How to solve Yealink Ghost Calls

"Ghost calls"—those annoying rings from random numbers like 100, 1000, or "Anonymous" with no one on the other end—can be a major disruption to your workflow.

These aren't actual people; they are typically automated bots (like SIPvicious) scanning the internet for open VoIP ports. Here is a professional guide on how to secure your Yealink hardware and silence ghost calls for good.

Step 1:
Access Your Phone’s Web Interface

To fix this, you need to log into the phone’s backend from your computer.

1. On your Yealink phone, press the OK button to display the IPv4 Address (e.g., 192.168.1.50).

2. Open your web browser and type that IP address into the search bar.

3. Log in using your credentials (the default is usually username: admin / password: admin).

Step 2:
Disable "Direct IP Calling"

Direct IP calling allows the phone to receive calls without going through your PBX server. Since bots call your IP address directly, disabling this is your first line of defense.

Navigate to the Features tab.

Select General Information from the left-hand menu.

Locate Allow IP Call and set it to Disabled.

Click Confirm at the bottom of the page.

Step 3:
Enable "SIP Trust Control"

This setting ensures your phone only listens to your specific VoIP provider.

For Newer Firmware:
Stay in the Features > General Information section and find Accept SIP Trust Server Only. Set this to Enabled.

For Older Firmware:
Go to the Account tab > Advanced. At the bottom, find Accept SIP Trust Server Only and set it to Enabled.

Note: If you have multiple accounts/lines, you must repeat this for each account.

Click Confirm.

Pro Tips for Advanced Security

1. Change Your Local SIP Port

By default, almost all VoIP devices use port 5060.

This is the first door hackers knock on.
Changing your local port to a random number (e.g., 5082 or 40231) makes your device virtually invisible to most automated scanners.

Go to Settings > SIP and update the Local SIP Port.

2. Update Your Firmware

Yealink regularly releases patches to combat new scanning techniques.

If your web interface looks different than the steps above, you are likely on an outdated version.

Go to Settings > Upgrade to check for updates.

3. The Firewall Solution

If you are managing a large office, the most robust "Results-Oriented" solution is at the router level.

Configure your firewall to only allow traffic from the specific IP addresses of your VoIP provider.

This stops the ghost calls before they even reach your desk.