Discover Our Helpdesk & Knowledge Base

Table of contents

Table of contents

    How to Block Incoming Calls from Unknown Numbers on VoIP Phones

    Share this on

    Sometimes we receive repeated, annoying calls from unknown three-digit or four-digit numbers on our VoIP devices, where no one can be heard when the call is answered. This is usually caused either by incorrect network settings that leave ports exposed, or by malware that has infiltrated the local network and is generating these calls. In such cases, we recommend performing a virus scan on your computers and checking your network settings.

    Regarding telephony, in order to avoid repeated calls, we need to change certain settings on our VoIP device. Instructions for the most common brands are provided below:

    Cisco

    1. Find the device IP address and log in to the management web interface.
    2. In the Voice tab, select EXT or Line, depending on the device.
    3. In the Restrict Source IP option, select Yes.
    4. Click Save or Submit All Changes, depending on the device.
       

    Grandstream

    1. Find the device IP address and log in to the management web interface.
    2. In the Menu Account > SIP Settings > Security Settings tab, select Yes for the following fields:
      • Validate Incoming Messages
      • Check SIP User for incoming INVITE
      • Accept incoming SIP from Proxy Only
    3. Click Save and Apply.
       

    Yealink

    1. Find the device IP address and log in to the management web interface.
    2. Go to the Features > General Information tab.
    3. In the Allow IP Call option, select Disable and then Confirm.
    4. In the Accept SIP Trust Server Only option (if available), select Enabled and then Confirm.
       

    Panasonic

    1. Find the device IP address and log in to the management web interface.
    2. Locate the VoIP > SIP Settings tab.
    3. In the Security section, select Yes for the option Enable the option ‘SSAF’ (SIP Source Address Filter).
    4. Click Save.
       

    Snom

    1. Find the device IP address and log in to the management web interface.
    2. Check whether you are using version 8 or newer from the System Information > Firmware Version tab.
    3. If this requirement is met, go to the Setup > Advanced > QoS/Security tab and locate the Filter packets from Registrar setting. Select Yes and click Save.

    Frequently asked questions

    Calls from unknown SIP numbers are usually caused by automated scans (SIP scanning) performed over the internet. Attackers search for VoIP devices with insufficient security settings.

    Ghost calls, also known as phantom calls, are unwanted calls that appear on VoIP devices without originating from a valid phone number or registered user. They are often associated with SIP scanning or incorrect security configurations.

    In most cases, these calls do not cause immediate harm, but they indicate that your device is receiving unauthorized SIP traffic. It is recommended to apply the appropriate security settings as soon as possible.

    Most VoIP devices include security settings that allow calls to be accepted only from authorized SIP servers or registrars. Enabling these options usually resolves the issue.

    SIP Scanning is an automated process in which internet-based systems search for active VoIP devices and SIP accounts for potential exploitation or attacks.

    Yes. A properly configured firewall can significantly reduce unwanted SIP traffic and minimize the likelihood of receiving calls from unknown sources.

    Was this article helpful?

    Thank you for your feedback!