https://support.avaya.com/ext/index?page=content&id=SOLN342910

Если аккаунта нет, то вот:

SBCE: Multiple No Subscriber Flow Matched entries for blacklisted IP registration
Details
SBCE Version : 7.2.2.0-11-15522

Problem Clarification
Device Specific Settings -> DMZ Services -> Firewall -> SBCE -> Blacklist
Deny- "IP Address Range".

Customer has blacklisted the entire subnet in SBCE. But, in the SBCE incidents tab – they see multiple "No Subscriber Flow Matched entries".
So, when they blacklist the entire subnet, the attempts from source IP 77.247.108.166 would just be dropped and not even make it this far ; but its still showing up in Incidents tab.

Cause
Issue in SBCE Software.
Jira : AURORA-16995 has been opened for this issue.

Solution
Run the command : iptables -t raw -S BLACKLIST and see if all show DROP. If yes, install a custom patch.


Before installing the patch, please delete the BLACKLIST rules for whole SUBNETS from GUI. No need to delete the rules for individual IP’s.
After installing the patch on both the SBCE in case of HA, the rules for the whole subnet can be added back.
You can validate if the rule is added or not with iptables -t raw -S BLACKLIST command.

Below are the patch installation instructions:
Дальше идет описание процедуры установки патча...