Blacklist time interval - not working as advertised

[he11o]

hi all, just thought i'd post something that was noticed in the last few months..

we seem to be getting more and more email alerts from our pbx with "Reason: Blocked for too many failed authentications".. the IP is blacklisted then same IP tries to break in again and another email is generated..

upon closer look the "Blacklist time interval" is set to 2630000 seconds which is roughly 30 days yet the email says the IP was blacklisted for 15 mins (screenshots attached).

seems like a bug.. has anyone else noticed this or specific to our instance only?

 

[SteveITS]

The anti-hacking module is for SIP attempts, not for web login.

per https://www.3cx.com/community/threa...considered-in-ip-blacklist.119034/post-553788

 

[he11o]

got it thanks!

is there a #/app/settings/parameters/custom parameter where the default 15 minutes can be updated to something longer for web logins IP blacklist?

 

[GavenL]

hi all, just thought i'd post something that was noticed in the last few months..

we seem to be getting more and more email alerts from our pbx with "Reason: Blocked for too many failed authentications".. the IP is blacklisted then same IP tries to break in again and another email is generated..

upon closer look the "Blacklist time interval" is set to 2630000 seconds which is roughly 30 days yet the email says the IP was blacklisted for 15 mins (screenshots attached).

seems like a bug.. has anyone else noticed this or specific to our instance only?

Yes! I'm experiencing this right now, almost at my wits-end. Nothing works, tried Admin console, tried Management console both say "IP blacklisted" after I've waited 24hrs (yesterday) and I'm still locked out. Now Management console has locked me out for too many attempts (sta 100). I'm already having issues with getting this damn thing running, just doesn't seem to work out, I've burnt days & days on the job, well past making a cent on it. One of the biggest failures of 3CX is allowing Admin & a handset on the one station number, as soon as I get in I'm making Sta 100 not a handset, and whitelisting absolutely everything