Jump to content

Blocked incoming IP


Recommended Posts

Good afternoon. I have a specific IP address that is consistently being blocking on incoming to some of our servers by the Malwarebytes Management server. I get notices 10-20 times a day to different internal servers. I have checked the IP address and it is nothing that we would be using. Is there some way to stop this user from doing port scans on our network?

 

Thank you in advance.

Link to post
Share on other sites

  • Root Admin

Hello @dankapp

Unfortunately, all you can do is set a block on your perimeter firewall to drop all packets from that IP. Generally speaking, a business should already drop unsolicited incoming probes. Once they are through the firewall then MBAM is doing it's job of blocking them.

If there is something else I can assist you with please let me know.

Thank you

Ron

 

Link to post
Share on other sites

Thank you for the info. I will take a look at the firewall and see what I can figure out. It just makes me a little nervous seeing the email alerts about that incoming IP being blocked all day. I fear that one time they might sneak through.

 

Thanks again.

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.