We just installed a new ATM and we're seeing random series of port scans. Every now and then, maybe once a day, we'll get 50-100 emails from the UTM informing us of a port scan, all from the same IP. Sometimes the IP belongs to our ISPs DNS server, but often it's just a random IP. Is this any thing to worry about, or is it just a routine failed attack? If it's OK, is there a way to cut down to one email per event instead of dozens? Thanks, Steve
↧
