Blocking IN connection

[laplasz]

similar experience just recently happened:

Multiple incoming connections from same IP address

tcp 0 0 192.168.4.3:3001 20.52.42.128:34253 ESTABLISHED 60206/./1261/cardan off (0.00/0/0) tcp 0 0 192.168.4.3:3001 20.52.42.128:39517 ESTABLISHED 60206/./1261/cardan off (0.00/0/0) tcp 0 0 192.168.4.3:3001 20.52.42.128:33623 ESTABLISHED 60206/./1261/cardan off (0.00/0/0) tcp 0 0 192.168.4.3:3001 20.52.42.128:34675 ESTABLISHED 60206/./1261/cardan off (0.00/0/0) tcp 0 0 192.168.4.3:3001…

I blocked the IP but if this starts to be a common thing maybe it is worth to setup a list for allow IPs from topology what @Alexd1985 posted