3CX system Public IP being Blacklisted by 3CX

[redmondsau]

I have recently started getting email notifications that an IP has been blacklisted due to too many failed authentications.

The IP in question is the Public IP address of the router in front of the 3CX system.

Any ideas on why this may be happening & how to resolve it.

Regards
redmondsau

 

[erling]

Don't know why it does it, but you can fix it by editing the entry in the IP Blacklist and change the "action" from deny to allow.

 

[lneblett]

Before you white list the IP, consider that it could be a spoofed IP. You need to consider a few things -

1. Do you have any devices or softphones on the public side of the router? If so, is it possible that one of these devices is causing the issue.

2. What harm has come about as a result of the blacklisting? Has any functionality of the system been impacted? If no, then consider simply extending the blacklisting period so as to avoid the emails.

3. Unless you know and feel comfortable about the situation, why take the chance?

There are plenty of folks out there that do nothing (it seems) other than to find ips and scan ports in the hopes that they will get a response and once found, will try various things to see if they can exploit it.