Firewall logs - showing other
-
I am new and trying to get my head around this: after doing some troubleshooting with a issue I had I discovered that when I look at my firewall logs and look at the source and destination IP address I am getting a lot of pokes.
I understand that there are scanning company's out there scanning ports and IP address for any open or vulnerable networks but here is my confusion
First: how can I dissolve the other results into someone more understandable as I would like to know who is poking me.
second: on my destination IP: why is my ISP IP so high ? as I am not poking myself
-
Re ISP - The Gateway monitor is prob pinging the isp def-gw.
Re Others: You'd prob have to postprocess your logs, and do some magic your self.
/Bingo
-
@bingo600 said in Firewall logs - showing other:
Re ISP - The Gateway monitor is prob pinging the isp def-gw.
how can I confirm this ? please note I am still learning and my knowledge is very limited at the moment