Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

Repetative dial in's from 'cisco' machine or end point

Over the past few weeks we have been receiving call attempts from a 'cisco' endpoint. We have seen this attempt from random ip's from all over the world. At first we tried to set our video end point into a 'Do not Disturb" mode but noticed logic channels opening anyway.  Looking at the packet captures over a 24 hour period on port 1720 we see the endpoint calling in is labeled as 'cisco' or 'cisco/000' and has an common number attached with some variation.

The number looks like an ISDN number back to the UK. Canterbury and Edinburgh with the only differences on the front of the number string.

This has been seen at several large Illinois Universities on both Polycom systems and Cisco endpoints.

 

Any one else getting this?

  • IP Telephony
18
Views
0
Helpful
0
Replies