Port Scan protection, PortSentry / PSAD
Plesk has fail2ban but seems to have no port scan protection, Something like PSAD or Portsentry would be good to be included to allow blocking and reporting on portscans making plesk more secure for everyone.
H.K
shared this idea
-
Jmorthland
commented
Port scan are not really threat they just fill up your logs really. you can always change your port 22 aka for ssh to another number.
-
Turgut Kalfaoglu
commented
Unfortunately it does not seem possible to create a firewall rule for someone accessing a range of IP addresses, at a specific port. The most recent one I found was scanning 192.168.1.x range, with port 80. Previous one scanned port 7, etc.
-
Turgut Kalfaoglu
commented
PLESK provides no security if someone uploads a file that port scans the local network. Many data centers ban such servers. It would be great if there was a possibility of detecting and stopping such attempts.
-
Peter
commented
I recently setup a new server with plesk only to find that some machines fro 79.247.96.x scan it for open ports every other second.
There have been 40000 probes in the last 24 hours.
So I strongly favor a plesk addon against port scanning