Netscan and Portscan

  • 1
  • Question
  • Updated 8 years ago
  • Answered
I have noticed on the security events that there are Netscans and Portscans. What is the difference between them?
Photo of NetFort

NetFort

  • 182 Posts
  • 2 Reply Likes

Posted 8 years ago

  • 1
Photo of NetFort

NetFort

  • 182 Posts
  • 2 Reply Likes
Official Response
Netscans are where an individual host has been seen to access a large number of individual hosts on a single specific port in a specific time frame. Examples of this would be where a host is accessing all the IP addresses on a network on a single port 445.

Portscans are where an individual host has been seen to access a large number of ports in a specific time frame. Examples of this would be where a host is attempting to scan a host and determine all open service ports on that host