Anti-hacking Module / Blacklist Notifications

[LCT-PhoneSystem]

Hello,

I've been receiving a lot of anti-hacking notifications from my pbx. Is this something I should be concerned about?

The IP 94.23.42.112 has been blacklisted for 445 sec.
Reason: Requests rate is too high!

They have been happening since the start of February:

163.172.197.210
51.15.145.32
94.23.42.112

 

[mixig]

People say better safe than sorry.
With that, SIP port 5060 it should not be open from insecure network (e.g. Internet) never.
If you need port 5060 to be open create filter rule on your router/firewall which allows only source IP address of your VoIP provider.
For "road warriors", if any, use 3CX clients with 3CX tunnel, or if you are using some remote offices best way fot connecting these remote phones is through secure VPN connections.

Good tips and best practise advice can be found here (short brief is on the last slide, slide 21):
https://www.3cx.com/3cxacademy/videos/advanced/security-with-3cx-phone-system/

 

[LCT-PhoneSystem]

Thanks for the info. I'll check the firewall config and go from there.