I randomly receive calls from the following numbers:
Can anyone assist as to how I can prevent these incoming calls from coming through? I can receive 10 calls an evening from these numbers and there is no one actually calling as when you answer, no one is on the other side.
These phantom calls are also known as SIPvicious are a type of SIP denial or service attack. This happens when your phone sits on your live IP address. A bot which is doing port scans on random public IP addresses will find an open port. The bot will then send SIP signals to this device on a general SIP port and the phone will ring. Calls usually come from 100 or 101 etc. You will not find any record of these calls in the CDR's on your PBX as it is just a signal sent to the IP and it is not an actual call
Ways to fix this:
- Have a look at your NAT rules on your router, make sure it is masquerading your internal IP's so they are not accessible from outside of your network.
- Up the firewall level on your router
- Try change the port on your phone, try something higher like 5090. They only scan the really common ports such as 5060, 5061, 5062 etc)
Thanks. I have the same problem. Can you direct me to where I can find out how to change the NAT rules on the TP-Link router.
Also how to change the port on the phone to 5090 as suggested.
Hi Clive, which TP link are you using and which IP phone are you using?