I get a lot of: PBX: blocked for too many failed authentications; User-Agent: 3CX Phone System

[msavazzi]

Why I get a ton of these?
always from different ip addresses

any suggestion?


thanks,
M

 

[cobaltit]

You are getting these because the internet is a scary place. Like anything else IP based, you can block traffic with a firewall. The 3CX training below can explain in more detail.

https://www.3cx.com/3cxacademy/videos/advanced/security-with-3cx-phone-system/

Also,this also has nothing to do with the supply chain attack so please don't post in this section so we can keep it clear for related information.

 

[msavazzi]

Thank you for the help. I was not expecting to have so many attacks and hoping they were false positive.
I did not found another security section I thought it was the right one.