Mac Desktop app logged itself out and then got my IP banned?

[ScallViz]

Hello

First I want to apologize I started a thread in the Android client area because I assumed that the 3CX Desktop app wasn't active while my laptop (Macbook Pro M1) was asleep.

When I woke up this morning my ip address was banned for too many failed logins but when I dug through the logs, I found something a bit stranger?

2022/10/19 04:42:10.152|21605|0008|Inf|MYPHONE: 1ST Login User:464, Password:null, SessionID:908ebd5a-6a4b-f235-4ba0-eb446a178322, IP:[MYIP], ClientInfo:3CXDesktopApp 18.10.461, ClientVersion:18.10.461
2022/10/19 04:42:10.152|21605|0008|Inf|MYPHONE: 2ND Login User:464, Password:[HASHED PASSWORD], SessionID:908ebd5a-6a4b-f235-4ba0-eb446a178322, IP:[MYIP]
2022/10/19 04:42:10.152|21605|0008|Inf|MYPHONE: Client 464([MYIP]) with SessionId 908ebd5a-6a4b-f235-4ba0-eb446a178322 has been added
2022/10/19 04:43:10.152|21605|0070|Inf|MYPHONE: 908ebd5a-6a4b-f235-4ba0-eb446a178322 - closing WebRTC device/session
2022/10/19 04:43:10.152|21605|0070|Inf|MYPHONE: 908ebd5a-6a4b-f235-4ba0-eb446a178322 - WebRTC device/session has been closed
2022/10/19 04:59:56.469|21605|0061|Err|MYPHONE: SessionId: 908ebd5a-6a4b-f235-4ba0-eb446a178322 (IP: [MYIP]): Request 'RequestServerTime' without logging in
2022/10/19 04:59:56.470|21605|0036|Err|MYPHONE: SessionId: 908ebd5a-6a4b-f235-4ba0-eb446a178322 (IP: [MYIP]): Request 'RequestLookupContact' without logging in
2022/10/19 04:59:56.470|21605|0025|Err|MYPHONE: SessionId: 908ebd5a-6a4b-f235-4ba0-eb446a178322 (IP: [MYIP]): Request 'RequestMyInfo' without logging in
2022/10/19 04:59:56.470|21605|0063|Err|MYPHONE: SessionId: 908ebd5a-6a4b-f235-4ba0-eb446a178322 (IP: [MYIP]): Request 'RequestLookupContact' without logging in
2022/10/19 04:59:56.470|21605|0048|Err|MYPHONE: SessionId: 908ebd5a-6a4b-f235-4ba0-eb446a178322 (IP: [MYIP]): Request 'RequestServerTime' without logging in
2022/10/19 04:59:56.470|21605|0025|Err|MYPHONE: IP [MYIP] is blacklisted

I'm not really sure what caused the server to consider the session closed (and thus not logged in) but it closed the session at 4:33am and then ~17 minutes later it banned the IP for doing requests without being logged in.

This is the first time this has happened and for me, as administrator, I was able to recover quickly but I have concerns if this is a repeating issue that may affect my users?

Server Details:
18.0 u 5 (build 418) on self hosted 3CX VM in the office, firewall checks out green.



Thanks!