arbydog
join:2001-02-05
Lawrenceville, GA | Meucci Solutions
I keeping getting calls from this place every couple of hours. Number comes up unlisted. Is this an issue with Viatalk? Anyone else getting this? Just started last night. |
|
dcurrey
Premium
join:2004-06-29 | Somebody with Phone Power has that exact problem.
»My wife is ready to kill me and the Phone Power phone. |
|
VTEric
join:2008-08-27
Clifton Park, NY
| reply to arbydog
We've received numerous reports of people receiving calls from this company and after some research we were able to find this:
»www.meucci-solutions.com/complaints.asp?id=1
These nuisance calls are happening across multiple carriers and are not isolated to ViaTalk customers.
In response to these reports we have taken steps to preemptively block any calls that have callerID information related to this company until the matter is resolved on their end. These calls should not be getting through but if anyone receives further calls from this company, please PM me as well as give our support team a call so we can make sure these calls are stopped.
On a side note, a quick fix for this is to enable anonymous call block through your control panel. These calls are coming through with no callerID number and should be filtered by this feature. |
|
dcurrey
Premium
join:2004-06-29
1 edit | Thats interesting. So Viatalk was receiving that calls normally and passing them along. This isn't port scans for open ports then using direct sip dialing. |
|
B
Premium,MVM
join:2000-10-28
| He didn't say that!
He just said they were doing what they could to block them at the VT end.
For now I stand by my theory that these are direct attacks against open SIP ports at user endpoints, which would imply that VT's preemptive action, while admirable, will accomplish little.
-- B
--
In a realm outside causality and function |
|
dcurrey
Premium
join:2004-06-29
 ·ViaTalk
| n response to these reports we have taken steps to preemptively block any calls that have callerID information related to this company until the matter is resolved on their end. These calls should not be getting through but if anyone receives further calls from this company, please PM me as well as give our support team a call so we can make sure these calls are stopped.
Seems they are saying that they are seeing them and blocking them. If still getting them call.
BTW I want call block based on callerid name. That would solve the "800 Service" calls. |
|
B
Premium,MVM
join:2000-10-28
1 edit | Maybe, but again that's not quite what he said. VTEric can you please confirm whether these calls are passing through the VT system or whether they may be targeting exposed SIP adapters directly, or both?
BTW I want call block based on callerid name. That would solve the "800 Service" calls. It's a side note, but agreed completely!
-- B
--
In a realm outside causality and function |
|
CajunWon
join:2005-12-30
Cary, NC | reply to dcurrey
BTW I want call block based on callerid name. That would solve the "800 Service" calls.
Block all 800,888,877 numbers through Call Routing. Also have DND turned ON overnight, so only WhiteListed numbers get through. |
|
VTEric
join:2008-08-27
Clifton Park, NY
| reply to B
said by B  :He just said they were doing what they could to block them at the VT end. We implemented these changes due to the large number of reports we received. Because there is no way to duplicate a call from this company at will, we weren't able to run any live tests to see these calls.
If these calls are being sent directly to the telephone adapters there isn't much that can be done on our end to prevent them from ringing through but it is highly doubtful that they are sending the calls to any ports beyond the default of 5060 and 5061. Changing your SIP ports may prevent these calls from coming through if in fact the calls are being sent directly to the IP to which you are connected. If you are continuing to receive these calls, you can submit a ticket or contact our support line to have our staff change your SIP ports to non-default values. |
|
dcurrey
Premium
join:2004-06-29 | reply to B
What make me think even more that they are seeing them is the suggestion to turn on annon call block. Since no number that would block them. |
|
B
Premium,MVM
join:2000-10-28
| reply to arbydog
......and so I was right. While VT is certainly "doing their part" and due diligence, they have not tracked any of these calls internally, and there's nothing at all, yet, to indicate that this is anything but an attack against open SIP ports!
Use your routers, people.
-- B
--
In a realm outside causality and function |
|
dcurrey
Premium
join:2004-06-29 | Ok ok yea yea yea.
Guess you are right. I will send you a virtual cookie.
 |
|
gk
join:2008-11-28
California
| if you really think the calls are hitting the customer endpoints directly, you should set "Restrict Source IP" on the Line tab of the adapter. that will, theoretically, allow only the VT servers to send SIP INVITEs to the adapter and ignore INVITEs from other IP addresses.
~gk |
|
VTEric
join:2008-08-27
Clifton Park, NY
| said by gk :you should set "Restrict Source IP" on the Line tab of the adapter This would work for the Linksys adapters but I believe that in each case we have seen, this issue has occurred with non-Linksys adapters including the GS HT-502 and the former SunRocket Innomedia devices. So far, anyone who has called and had their SIP ports changed to non-default values has not called back to report that they continue to receive these nuisance calls. |
|
gk
join:2008-11-28
California
| yeah, I was referring to this setting on any of the Cisco/Linksys ATAs.
it is rather interesting (and annoying) someone out there is trying to hit the standard SIP ports (5060/5061) in an attempt to try and make random phone calls to people 8-/
~gk |
|
unknvoip
WWJID?
join:2006-07-25
Rochester, NY | Kind of a cruel April fools joke, wouldn't you say?
Makes me wonder if it might be part of the Conficker worm payload? |
|
mh
@rogers.com | reply to arbydog
i have received this call 22 times today in matter of 4 hour |
|
LeeOpines
Premium
join:2007-07-18
Crestview, FL | said by mh :
i have received this call 22 times today in matter of 4 hour
Is there a way you can capture the IP Address so we know who it is coming from? |
|
CyberSultan
Premium
join:2006-07-20
| reply to arbydog
We started getting these same calls today. My wife said it's been constant all day. Since I have been home, it's happened about 10 times. I checked my VT logs and there were no records of these calls at all, so I assumed they must be hitting my device directly. I just went into my GS and disabled direct IP calls, so I hope that takes care of the problem (I don't do any direct IP calling so I'm good if this change stops these guys). |
|
TJ_in_IL
join:2006-06-10
Winthrop Harbor, IL
·ViaTalk
·Teliax VOIP
 ·Comcast
·Teleblend
| said by CyberSultan :I just went into my GS and disabled direct IP calls, so I hope that takes care of the problem (I don't do any direct IP calling so I'm good if this change stops these guys). Thanks for the suggestion.
I am yet to have the problem, but went in a made the change, just in case.
Downside is the uptime clock reset. I was 128 days without a reboot! |
|
