Block WAN IP Address for 24 hours

Options
JohnB1
JohnB1 Posts: 2 image  Freshman Member
in Security Ideas

If an IP attempts to access more than 30 different URLs within 60 seconds, and the majority return 404 or 401, block the IP for 24 hours.

2
Up Down
2 votes

Active · Last Updated

Comments

  • Maverick87
    Maverick87 Posts: 211 image  Master Member
    5 Answers First Comment Friend Collector
    Options

    Mmmm, probably in this situation, one think not work…
    This "rule" check the IP not the MAC Address; I can change the IP and it works again.

  • PeterUK
    PeterUK Posts: 4,608 image  Guru Member
    250 Answers 2500 Comments Friend Collector Eighth Anniversary
    Options

    The "Block WAN IP" is unclear? I'm think you want to block from LAN if a client tries 30 different URLs within 60 seconds and return 404 or 401 them block the client LAN IP?

  • Zyxel_Judy
    Zyxel_Judy Posts: 2,626 image  Zyxel Employee
    Zyxel Certified Network Engineer Level 2 - Nebula Zyxel Certified Network Engineer Level 2 - Switch Zyxel Certified Network Engineer Level 2 - Security Zyxel Certified Network Engineer Level 1 - Nebula
    Options

    Hi @JohnB1 ,

    Please clarify the scenario:

    1. Is the 30+ URL accessing within 60 seconds returns 404-401 pattern or block the IP in 24hours coming from a LAN client?
    2. If it's a LAN client, should the block apply to its internet access, intranet access, or both?
    3. What's the use case or scenario behind this request?

    Zyxel_Judy

Categories

Security Help Center

EnglishTiếng ViệtРусскийไทย中文（台灣）