Simple Way to block IP adresses

If you have a port open that is vulnerable to it, yes, it's possible.  Please do not believe that any system is 100% secure.

That being said, you probably need to audit your setup.  Can you also post the logs that show the intrusion?

If it is a static IP or DNS name, you can create a network definition, then give them a blackhole route so anything they get is just dropped, or re-direct them to something else.  I like messing with these people who do this, so I'd re-direct them to a porn site or something obnoxious.  But that's just me.

I currently have only PHP error_logs from my own programm, which I use to filter Streaming access.
But the target of this IP is to create traffic to disturb my system. Of cource I also would like to go in touch which him/her, but how if you only have a IP? The IPLookup says Likely Static IP!

Could you give me a more detailed description what you mean with create a network definition for an external IP and do nothing with it?

Thanks,

Hans-Georg

I currently have only PHP error_logs from my own programm, which I use to filter Streaming access.
But the target of this IP is to create traffic to disturb my system. Of cource I also would like to go in touch which him/her, but how if you only have a IP? The IPLookup says Likely Static IP!

Could you give me a more detailed description what you mean with create a network definition for an external IP and do nothing with it?

Thanks,

Hans-Georg

Create an entry for that IP:

Then add the Network creating a blackhole route.  This is for dropping traffic to them from you.

If you want to stop entry, you will need to look at what port they are coming in on the UTM and shut down that port or access.  This will buy you some time until you can do that.

You can use Country Blocking, you can add a drop rule using the network definition you created, and you can even contact their ISP to inform them of them intruding into your system.  Just look up the IP address on any available IP/Domain lookup as it will have contact information for an ISP that holds that IP address.