ConfigServer Community Forum

Hello,

Everyday I can see a lot of bad IP in logwatch list like that. How can I block that IP automaticly ?

From 139.162.225.221 - 1256 packets
To xxx.xxx.xxx.xxx - 126 packets
Service: echo (tcp/7) (Firewall: *TCP_IN Blocked*) - 1 packet
Service: echo (udp/7) (Firewall: *UDP_IN Blocked*) - 1 packet
Service: discard (tcp/9) (Firewall: *TCP_IN Blocked*) - 1 packet
Service: discard (udp/9) (Firewall: *UDP_IN Blocked*) - 1 packet
Service: daytime (tcp/13) (Firewall: *TCP_IN Blocked*) - 1 packet
Service: chargen (udp/19) (Firewall: *UDP_IN Blocked*) - 1 packet
Service: ssh (tcp/22) (Firewall: *TCP_IN Blocked*) - 1 packet
Service: 26 (tcp/26) (Firewall: *TCP_IN Blocked*) - 1 packet
Service: time (tcp/37) (Firewall: *TCP_IN Blocked*) - 1 packet
Service: tacacs (udp/49) (Firewall: *UDP_IN Blocked*) - 1 packet
Service: tftp (udp/69) (Firewall: *UDP_IN Blocked*) - 1 packet
Service: finger (tcp/79) (Firewall: *TCP_IN Blocked*) - 1 packet
Service: http (udp/80) (Firewall: *UDP_IN Blocked*) - 1 packet
Service: 81 (tcp/81) (Firewall: *TCP_IN Blocked*) - 1 packet
Service: kerberos (tcp/88) (Firewall: *TCP_IN Blocked*) - 1 packet
Service: kerberos (udp/88) (Firewall: *UDP_IN Blocked*) - 1 packet
Service: poppassd (tcp/106) (Firewall: *TCP_IN Blocked*) - 1 packet
Service: nntp (tcp/119) (Firewall: *TCP_IN Blocked*) - 1 packet
Service: ntp (udp/123) (Firewall: *UDP_IN Blocked*) - 1 packet
Service: uma (tcp/144) (Firewall: *TCP_IN Blocked*) - 1 packet
Service: xdmcp (udp/177) (Firewall: *UDP_IN Blocked*) - 1 packet
Service: bgp (tcp/179) (Firewall: *TCP_IN Blocked*) - 1 packet
Service: smux (tcp/199) (Firewall: *TCP_IN Blocked*) - 1 packet
Service: ldap (tcp/389) (Firewall: *TCP_IN Blocked*) - 1 packet
Service: svrloc (tcp/427) (Firewall: *TCP_IN Blocked*) - 1 packet
Service: svrloc (udp/427) (Firewall: *UDP_IN Blocked*) - 1 packet
Service: dantz (udp/497) (Firewall: *UDP_IN Blocked*) - 1 packet
Service: shell (udp/514) (Firewall: *UDP_IN Blocked*) - 1 packet
Service: printer (tcp/515) (Firewall: *TCP_IN Blocked*) - 1 packet
Service: ntalk (udp/518) (Firewall: *UDP_IN Blocked*) - 1 packet
Service: klogin (tcp/543) (Firewall: *TCP_IN Blocked*) - 1 packet
Service: kshell (tcp/544) (Firewall: *TCP_IN Blocked*) - 1 packet
Service: afpovertcp (tcp/548) (Firewall: *TCP_IN Blocked*) - 1 packet
Service: rtsp (tcp/554) (Firewall: *TCP_IN Blocked*) - 1 packet
Service: http-rpc-epmap (udp/593) (Firewall: *UDP_IN Blocked*) - 1 packet
Service: asia (udp/626) (Firewall: *UDP_IN Blocked*) - 1 packet
Service: ipp (tcp/631) (Firewall: *TCP_IN Blocked*) - 1 packet
Service: ipp (udp/631) (Firewall: *UDP_IN Blocked*) - 1 packet
Service: ldp (tcp/646) (Firewall: *TCP_IN Blocked*) - 1 packet
Service: rsync (tcp/873) (Firewall: *TCP_IN Blocked*) - 1 packet
Service: ftps (tcp/990) (Firewall: *TCP_IN Blocked*) - 1 packet