getting repeatedly hit on port 8897

[rigsby]

Any ides what this is where to look?

 

[rene1000]

port 8897 is a port used by hackoffice which is a hacker tool

what you should do, is create a deny rule for port 8897

1) create a hackoffice protocol
2) create a deny rule for the created hackoffice protocol

good luck

 

[captnstiles]

Also if you look in the logs you should have ip addresses, turn these screw balls in.

 

[rigsby]

Thanks guys - only just saw posts

Sorry to be a duffer but what do you mean exactly by 'create protocol' ? (and then deny it)