Hi,
Ever since we upgraded to v18 U6 early February, our event log is full of invalid login attempts. A sample of the error:
User or password is invalid from xx.xx.xx.xx
3CX Phone System Management Console ID: 30037 02/26/2023 11:36:17 AM
We have console restrictions on the management page. I tested logging in outside the set ranges and I could not log in but no error came up in the event log with my ip that was trying to access the system. There's so many different ips that come up in the logs that it's not very easy to blacklist them all. We do have maximum incorrect attempts set to 2 under anti-hacking module but from what I understand that might be for sip.
Will this be addressed / fixed in the coming versions? Or is it recommended to rollback versions in cases like this? We have been using 3cx for 3-4 years now but never had any issue like this making us consider rolling back to older version. Some more info on the system below:
Ever since we upgraded to v18 U6 early February, our event log is full of invalid login attempts. A sample of the error:
User or password is invalid from xx.xx.xx.xx
3CX Phone System Management Console ID: 30037 02/26/2023 11:36:17 AM
We have console restrictions on the management page. I tested logging in outside the set ranges and I could not log in but no error came up in the event log with my ip that was trying to access the system. There's so many different ips that come up in the logs that it's not very easy to blacklist them all. We do have maximum incorrect attempts set to 2 under anti-hacking module but from what I understand that might be for sip.
Will this be addressed / fixed in the coming versions? Or is it recommended to rollback versions in cases like this? We have been using 3cx for 3-4 years now but never had any issue like this making us consider rolling back to older version. Some more info on the system below:
- Include the basics so we can better understand your system setup
- 3CX Version: Professional Annual 18.0 Update 6 (Build 908)
- Server OS: Debian 10
- Is the 3CX Server Hosted and where: On-premises
- Provisioning Method: Local / STUN
- Are custom Phone Templates being used: NO
