Security Incidents mailing list archives
Re: Handling Scans.
From: "Reeves, Mike" <MReeves () SYNCHRONY NET>
Date: Mon, 12 Feb 2001 12:37:01 -0500
I use portsentry at home to scan em back and then block thier ip. It saves the information to a file that I can use. I would think something like snort would be nice for generating the email but really that is the easy part. Finding who to send it to and waiting on hold is that part that stinks. Mike -----Original Message----- From: abel wisman [mailto:abel () able-towers com] Sent: Monday, February 12, 2001 12:31 PM To: Reeves, Mike; INCIDENTS () SECURITYFOCUS COM Subject: Re: Handling Scans. This matter is interesting, and i was thinking about it upion reading the previous posting. As a shell/web host, the numbers of scans that pass by daily are staggering, certainly i would like to sit down and write to all isp's about their 'clients" doing this, however time is a elusive artivle nowadays. Has (in addition to the question already asked) anybody mae (perhaps) a automated system based on for instance iplog, snort or tripwire, where mail is generated to do this automatically? would be an interesting feature abel wisman ABLE Towers LLC www.able-towers.com www.url.org On Monday 12 February 2001 10:28, Reeves, Mike wrote:
I was trying to get some community type feedback on what people usually do in handling scans of thier networks. At home I usually look back at the person scanning me. I get scanned about 5 times a day. Should I take the time to contact the admin or should I just let it go? What do most people do? Mike K. Reeves Networking Services Engineer, Synchrony Communications, Inc. MCSE Microsoft Certified System Eliminator "Geek by nature... Linux By Choice..."
Current thread:
- Re: Handling Scans., (continued)
- Re: Handling Scans. Bill Munger (Feb 12)
- Re: Handling Scans. E, M (Feb 13)
- Re: Handling Scans. Russell Fulton (Feb 13)
- Re: Handling Scans. deviate (Feb 13)
- Re: Handling Scans. Eelco Duijker (Feb 15)
- Re: Handling Scans. Joe Shaw (Feb 13)
- Re: Handling Scans. Michael Boman (Feb 13)
- Re: Handling Scans. Richard Johnson (Feb 13)
- Re: Handling Scans. Harlan S. Barney, Jr. (Feb 13)
- Re: Handling Scans. Booke, Raymond (Feb 12)
- Re: Handling Scans. Reeves, Mike (Feb 12)
- Re: Handling Scans. Timothy Lyons (Feb 12)
- Re: Handling Scans. Guillaume Filion (Feb 12)
- Re: Handling Scans. Abe Getchell (Feb 13)
- Re: Handling Scans. Reeves, Mike (Feb 13)
- Re: Handling Scans. Reeves, Mike (Feb 13)
- Re: Handling Scans. Valdis Kletnieks (Feb 13)
- Re: Handling Scans. John Nemeth (Feb 14)
- Re: Handling Scans. John Nemeth (Feb 14)
- Re: Handling Scans. Justin Shore (Feb 14)
- Re: Handling Scans. John Oliver (Feb 14)