In the 3CX settings, you can choose how long the time-out period is, or how many attempts are required to start the time-out. You don't wan to set it too low, I use 250,000 seconds, and some use longer. A lower setting only encourages hackers if you aren't keeping on top of permanently blocking repeat IP's on a regular basis. I do white-list the local LAN as I have had local devices blocked, at times, for some reason.