My Server + Ubiquity Threat Management

[CablDeViL]

Just an FYI,

After the new update on 9/1  My Ubiquity DMP se started to bark IPS issued from Unraid to an Amazon bucket via port 22.  I have remote turned off and I have the Flash Drive back up failed (Beig blocked by IPS/TM).  Before I set a rule up to allow this I wanted to post the information from verifications and to help others. 

 

DMP Se Log 

 

Threat Alert

Overview

ServiceET SCAN Potential SSH Scan OUTBOUND

DateSep 06 2022

Time1:06:23 PM

Traffic Location

United States

Categoryemerging-scan

ActivityAttempted Information Leak

Source IPX.X.X.205:40684

Destination IP54.70.72.154:22

SeverityUnknown

Activity74.0 B

Interfacebr0

ProtocolTCP

ASN16509 AMAZON-02

 

This Threat Alert happens every time I click Back up Flash Drive that fails (Obviously).  This also could be triggered by an update of the IPS/TD signature file.  Is this expected behavior for My Server Addon?

 

Thank you in advance.

 

CD

[ljm42]

Flash backup needs to be able to make an outgoing ssh connection to backup.unraid.net on port 22 or 443. You can do `nslookup backup.unraid.net` to see the possible IP addresses it will connect to.

[CablDeViL]

tytyh