How to perm. block ip's who scan me?

Support
1

Hello :slight_smile:
I need help. Snort log alert show me that:
04/06-03:09:53.201648 [Drop] [**] [1:21257:3] BLACKLIST URI - known scanner tool muieblackcat [**] [Classification: Detection of a Network Scan] [Priority: 3] {TCP} 119.97.146.76:53035 -> x.x.x.x:80

if we can create a group to which will be added (by me) ip addresses to be blocked permanently?
Now only snort block this accident but i want block this ip permanently.

2

Hi you can block ip in shorewall or you can create jail for Fail2Ban

3

Okay, I can do it from the administration panel ?

4

Ok i found it:

Thanks :slight_smile: