Avaya Support Forums  

Go Back   Avaya Support Forums > Small and Medium Business Communications

Reply
 
Thread Tools Search this Thread Display Modes
  #1  
Old 05-10-2016, 05:59 AM
jlaval jlaval is offline
Hot Shot
 
Join Date: Nov 2014
Posts: 17
jlaval has 10 reputation points
Default Rogue VoIP registration

I have a VoIP extension that keeps trying to register with my IPO 500v.2 9.1.2.0 in Toronto. We don't have an extension setup with this Extension number. The VoiP client IP address is in Europe. Does anyone know how to block a specific extension from trying to register with IPO?
Reply With Quote
  #2  
Old 05-12-2016, 03:03 AM
wellington35 wellington35 is offline
Whiz
 
Join Date: Jul 2012
Location: Orlando, FL
Posts: 42
wellington35 has 10 reputation points
Default

The initial registration requests come from the IP Phones not form the IP Office. To stop an IP Phone from sending registration requests out to the Call Server you must erase its values back to default or modify the 46xxxSettings file.
__________________
Wellington Paez
Senior Convergence Specialist @ Carousel Industries
http://wellingtonpaez.com
Reply With Quote
  #3  
Old 05-13-2016, 05:24 AM
furrerm furrerm is offline
Guru
.
 
Join Date: Nov 2010
Location: WI
Posts: 191
furrerm has 13 reputation pointsfurrerm has 13 reputation points
Default

What WAN IP is the traffic coming from? Is it in teh US? Are you being hacked?
Reply With Quote
  #4  
Old 05-13-2016, 09:00 AM
jlaval jlaval is offline
Hot Shot
 
Join Date: Nov 2014
Posts: 17
jlaval has 10 reputation points
Default

The IP address is 212.129.27.34 and it looks like it is registered to a company in the Netherlands.
Reply With Quote
  #5  
Old 05-18-2016, 11:24 AM
zakabog zakabog is offline
Genius
 
Join Date: Aug 2014
Posts: 300
zakabog has 25 to 49 reputation pointszakabog has 25 to 49 reputation pointszakabog has 25 to 49 reputation points
Default

Do you have a firewall in front of your IP Office or are you just allowing all SIP traffic through on port 5060? If you allow everything to hit the IP Office on 5060 you'll see a lot of messages like this as various bots around the world attempt to hack your system to register a phone and make free phone calls.
Reply With Quote
Reply

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT -7. The time now is 03:02 AM.

This Forum is provided solely for the use and convenience of Avaya customers and partners. Use of the Forum is subject to the Terms and Use and Privacy Statement found at www.avaya.com. No other use is permitted. The Forum including all content posted is “AS IS” and Avaya expressly disclaims all warranties and/or guarantees as to its accuracy, reliability, usefulness, quality or non-infringement of intellectual property. Avaya reserves the right to remove any content posted on the Forum at any time and for whatever reason.

Avaya will not be liable for any content posted on this Forum, including, without limitation, any errors or omissions or for any losses or damages of any kind incurred as a result of use or reliance on any content, regardless of its origin.

You expressly understand and agree that you assume all risks associated with use or reliance on this content.