3cx IP Blacklisted

[HS-ITops]

Dear Team,

We’ve noticed that 3CX is blacklisting entire source IP addresses due to failed login attempts. While we can whitelist known IPs, we are concerned about the potential broader impact of this approach. Specifically, users under whitelisted IPs are not having their accounts locked after exceeding the failed login attempt limit.

Is there a way to configure 3CX to lock individual user accounts after failed login attempts, rather than blacklisting the entire IP address?

Best regards,

 

[Guillaume Bourgeois]

Dear Team,

We’ve noticed that 3CX is blacklisting entire source IP addresses due to failed login attempts. While we can whitelist known IPs, we are concerned about the potential broader impact of this approach. Specifically, users under whitelisted IPs are not having their accounts locked after exceeding the failed login attempt limit.

Is there a way to configure 3CX to lock individual user accounts after failed login attempts, rather than blacklisting the entire IP address?

Best regards,

So you don't want the IP to be blacklisted, but just the user account?
Yes ? What if there are attempts not linked to a user account, for example, a bot making random attempts? How should 3CX handle this scenario?

Blacklisting IPs is necessary and it's not advisable to "bypass" it or add unknown IPs to the whitelist. Only whitelist IPs that you know, like your users, and enable two-factor authentication to secure user access.

In 2024, two-factor authentication is a minimum... and shouldn't even be optional!
Please, do not suggest lowering the security level of an application, educate the users instead!

There are so many simple solutions!

Use Microsoft or Google integration to allow users to authenticate with their email account.

Install the 3CX Softphone app via the Windows Store, so they won’t have to log in each time.

Educate users on using a password manager to store their passwords.