Avaya Support Forums

Avaya Support Forums (http://support.avaya.com/forums/index.php)
-   Small and Medium Business Communications (http://support.avaya.com/forums/forumdisplay.php?f=6)
-   -   Rogue VoIP registration (http://support.avaya.com/forums/showthread.php?t=11438)

jlaval 05-10-2016 05:59 AM

Rogue VoIP registration
 
I have a VoIP extension that keeps trying to register with my IPO 500v.2 9.1.2.0 in Toronto. We don't have an extension setup with this Extension number. The VoiP client IP address is in Europe. Does anyone know how to block a specific extension from trying to register with IPO?

wellington35 05-12-2016 03:03 AM

The initial registration requests come from the IP Phones not form the IP Office. To stop an IP Phone from sending registration requests out to the Call Server you must erase its values back to default or modify the 46xxxSettings file.

furrerm 05-13-2016 05:24 AM

What WAN IP is the traffic coming from? Is it in teh US? Are you being hacked?

jlaval 05-13-2016 09:00 AM

The IP address is 212.129.27.34 and it looks like it is registered to a company in the Netherlands.

zakabog 05-18-2016 11:24 AM

Do you have a firewall in front of your IP Office or are you just allowing all SIP traffic through on port 5060? If you allow everything to hit the IP Office on 5060 you'll see a lot of messages like this as various bots around the world attempt to hack your system to register a phone and make free phone calls.


All times are GMT -7. The time now is 08:00 PM.