The static configuration of networks (including security-related tools) gives attackers a significant advantage. To address this issue, we propose a Moving Target Defense (MTD) that introduces changes in the virtual network configuration and disrupts the attacker's exploration phase. In particular, we formalise MTD as a restless bandit problem, considering IP and port shuffling.