I got this system warning today:
A possible network intrusion attempt from 192.168.1.239
has been detected and blocked.
.Today at 4:55 am (CET)
Do I need to take any actions.
I use a UniFi Dream Machine as my router.
Thanks!
MacBook Air
I’ll assume this question shares its origin with your: Honeypot hit? - Apple Community
Contact Ubiquiti support, and ask them what the detection criteria are, and how to get some actionable info. Their product is detecting a signature match, but which match, which port, etc.?
Intrusion detections can indicate a problem, or it can be a false positive; spurious. IDS/IPS can get lots of falses, too.
There are some Ubiquiti IDS/IPS discussions at Reddit and elsewhere which might be worth a look, as well.
Network intrusion attempt
