HDX 8000 phantom calls

Anonymous · ‎06-24-2014

Hi there, we have a HDX8000 on IP only that keeps receiving calls from 1000@xxx.xxx.xxx.xxx, 1001@xxx.xxx.xxx.xxx, 100@xxx.xxx.xxx.xxx, 101@xxx.xxx.xxx.xxx etc where xxx.xxx.xxx.xxx is the same IP address as the unit.

This keeps happening at about every 40 minutes or so and will drop a current connected conference.

It appears to be the same issue as JRobert's VS4000 http://community.polycom.com/t5/Legacy-Products/VS4000-Phantom-Calls/td-p/41339

SteffenBaierUK · ‎06-24-2014

Hello GBRMPA,

welcome to the Polycom Community.

This has been discussed in the community before on multiple occasions using different topics.

This is most likely some SIP scanner trying to find a unprotected SIP server in order to commit some toll fraud if successful.

Have a google for sip vicious or friendly scanner as this explains this.

A few more details on your end would help us to make suggestions.

Is this Endpoint on the Internet and has all ports open ?
Do you use SIP ?

If no to the above simply block port 5060.

Please ensure to provide some feedback if this reply has helped you so other users can profit from your experience.

Best Regards

Steffen Baier

Polycom Global Services

------------------------------------------------
Notice: I am an HP Poly employee but all replies within the community are done as a volunteer outside of my day role. This community forum is not an official HP Poly support resource, thus responses from HP Poly employees, partners, and customers alike are best-effort in attempts to share learned knowledge.
If you need immediate and/or official assistance for former Poly\Plantronics\Polycom please open a service ticket through your support channels
For HP products please check HP Support.

Please also ensure you always check the General VoIP , Video Endpoint , UC Platform (Microsoft) , PSTN

Create an account on the HP Community to personalize your profile and ask a question