Manage Blocked IP Addresses

When Cloud Voice detects suspicious traffic, its security rules automatically block the offending account or IP (Internet Protocol) address. This page shows you how to inspect those blocked entries and, when appropriate, remove them.

Review a blocked IP address

1. Sign in to the Cloud Voice web portal and go to Security > Security Rules > Blocked IPs.
2. Locate the entry you want to inspect. Each blocked entry lists the following details:
   • Defense Type: The security defense that triggered the block.
   • Block Type: Whether an account or an IP address was blocked.
   • Block Range: The range of accounts or ports covered by the block.
   • Time of Attack: When the blocked account or IP address attempted to attack the system.
   • Protocol: The protocol used in the attempted attack.
   • Attacked Port: The port targeted by the attack.
   • Source IP Address: The IP address the attack originated from.
   • Expiration Date: The date and time when the block is scheduled to lift on its own.

Tip

Read the Defense Type, Source IP Address, and Time of Attack together to work out why a block happened. Repeated failed logins from one of your own office IP addresses usually mean a user mistyped a password rather than a real attack, so check these fields before you decide to remove an entry.

Remove a blocked IP address

Each block clears automatically on its expiration date, but you can lift one early if you have confirmed the source is safe.

1. Sign in to the Cloud Voice web portal and go to Security > Security Rules > Blocked IPs.
2. Remove one or several entries:
   • To remove a single entry, click next to the IP address, then click OK.
   • To remove several entries at once, select the checkbox beside each address, click Delete, then click OK.

Caution

Removing an entry restores that source’s access immediately. Only unblock an IP address once you are confident it is not a threat.