800-909-8406 - "Ring, Ring..."
1-800-909-8411 - "Ring, Ring..."
1-800-909-8412 - Skytel Voice Messaging Service
1-800-909-8416 - "Ring, Ring..."
1-800-909-8418 - "Ring, Ring..."
1-800-909-8419 - Skytel Voice Messaging Service
1-800-909-8425 - "Ring, Ring..."
1-800-909-8426 - "Ring, Ring..."
1-800-909-8427 - Bluecross
1-800-909-8428 - "Ring, Ring..."
1-800-909-8431 - Skytel Voice Messaging Service
1-800-909-8434 - "Ring, Ring..."
1-800-909-8435 - "Ring, Ring..."
1-800-909-8436 - High Tone
1-800-909-8437 - Designers In Motion
1-800-909-8440 - FAX
1-800-909-8441 - "Please enter your four digit pin now"
1-800-909-8443 - "Ring, Ring..."
1-800-909-8450 - "Ring, Ring..."
1-800-909-8451 - "Ring, Ring..."
1-800-909-8452 - "Ring, Ring..."
1-800-909-8453 - AT&T Easy Reach 800
1-800-909-8454 - AT&T Easy Reach 800
1-800-909-8558 - "Ring, Ring..."
1-800-909-8459 - "Ring, Ring..."
1-800-909-8460 - Skytel Voice Messaging Service
1-800-909-8464 - AT&T Easy Reach 800
1-800-909-8469 - AT&T Easy Reach 800
1-800-909-8471 - Miller Axeton and Injury Centre
1-800-909-8472 - High Tone, Low Tone
1-800-909-8476 - Direct Access - private surgeon line
1-800-909-8478 - Psychriatric Centre of San Diego
1-800-909-8485 - AT&T Easy Reach 800
1-800-909-8486 - New York/Metro Area, Postal/Federal Credit Loan by Phone Service

.END OF SCAN CHUNK

	 -=[ Complete Scan Compilation to be released: Fall 2001 ]=-

---

-- Credits

    Without the following contributions this zine issue would be fairly
      delayed or not released, so thank you to the following people:

	    M. Slawson, p_bang, (and myself) The Clone

-- Shouts:

Hack Canada (#HackCanada), Team Phreak (#teamphreak), #PhreakBC,
k-rad-bob @ b0g, Blackened @ Damage Inc., The Grasshopper Unit, Flippersmack,
Pyrofreak, _plappy, soap, Seviak, Snow, Banshee, Annie, papercut, Kybo_ren,
TProphet, krys, MSM (Matthew SuperMan), and lastly to everyone and anyone who
	  	       contributes to the Canadian H/P scene.


                             ;.  .;..  ; ;. ;..
                           ;..   .;..; .;.; .;; ;..
                      .;..;. .;..;  .;.;...; ;..;..
                         .;.         A         .;. .;.
                       ;..   N E T T W E R K E D  ;..
                        ;..;.. P R O D U C T   ;..;..
                          .;..;               ;..;..
                     ;  .;..;.;..   .; .  .;. ..;..
                    .;..   . .;  ..;..;..;.. .;
                ;..;.   .;.. . .;.. .;.;.
              ..;. ..;.. .;.   ;.;..;;..;.;
                ;.;;..;..      ;.;.; .; .
                   ;.;..;. .;. ;.;:.;.
                     ,;....;.
               .;.;. .;.;
              .;.;.;
            .;.;
            ;..;.
           .;.;;.; .;. ..; ;. > > > i'm a bunny, i'm a bunny!

