This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Portscan from my own WAN IP-Adress detected!?

A portscan was detected.
The originating source IP address was:xxx.xxx.xxx.xxx

The portscan event was:
spp_portscan: PORTSCAN DETECTED on (null) from xxx.xxx.xxx.xxx (THRESHOLD 10 connections exceeded in 5 seconds)

The source IP is my own WAN IP-Adress!

Best Regards
Druide

This thread was automatically locked due to age.

0 NimmdirKeks over 20 years ago in reply to synopex

Hi,

mybe some Adware talking to there home servers.
I guess the only thing you can do to get sure, is making a tcpdump the next time the alerts are triggerd.

Chris
Cancel
Vote Up 0 Vote Down

Cancel
0 MarkMurphy over 20 years ago in reply to synopex

Here to. I get the E-Mail that the port scan is detected and source and target is the same IP from the WAN Interface. This just started about a month 20 days ago. I'f had the firewall up for almost a year and have never seen them before
Cancel
Vote Up 0 Vote Down

Cancel