Hello everyone,
Recently, I found some IP addresses continuously trying to access a range of ports from our public addresses set on Cyberoam devices ( For example, 1433-14334 , ...) . They usually are using a specific Source Port. Although firewall Rule ID 0 will drop these packets, I am looking for a way to block this IP addresses. In addition, could you please tell me the legal way to contact the IP provider or any other organization to do something with these attackers. I contacted the E-mail address that was provided by IP WhoIs and report this abuse, but attacks are still there, which means they owner is not going to do anything special !
This thread was automatically locked due to age.
