Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Is it possible to trace who WMap'ed my server? How do I do so?

share|improve this question

1 Answer 1

up vote 4 down vote accepted

Assuming you are talking about this wmap tool: Well, you will have an IP address for the requests coming from the scan in your server logs and it's possible to identify the provider for the address. But since scanning your system is normally not illegal, you will have a hard time to convince the ISP (or more likely: a judge in some remote country) to identify the particular user. In short: Not likely.

I wouldn't worry about it too much anyway. As long as you don't think you are specifically targeted for some reason, being scanned for vulnerabilities is just a common situation, you "just" have to make sure your system is patched and configured securely.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.