At 03:07 PM 8/19/2002 -0400, you wrote:
I have received over 144 'Port scan detected' emails from Root over the weekend. My question is very simple... Is this normal to have this many? I know that an IP must scan at least X number of ports before an email is generated, so it seems that this is quite a few. Please advise. Thanks in advance! ~Joseph
I have a fixed IP broadband connection at home running a firewall, I had to turn off logging because of the number of port scans coming through. Maybe I'm just unlucky like that :-p From my limited experience, it doesn't seem to be anything to worry about as long as you are patched up and have some basic protection.
Kam.