This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Slow port scan and Astaro can't catch it

Hi all,

Recently when I checked the log file of my router, I found something interesting.

There are some port scans from certain IP addresses, but they did it per minute. They scan the ports from 21,22,23,25,80,443,1443,7212,8000,8080,8888, but they did it per minute so this won't even trigger a port scan at all.

So, any better idea how to deal with such behavior?

Thanks,

Hsinan


This thread was automatically locked due to age.
  • port scans in and of themselves aren't a huge threat.  If those ports are open make sure the ips is on and that the machines/services that use those open ports are secured.

    Owner:  Emmanuel Technology Consulting

    http://etc-md.com

    Former Sophos SG(Astaro) advocate/researcher/Silver Partner

    PfSense w/Suricata, ntopng, 

    Other addons to follow