how to block malicious Attack on server
cancel
Showing results for 
Search instead for 
Did you mean: 

how to block malicious Attack on server

L0 Member

Hi All,

 

Good day!

I'm trying to block malicious attack on our server but no luck. Please see below attack i encountered on server.

jalorente_1-1616210194515.png

jalorente_2-1616210294296.png

 

I've already create a policy for that attacked. I already set security profile for that specific servers.

jalorente_3-1616210430668.pngjalorente_4-1616210522914.png

Also i already install the latest dynamics updates. I hope you can help me on my problem. Thanks in advance.

 

Thank you and keep safe!

 

 

 

 

 

 

1 REPLY 1

Cyber Elite
Cyber Elite

@jalorente,

It appears in your logs that this attack was identified on 127.0.0.1, which is your localhost address. The firewall isn't going to see this traffic as it's not actually leaving your host and traversing the firewall. If this threat actually traverses your firewall and you have visibility into the traffic, it should be detected under threat ID 57897

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!