Where are the port scan logs saved at?
I have been getting huge amounts of scans, and I need logs to send to the abuse email addresses.
TIA
KCI
This thread was automatically locked due to age.
I've recently been receiving portscan e-mail alerts from something called research.nmap.org? It'll result in ~140 unique e-mails. I have portscan protection enabled on my Sophos UTM 9.4 home box, but these are fairly frequent and annoying. Sophos UTM 9.4 is set to drop traffic so it appears I'm being protected against whatever this is.
Is there any such thing as a legitimate portscan? I can't find anything about this research.nmap.org.
Is it possible to continue to block these attempts while not alerting via e-mail about this specific IP?
A portscan was detected. Details about the event:
Time.............: 2016-08-13 05:21:46
Source IP address: 71.6.152.72 (research.nmap.org)
All of the things on the 'Intrusion Prevention' tabs are recorded in the Intrusion Prevention log.
Check out research.nmap.org - they do real-world tests of the respected nmap scanner. It will probably be several years before they scan you again, but they're nothing to worry about.
Cheers - Bob
All of the things on the 'Intrusion Prevention' tabs are recorded in the Intrusion Prevention log.
Check out research.nmap.org - they do real-world tests of the respected nmap scanner. It will probably be several years before they scan you again, but they're nothing to worry about.
Cheers - Bob