Blacklist not blocking IP's

[ChrisD]

Hi,
I have an issue where I'm being spammed by 1 IP for too many failed authentications. I have added that IP to the IP Blacklist and set to Deny but am still receiving emails saying it has been added to the blacklist.

Added to blacklist on 2nd November.
https://1drv.ms/i/s!AoB1m-1TKL1EhcEpRuuPB2BuX3cvNw

All emails received after 2nd November.
https://1drv.ms/i/s!AoB1m-1TKL1EhcEqTllf0FcaC9DEUg

Any suggestions?

Thanks,
Chris.

 

[ChrisD]

I have blocked this IP along with some others via my router which are still showing as failed authentications despite being on 3CX's blacklist.

Might be a problem with 3CX?

Thanks,
Chris.

 

[ian.watts]

Wait.. what?

If you blocked it at the router, there should be no traffic from that address reaching your PBX, either at all or for SIP. Can't be both.. either 3CX is still blacklisting the IP over and over (because it times out.. I finally upped the default to 'very long'.. saw a similar/same IP recently..) or whatever firewall rule you set on your router is out of order or not triggering.

 

[revilo951]

Chris, are you using V15? I am, and I have the exact same IP attempting to log into my system, but I can't find anywhere in V15 to permanently blacklist an IP.

It someone can tell me where it is (or if it isn't in V15), I'd appreciate it.

 

[revilo951]

Never mind, I found it on the dashboard. :roll: