Huge Uptick in Black Listed IP Address notifications

[millennium2]

As of 2 days ago, I've been getting g a huge uptick in Black Listed IP Address notifications. My inbox is getting over 400 now as of today.

Ex.

The IP 146.70.102.196 on PBX xxxx.3cx.us has been blacklisted and will expire on: 2022/06/29 20:37:32.
Affected Module: SIP Server
User agent: PolycomSoundPointIP SPIP_550 UA 3.3.2.0413

Reason: Too many failed authentications!

This IP Address 146.70.102.196 has made numerous attempts to authenticate with 3CX using invalid credentials. In response, 3CX has blacklisted this IP and denied any further requests.

No action is required on your behalf.

Obviously, the hacker then just tries a different IP address again, and again, and afain. Should I be concerned and taking any further precautions? Or just wait for the hacker to give up?

 

[Alphabetic]

Ensure your security it tight, passwords complex, admin console restricted to IP. You could even go as far as locking down your firewall ports. Other then that, if it's on the internet, it's going to be attempted to accessed and subject to brute force attacks.
If i were you I would disable those notifications. Attacks typically come in waves. I would make sure your IP isnt pingagle from the internet too.

 

[Saqqara]

Check out - https://www.3cx.com/blog/voip-howto/global-ip-blacklist/ , the 3cx system is doing its job in blocking these hacking attempts

As above, I would switch off the notifications