3CX generates DDoS packets

[reso1ution1]

I have the latest version of 3CX and a Mikrotik router. When I try to set up access via Mikrotik for this instruction: https://www.3cx.com/docs/mikrotik-firewall-configuration/
3CX begins to generate a huge number of packets to the side of IP addresses that are in China (at the same time, the load on the CPU server 3CX is 60%, usually no more than 15).
This means that my 3CX is infected or I need to make more settings in the firewall?
Now I'm saving myself by banning all traffic except traffic from the provider's IP addresses

 

[StefanW]

as we dont have services in China, is this a response to an incoming package?
You may block this IP (range) if you have no services located there (such as SIp Trunks)

 

[reso1ution1]

as we dont have services in China, is this a response to an incoming package?
You may block this IP (range) if you have no services located there (such as SIp Trunks)

there is a problem - IP addresses are constantly changing

 

[StefanW]

I don't think we generate those but they are responses from incoming sip messages.
You may can check this in Wireshark to determine what the source content is.