ghost calls to cid:XXXXX

[bfcoi974]

Hello everyone,

After several researchs, I'm really stucked with my issue.
Here is my situation :
I have some T42U phones, which replaces older cisco phones.
Once the phone is installed, this one started making some random calls to a strange format : cid:XXXXXXXX with error on screen (failed to call).
First it makes calls every random times (cf : histo1.png)
So after delete the extension in the pbx, upgrade firmware on phone then apply options for ghost call both in cgf file, the phone makes calls every 50 minutes. (cf : histo2.png)
This behaviour makes users confused because they think they are giving or receiving calls but they phone don't ring.
Thanks for your help.

[complex1]

(06-17-2022 03:52 PM)bfcoi974 Wrote:  Hello everyone,

After several researchs, I'm really stucked with my issue.
Here is my situation :
I have some T42U phones, which replaces older cisco phones.
Once the phone is installed, this one started making some random calls to a strange format : cid:XXXXXXXX with error on screen (failed to call).
First it makes calls every random times (cf : histo1.png)
So after delete the extension in the pbx, upgrade firmware on phone then apply options for ghost call both in cgf file, the phone makes calls every 50 minutes. (cf : histo2.png)
This behaviour makes users confused because they think they are giving or receiving calls but they phone don't ring.
Thanks for your help.

Hi,

It looks like some-one/thing is trying to hack your phone(s)

Please take next steps...
1. Reset the phone(s) to factory default
2. Make sure the user account does not have the default password
3. Disable IP Call feature:
Features > General Information > Allow IP Call: Disabled
Or by auto provisioning parameter:

Code:

features.direct_ip_call_enable = 0

4. Enable SIP trust feature:
Features > General Information > Accept SIP Trust Server Only: Enabled
Or by auto provisioning parameter:

Code:

sip.trust_ctrl = 1

[bfcoi974]

(06-17-2022 05:36 PM)complex1 Wrote:  

(06-17-2022 03:52 PM)bfcoi974 Wrote:  Hello everyone,

After several researchs, I'm really stucked with my issue.
Here is my situation :
I have some T42U phones, which replaces older cisco phones.
Once the phone is installed, this one started making some random calls to a strange format : cid:XXXXXXXX with error on screen (failed to call).
First it makes calls every random times (cf : histo1.png)
So after delete the extension in the pbx, upgrade firmware on phone then apply options for ghost call both in cgf file, the phone makes calls every 50 minutes. (cf : histo2.png)
This behaviour makes users confused because they think they are giving or receiving calls but they phone don't ring.
Thanks for your help.

Hi,

It looks like some-one/thing is trying to hack your phone(s)

Please take next steps...
1. Reset the phone(s) to factory default
2. Make sure the user account does not have the default password
3. Disable IP Call feature:
Features > General Information > Allow IP Call: Disabled
Or by auto provisioning parameter:

Code:

features.direct_ip_call_enable = 0

4. Enable SIP trust feature:
Features > General Information > Accept SIP Trust Server Only: Enabled
Or by auto provisioning parameter:

Code:

sip.trust_ctrl = 1

Hello @complex1

Thanks for your reply.
I made all changes you mentionned.
But on one phone it still have call every 50 minutes.
Please check the attachment.
Thanks for your help.

[complex1]

(06-17-2022 06:32 PM)bfcoi974 Wrote:  

(06-17-2022 05:36 PM)complex1 Wrote:  Hi,

It looks like some-one/thing is trying to hack your phone(s)

Please take next steps...
1. Reset the phone(s) to factory default
2. Make sure the user account does not have the default password
3. Disable IP Call feature:
Features > General Information > Allow IP Call: Disabled
Or by auto provisioning parameter:

Code:

features.direct_ip_call_enable = 0

4. Enable SIP trust feature:
Features > General Information > Accept SIP Trust Server Only: Enabled
Or by auto provisioning parameter:

Code:

sip.trust_ctrl = 1

Hello @complex1

Thanks for your reply.
I made all changes you mentionned.
But on one phone it still have call every 50 minutes.
Please check the attachment.
Thanks for your help.

Hi,

Please check in Features > Forwarding & DND that everything is "OFF" and no fields are filled in.
Also check the local phonebook for strange names/numbers.

[bfcoi974]

(06-17-2022 08:20 PM)complex1 Wrote:  

(06-17-2022 06:32 PM)bfcoi974 Wrote:  

(06-17-2022 05:36 PM)complex1 Wrote:  Hi,

It looks like some-one/thing is trying to hack your phone(s)

Please take next steps...
1. Reset the phone(s) to factory default
2. Make sure the user account does not have the default password
3. Disable IP Call feature:
Features > General Information > Allow IP Call: Disabled
Or by auto provisioning parameter:

Code:

features.direct_ip_call_enable = 0

4. Enable SIP trust feature:
Features > General Information > Accept SIP Trust Server Only: Enabled
Or by auto provisioning parameter:

Code:

sip.trust_ctrl = 1

Hello @complex1

Thanks for your reply.
I made all changes you mentionned.
But on one phone it still have call every 50 minutes.
Please check the attachment.
Thanks for your help.

Hi,

Please check in Features > Forwarding & DND that everything is "OFF" and no fields are filled in.
Also check the local phonebook for strange names/numbers.

Hiii,

Everything at this option has been check and nothing filled.
The phonebook has been cleaned up too.

Thanks.

[complex1]

(06-17-2022 08:32 PM)bfcoi974 Wrote:  

(06-17-2022 08:20 PM)complex1 Wrote:  Hi,

Please check in Features > Forwarding & DND that everything is "OFF" and no fields are filled in.
Also check the local phonebook for strange names/numbers.

Hiii,

Everything at this option has been check and nothing filled.
The phonebook has been cleaned up too.

Thanks.

Mmmmm
Is the phone Remote Control enabled to receive action URI requests?
Please disable this feature using provisioning parameter
features.action_uri.enable = 0
Also disable CSTA control
features.csta_control.enable = 0

[bfcoi974]

(06-18-2022 01:27 AM)complex1 Wrote:  

(06-17-2022 08:32 PM)bfcoi974 Wrote:  

(06-17-2022 08:20 PM)complex1 Wrote:  Hi,

Please check in Features > Forwarding & DND that everything is "OFF" and no fields are filled in.
Also check the local phonebook for strange names/numbers.

Hiii,

Everything at this option has been check and nothing filled.
The phonebook has been cleaned up too.

Thanks.

Mmmmm
Is the phone Remote Control enabled to receive action URI requests?
Please disable this feature using provisioning parameter
features.action_uri.enable = 0
Also disable CSTA control
features.csta_control.enable = 0

Hello complex1

Thanks for your answer.
I need to know, whats these options refers to please ?
And if I disable these options, do I lost access to web interface ? 'Cause the phone is in a remote site and if I lose access, I couldn't come back if the solution don't work.
Thanks for your help.

[complex1]

(06-20-2022 02:28 PM)bfcoi974 Wrote:  Hello complex1

Thanks for your answer.
I need to know, whats these options refers to please ?
And if I disable these options, do I lost access to web interface ? 'Cause the phone is in a remote site and if I lose access, I couldn't come back if the solution don't work.
Thanks for your help.

Wow, if I understand well, the phone is at remote position?
Have you reset the phone to factory default, as I asked to do? I guess not. Because after the reset, all settings are gone and the connection to the PBX or provider is lost... and remote login is not possible anymore.

But to answer your questions:
"features.action_uri.enable=0"
Disabled the possibility the server address from which the phone receives the action URI requests.

"features.csta_control.enable=0"
CSTA, short for Computer Supported Telecommunications Application, standardizes a very powerful and flexible set of application services to observe and control voice and non-voice media calls as well as control and observe non-call related features.

[bfcoi974]

(06-21-2022 03:39 AM)complex1 Wrote:  

(06-20-2022 02:28 PM)bfcoi974 Wrote:  Hello complex1

Thanks for your answer.
I need to know, whats these options refers to please ?
And if I disable these options, do I lost access to web interface ? 'Cause the phone is in a remote site and if I lose access, I couldn't come back if the solution don't work.
Thanks for your help.

Wow, if I understand well, the phone is at remote position?
Have you reset the phone to factory default, as I asked to do? I guess not. Because after the reset, all settings are gone and the connection to the PBX or provider is lost... and remote login is not possible anymore.

But to answer your questions:
"features.action_uri.enable=0"
Disabled the possibility the server address from which the phone receives the action URI requests.

"features.csta_control.enable=0"
CSTA, short for Computer Supported Telecommunications Application, standardizes a very powerful and flexible set of application services to observe and control voice and non-voice media calls as well as control and observe non-call related features.

Hi complex1
Exact. It has been factory reset but have auto provisioning configured so it retrieves config file content.
I will apply these options and see if it resolves my situation thanks.