Platform, Security & Integrations / Security

Global Threat-Intelligence IP Blocklist

A continuously updated, shared blocklist of known malicious sources — built from attack patterns seen across many deployed systems, not just yours — means your phone system can automatically block a known bad actor even before it has attacked you specifically.

How is this different from the brute-force protection on our own system?

Brute-Force Login Protection reacts to attacks against your system specifically, after they start. A global threat-intelligence blocklist is proactive — it blocks sources already known to be malicious from prior attacks elsewhere, before they get the chance to try anything against your system at all.

Where does this threat data come from?

It’s built and continuously updated from attack activity observed across the broader base of deployed systems — when a malicious source is identified attacking one deployment, that intelligence protects every other deployment using the same blocklist, including yours.

Does this require any setup or maintenance on our end?

No — the blocklist updates automatically in the background. There’s nothing for you or your IT team to maintain, subscribe to, or manually refresh.

Could this accidentally block a legitimate customer or partner?

The blocklist targets sources with a demonstrated pattern of attacking phone systems specifically (scanning for open ports, repeated login attempts, known attack signatures) — not general internet traffic — so the risk of blocking a legitimate business caller or partner is minimal. If you ever suspect a false block, it can be reviewed and corrected.

Does this work alongside our own custom block lists?

Yes — the global blocklist and your own Firewall & IP Allow/Block Lists work together. The shared list handles broadly known threats automatically; your own lists handle anything specific to your business’s situation.