Announcement

Collapse
No announcement yet.

Port scans on firewall interface

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Port scans on firewall interface

    Hi.
    Can anybody advice is that normal to have a number of different port scan attacks reported from the firewall router. I added an example file with a logs. From last week I start receiving 4-5 of them daily.

    Thanks,
    Attached Files

  • #2
    Re: Port scans on firewall interface

    Title change to reflect what the question is.

    Comment


    • #3
      Re: Port scans on firewall interface

      if it's your internet facing (public) interface, then yes, port scans are normal.

      Dependent on your router, you may be able to configure rules to automatically block packets after a certain number of scans or something like that.

      I know our 877 used to do that, the logs would say "IP blablabla getting aggressive, blocking"
      Please do show your appreciation to those who assist you by leaving Rep Point https://www.petri.com/forums/core/im.../icon_beer.gif

      Comment

      Working...
      X