Results 1 to 5 of 5

Thread: Strange Nighttime Rings

  1. #1

    Default Strange Nighttime Rings

    I have an odd issue where, during the night, usually between 11pm to 3am, all 60+ of the phones ring. When you look at the call log, the calling phone is the same as the called phone. Except on a couple of extensions (500 & 501) used as "ring groups" with MER enabled. In the sample below, from the call history, this is just a few of many calls that occur at almost the same time. Needless to say, the resident is tired of being woken up multiple times a night to answer a call with no one on the line. The xxx.xxx.xxx.xxx is the outside address of the QX200 phone server.

    26-Feb-2016 02:48:44 "108" <108@xxx.xxx.xxx.xxx> "Telephone Room" 108
    26-Feb-2016 02:48:43 "107" <107@xxx.xxx.xxx.xxx> "West Multi .Wall" 107
    26-Feb-2016 02:48:42 "106" <106@xxx.xxx.xxx.xxx> "106 Video Room" 106
    26-Feb-2016 02:48:42 "105" <105@xxx.xxx.xxx.xxx> "East Multi .Wall" 105
    26-Feb-2016 02:48:39 "102" <102@xxx.xxx.xxx.xxx> 102
    26-Feb-2016 02:48:39 "101" <101@xxx.xxx.xxx.xxx> 101
    26-Feb-2016 02:46:05 "103" <103@xxx.xxx.xxx.xxx> "Suite 8 Office 117" 117
    26-Feb-2016 02:46:05 "103" <103@xxx.xxx.xxx.xxx> "AHC Office" 104
    26-Feb-2016 02:46:05 "103" <103@xxx.xxx.xxx.xxx> "Receptionist" 114
    26-Feb-2016 02:46:05 "103" <103@xxx.xxx.xxx.xxx> "AHO Office" 103
    25-Feb-2016 23:51:01 "183" <183@xxx.xxx.xxx.xxx> "Pay Phone" 183
    25-Feb-2016 23:51:01 "181" <181@xxx.xxx.xxx.xxx> "Pay Phone" 181
    25-Feb-2016 23:51:01 "179" <179@xxx.xxx.xxx.xxx> "Building Man CPU" 179
    25-Feb-2016 23:51:01 "177" <177@xxx.xxx.xxx.xxx> "Distribution" 177
    25-Feb-2016 23:48:52 "500" <500@xxx.xxx.xxx.xxx> "Suite 8 Office 117" 117
    25-Feb-2016 23:48:52 "500" <500@xxx.xxx.xxx.xxx> "AHO Office" 103
    25-Feb-2016 23:48:47 "501" <501@xxx.xxx.xxx.xxx> "Suite 8 Office 117" 117
    25-Feb-2016 23:48:47 "501" <501@xxx.xxx.xxx.xxx> "Receptionist" 114
    25-Feb-2016 23:48:47 "501" <501@xxx.xxx.xxx.xxx> "AHC Office" 104
    25-Feb-2016 23:48:47 "501" <501@xxx.xxx.xxx.xxx> "AHO Office" 103

    Any help in getting the "phantom rings" to stop would be appreciated.

  2. #2

    Default

    Try closing the ports on the internet connection, open point to point delivery of the sip service providers IP to the QX and see if it is still a problem or get a better firewall..



    Quote Originally Posted by carlsutton View Post
    I have an odd issue where, during the night, usually between 11pm to 3am, all 60+ of the phones ring. When you look at the call log, the calling phone is the same as the called phone. Except on a couple of extensions (500 & 501) used as "ring groups" with MER enabled. In the sample below, from the call history, this is just a few of many calls that occur at almost the same time. Needless to say, the resident is tired of being woken up multiple times a night to answer a call with no one on the line. The xxx.xxx.xxx.xxx is the outside address of the QX200 phone server.

    26-Feb-2016 02:48:44 "108" <108@xxx.xxx.xxx.xxx> "Telephone Room" 108
    26-Feb-2016 02:48:43 "107" <107@xxx.xxx.xxx.xxx> "West Multi .Wall" 107
    26-Feb-2016 02:48:42 "106" <106@xxx.xxx.xxx.xxx> "106 Video Room" 106
    26-Feb-2016 02:48:42 "105" <105@xxx.xxx.xxx.xxx> "East Multi .Wall" 105
    26-Feb-2016 02:48:39 "102" <102@xxx.xxx.xxx.xxx> 102
    26-Feb-2016 02:48:39 "101" <101@xxx.xxx.xxx.xxx> 101
    26-Feb-2016 02:46:05 "103" <103@xxx.xxx.xxx.xxx> "Suite 8 Office 117" 117
    26-Feb-2016 02:46:05 "103" <103@xxx.xxx.xxx.xxx> "AHC Office" 104
    26-Feb-2016 02:46:05 "103" <103@xxx.xxx.xxx.xxx> "Receptionist" 114
    26-Feb-2016 02:46:05 "103" <103@xxx.xxx.xxx.xxx> "AHO Office" 103
    25-Feb-2016 23:51:01 "183" <183@xxx.xxx.xxx.xxx> "Pay Phone" 183
    25-Feb-2016 23:51:01 "181" <181@xxx.xxx.xxx.xxx> "Pay Phone" 181
    25-Feb-2016 23:51:01 "179" <179@xxx.xxx.xxx.xxx> "Building Man CPU" 179
    25-Feb-2016 23:51:01 "177" <177@xxx.xxx.xxx.xxx> "Distribution" 177
    25-Feb-2016 23:48:52 "500" <500@xxx.xxx.xxx.xxx> "Suite 8 Office 117" 117
    25-Feb-2016 23:48:52 "500" <500@xxx.xxx.xxx.xxx> "AHO Office" 103
    25-Feb-2016 23:48:47 "501" <501@xxx.xxx.xxx.xxx> "Suite 8 Office 117" 117
    25-Feb-2016 23:48:47 "501" <501@xxx.xxx.xxx.xxx> "Receptionist" 114
    25-Feb-2016 23:48:47 "501" <501@xxx.xxx.xxx.xxx> "AHC Office" 104
    25-Feb-2016 23:48:47 "501" <501@xxx.xxx.xxx.xxx> "AHO Office" 103

    Any help in getting the "phantom rings" to stop would be appreciated.

  3. #3

    Default

    The QX200 is behind a Draytek firewall. But i do have SIP ports forwarded through for several remote extensions. (the remote extensions do not seem to ring, one is at my house). Are you thinking it is someone messing around with it? If so, how could the calling phone be the same as the called phone, all at the same time?

  4. #4

    Default

    Quote Originally Posted by carlsutton View Post
    The QX200 is behind a Draytek firewall. But i do have SIP ports forwarded through for several remote extensions. (the remote extensions do not seem to ring, one is at my house). Are you thinking it is someone messing around with it? If so, how could the calling phone be the same as the called phone, all at the same time?
    What does your draytek firewall look like?

    I have always found when weird things happen it is because people do not lock external parties out or the firewall has holes in its programming to allow anyone to fire sip requests at the external IP address and make valid calls to phones.

    I have seen this before, outside attackers targeting many handsets using scripts ie handset_extensions@external_ip_of_the_pabx:5060

    If you do not lock the external IP addresses down to the ones that are relative to the external parties that are valid, then you will be allowing many external parties to run havoc with your systems call flow.


    Look at your firewall tables and block everything that isn't a valid extensions external IP.

  5. #5

    Default

    Makes perfect sense. I'll give it a try. Will try to report back in a few weeks, it may help somebody else from pulling out too much of their hair.

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. Autodialer reporting times in a strange way.
    By stratusnetworks in forum Troubleshooting and Problems
    Replies: 3
    Last Post: 06-14-2013, 08:56 AM
  2. Add Rings Before Auto Attendant Picks Up
    By flyboy_dea in forum 'How Do I' Questions
    Replies: 2
    Last Post: 07-10-2012, 03:47 PM
  3. Call path interrupted when phone rings
    By dpierce in forum Troubleshooting and Problems
    Replies: 2
    Last Post: 01-12-2011, 10:05 PM
  4. Group Pickup strange behaviour.
    By Leeinsa in forum Troubleshooting and Problems
    Replies: 4
    Last Post: 04-02-2010, 07:21 PM
  5. Strange Problem
    By Mike_eNET in forum Troubleshooting and Problems
    Replies: 7
    Last Post: 10-02-2009, 06:50 AM

Tags for this Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •