any sources scanning and attack to my network. they are always replacing source address. how can i block or prevent for them?
i want below 2 ways prevention.
1. if first time detect any infect source ip then i will automatically block 1 hour or 24 hours
2. i want block or prevent for risk level.