IP Address/Extension Blacklisting

Last Updated : Sep 21, 2022 |
Prolog information
The system logs failed H323/SIP registration requests. Multiple failed attempts can lead to the extension and/or IP address being blocked from further registration attempts for 10 minutes.
Blocking applies as follows:
Blocking Method
Description
Extension Blocking
Registration attempts to an existing extension using the wrong password are blocked for 10 minutes after 5 failed attempts in any 10 minute period.
IP Address Blocking
Registration attempts to a non-existent extension or using the wrong password of an existing extension are blocked for 10 minutes after 10 failed attempts in any 10 minute period.
  • When blocking occurs:
    • The system generates an alarm in System Status Application
    • It adds an entry to its audit log.
    • A system alarm is also generated and can be output using any of the supported system alarm routes (SMTP, SNMP, Syslog).
  • SysMonitor can display details of blacklisted IP addresses and extensions, select StatusBlacklisted IP Addresses and StatusBlacklisted Extensions.