IP Blacklist is getting bigger

[TazPam]

Hello everyone,

I hope you are all well. Each day we are getting at least 2-3 IP addresses blocked for attempted to authenticate our 3CX telephone system. I am trying to block those numbers (till 2030) but each day, we have different IP addresses trying so blocking is getting a bit tedious.

Is there a way that i can set up to use the management portal from only dedicated iIP addresses. For example my IP address at work is static and doesn't change. Can i assign this IP address to manage 3CX management portal only and nobody else ?

Many thanks for your help

Kind Regards
Taz

 

[Saqqara]

If the system is already blocking the IP's addresses, why are you adding them manually ?

The system is doing it's job in blocking attempted hacks into your system.

 

[VoIPTools]

The concern is that the automatic blocking is not permanent. We don't want these IPs to be able to try again in the future.

 

[TazPam]

Hi Saqqara,

Yes you are right, the system is doing its job and blocking them automatically but only for a short period of a time, therefore i manually adjust the period and the ip range every time. My worry is, why there are so many attempts to hack the telephone system and what if they will succeed one day. If i can manage to limit the ip addresses that can control the management console, that will add extra layer of security...

Kind Rgards
Taz

edit:typo

 

[Alphabetic]

The maximum timeout for IP blacklist is 1000000000 seconds which is just about 32 years.

as mentioned in 3CX documentation, the PBX should not be your first line of defence.

I recommend you be more restrictive with your firewall.

As for why there are so many attempts the answer is simple - it's on the internet and there are many bots which sole job is to hack computers/accounts.

 

[AWS2P]

The concern is that the automatic blocking is not permanent

If you use 3CX IP blacklist, IP's are blocked for 400 years , so no chance to retrieve the same few days

 

[TazPam]

Thank you for everyone for replies.

Is there a feature on 3CX that allows only the certain IP addresses to log on to the FDQN (Management console)

Taz

 

[Alphabetic]

 

[TazPam]

Thank you so much Kieferschild.

Best Regard
Taz