GFI Software

Welcome to the GFI Software community forum! For support please open a ticket from https://support.gfi.com.

Home » GFI User Forums » Kerio Control » Free to use IP Blocker (Blocks IP Addresses that are listed by Abuse Ip Db)
Re: Free to use IP Blocker [message #152236 is a reply to message #152180] Mon, 18 July 2022 08:48 Go to previous messageGo to previous message
tverweij is currently offline  tverweij
Messages: 63
Registered: March 2010
Location: Curacao
You are welcome Smile

Some background info:

My infrastructure was under attack some time ago, probes for vulnerabilities from multiple IP addresses. As soon as I blocked one, it continued from another IP. Kerio IPS did not block those, but when I looked up any of those addresses, all of them had a confident score of 100% on AbuseIpDB. That's when I got the idea to implement a blocker based on this blacklist. Instead of trying to keep up by manual blocking the addresses they are now blocked within 20 seconds.

What I saw is that the amount of attacks really goes down after I started to use the blocker myself; after a few days, the amount of IP addresses that even try to connect is dropping - I assume they see that they are blocked almost immediately, give up and move on to the next system that has less security.

I still hope that Kerio will implement an official integration with AbuseIpDB as part of IPS.

[Updated on: Mon, 18 July 2022 08:57]

Report message to a moderator

 
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Previous Topic: 9.4p1 time display bug
Next Topic: Kerio Control 9.4.x release
Goto Forum:
  


Current Time: Fri Feb 03 15:29:59 CET 2023

Total time taken to generate the page: 0.02034 seconds