IP blacklist blocked time is too short

[MH_INDUS]

Hello all,

over the weekend we had a lot of failed authentication attempts for the webclient that resulted in a lot of blocked IP adress emails.

The curios thing ist that the time set for the blocklist is 86400 seconds, but the IPs only get blocked for 900 seconds, after which the authentication attempts resume.

Do I have the time set wrong, are my expectations wrong or is there simply a bug?

Running on V18 U8 Windows

Thanks in advance

 

[TheodorosG_3CX]

Note that this is the blacklist interval for the Weblient API and is by default set to 15 mins(900seconds).
This is set to prevent known users to login to the webclient or the management console with wrong or without any credentials.

 

[MH_INDUS]

Note that this is the blacklist interval for the Weblient API and is by default set to 15 mins(900seconds).
This is set to prevent known users to login to the webclient or the management console with wrong or without any credentials.

Hi Theodoros,

thanks for the reply. What is the 86400 seconds time interval for if not for the webclient?

Where can I change the blocked time for webclient authentication?

 

[SteveITS]

It’s for SIP not web logins:
https://www.3cx.com/community/threa...considered-in-ip-blacklist.119034/post-553788
…and as I recall it’s not changeable.