# NMAP detection rules for Suricata in GitHub **URL:** \ **Category:** Rules\ **Tags:** ips, suricata, opnsense\ **Created:** [May 9, 2024, 9:35am UTC](https://forum.suricata.io/t/nmap-detection-rules-for-suricata-in-github/4643 "2024-05-09T09:35:17Z")\ **Posts on this page:** 7\ **Page:** 1
**Author:** ![albovell](https://yyz2.discourse-cdn.com/flex030/user_avatar/forum.suricata.io/albovell/32/2897_2.png) [@albovell](https://forum.suricata.io/u/albovell)\ **Post date:** [May 9, 2024, 9:35am UTC](https://forum.suricata.io/t/nmap-detection-rules-for-suricata-in-github/4643/1 "2024-05-09T09:35:18Z")
Hi all, in case anyone wants Suricata detection rules against different types of NMAP scans and scan speeds (T1-T5), I wrote a bundle into Github, which do just that. Tested in a SoHo / home environment with OPNsense: [https://github.com/aleksibovellan/opnsense-suricata-nmaps](https://github.com/aleksibovellan/opnsense-suricata-nmaps) Everyday scanning into our WAN interfaces does generate some extra log entries, somedays a lot, but at least I personally like to see who is trying to love my router without consent. Be safe, everyone, and if you happen to like these rules, please consider to star the repository to make it worth the time. Thanks a lot. - Aleksi ---
**Author:** ![Philippe\_Antoine](https://yyz2.discourse-cdn.com/flex030/user_avatar/forum.suricata.io/philippe_antoine/32/799_2.png) [@Philippe\_Antoine](https://forum.suricata.io/u/Philippe_Antoine)\ **Post date:** [May 12, 2024, 6:37pm UTC](https://forum.suricata.io/t/nmap-detection-rules-for-suricata-in-github/4643/2 "2024-05-12T18:37:28Z")
cc @satta for [GitHub - satta/awesome-suricata: A curated list of awesome things related to Suricata](https://github.com/satta/awesome-suricata) 😉 ---
**Author:** ![satta](https://yyz2.discourse-cdn.com/flex030/user_avatar/forum.suricata.io/satta/32/18_2.png) [@satta](https://forum.suricata.io/u/satta)\ **Post date:** [May 12, 2024, 8:37pm UTC](https://forum.suricata.io/t/nmap-detection-rules-for-suricata-in-github/4643/3 "2024-05-12T20:37:33Z")
Thanks for the hint, added! ---
**Author:** ![vjulien](https://yyz2.discourse-cdn.com/flex030/user_avatar/forum.suricata.io/vjulien/32/4_2.png) [@vjulien](https://forum.suricata.io/u/vjulien)\ **Post date:** [May 16, 2024, 7:44am UTC](https://forum.suricata.io/t/nmap-detection-rules-for-suricata-in-github/4643/4 "2024-05-16T07:44:10Z")
Nice! Would be nice to include it in our index, I think: > **[GitHub - OISF/suricata-intel-index: Suricata rule and intel index](https://github.com/OISF/suricata-intel-index)** > > Suricata rule and intel index. Contribute to OISF/suricata-intel-index development by creating an account on GitHub. ---
**Author:** ![albovell](https://yyz2.discourse-cdn.com/flex030/user_avatar/forum.suricata.io/albovell/32/2897_2.png) [@albovell](https://forum.suricata.io/u/albovell)\ **Post date:** [May 20, 2024, 9:40pm UTC](https://forum.suricata.io/t/nmap-detection-rules-for-suricata-in-github/4643/5 "2024-05-20T21:40:45Z")
Very happy to hear the rules are found useful, and included in collections. I might do some new scan type rules in the future too. Thanks. ---
**Author:** ![eleanelbert](https://yyz2.discourse-cdn.com/flex030/user_avatar/forum.suricata.io/eleanelbert/32/2915_2.png) [@eleanelbert](https://forum.suricata.io/u/eleanelbert)\ **Post date:** [May 24, 2024, 6:13am UTC](https://forum.suricata.io/t/nmap-detection-rules-for-suricata-in-github/4643/6 "2024-05-24T06:13:14Z")
Thank you for this. it is very helpful for me. ---
**Author:** ![albovell](https://yyz2.discourse-cdn.com/flex030/user_avatar/forum.suricata.io/albovell/32/2897_2.png) [@albovell](https://forum.suricata.io/u/albovell)\ **Post date:** [May 26, 2024, 1:15pm UTC](https://forum.suricata.io/t/nmap-detection-rules-for-suricata-in-github/4643/7 "2024-05-26T13:15:53Z")
Thanks a lot for taking the time to comment, and also very happy to hear that they are helping you. Me too, I wouldn’t have a router without them anymore. 🫣 - Aleksi