We've all seen that. Hackers are constantly scanning for open ports, and in this case, port 5060. 3CX is very good at blocking hack attempts, and there are a few things you can change, like the amount of time each IP is blocked (good idea to extensd that ), and the number of attempts before being blocked. However, 3CX is not a firewall. You might consider installing one to limit the IPs that have access to your system.