The IP Office system logs failed H323/SIP registration requests. Multiple failed attempts can lead to the extension and/or IP address becoming blocked for a period.
Blocking applies as follows:
Method
Description
Extension Blocking
Registration attempts to an existing extension using the wrong password are blocked for 10 minutes after 5 failed attempts in any 10 minute period.
IP Address Blocking
Registration attempts to a non-existent extension or using the wrong password of an existing extension are blocked for 10 minutes after 10 failed attempts in any 10 minute period.
When blocking occurs, the system generates an alarm in System Status Application and adds an entry to its audit log. A system alarm is also generated and can be output using any of the supported system alarm routes (SMTP, SNMP, Syslog).
System Monitor can display details of blacklisted IP addresses and extensions, select StatusBlacklisted IP Addresses and StatusBlacklisted Extensions.
