Systems do get hacked, usually by way of the voicemail system, and customers get huge overseas calls on their bill. WHich is prbabaly why moderators are so quick to delete passcodes (even default codes which have very minor security as it is).

I have not hear of anyone randomly connecting to an IP card, but I it is probabaly the odds, with small number of IP cards, limited people who would know have an IP phone and the know how to connect. It would also require a working, unused IP extension.

Looking at an IP phone today, it looks like the settings related to mobility are FB25 and FB25, which again makes me think it is related to the rarely used, and disabled by default, feature that allows a tech to connect to the phones using a web browser.

Which makes me think, they put a built in web server into a phone but not the the CIX processor?