Solved Blacklist - "This IP address is already in the blacklist"

[PhoneEP]

I am getting that error when trying to add an IP I received multiple emails about last night for "Webclient/API" attempts. The expiration was only 15 minutes, so I received 8-10 emails. In the anti-hacking, I have the blacklist time interval set to the max, 31.7 years.

I went into IP Blacklist to find it to move the expiration out, but it was not in list, so I went to add it and get that error.

Any ideas why the expiration internal is not setting correctly and it is hidden in list?

Thank You

 

[SteveITS]

I expect it is in the 3CX global blacklist so won't add again.

The blacklist timeout does not apply to the web GUI, only SIP:
https://www.3cx.com/community/threa...-not-working-as-advertised.120193/post-560940

FWIW, for servers we host we run IDS in front of them, and limit access by country, and this seems to help quite a bit.

 

[PhoneEP]

Thanks. When you say Global blacklist, do you mean for all 3CX users?

 

[NicholasP_3CX]

Thanks. When you say Global blacklist, do you mean for all 3CX users?

3CX maintains a global IP blacklist which is replicated to all 3CX Systems with this option enabled.

 

[PhoneEP]

Thanks!