[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Sheflug] Security : Port scanning

To: shef-lug [at] xxxxxxxxxxxxxxxxxxx
Subject: Re: [Sheflug] Security : Port scanning
From: Bill Best <bill [at] xxxxxxxxxxxxxxx>
Date: Wed, 07 May 2003 15:35:32 +0100
Delivered-to: shef-lug [at] list.sheflug.org.uk
List-help: <mailto:shef-lug-request [at] list.sheflug.org.uk?subject=help>
List-id: Sheflug <shef-lug.list.sheflug.org.uk>
List-post: <mailto:shef-lug [at] list.sheflug.org.uk>
List-subscribe: <http://community.uklinux.net/mailman/listinfo/shef-lug>,<mailto:shef-lug-request [at] list.sheflug.org.uk?subject=subscribe>
List-unsubscribe: <http://community.uklinux.net/mailman/listinfo/shef-lug>,<mailto:shef-lug-request [at] list.sheflug.org.uk?subject=unsubscribe>
Reply-to: shef-lug [at] xxxxxxxxxxxxxxxxxxx
Sender: shef-lug-admin [at] xxxxxxxxxxxxxxxxxxx
User-agent: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.3) Gecko/20030312


My new firewall went 'live' last night about 5pm and today when I checked
the logs I've got about a dozen cases of port scanning from various sources.
<question>
Is all port scanning malicious?

Not always.

What should be done if its found?

Nothing - but see below.

Should I mail a report to the
administrator detailed on the "whois" lookup page?

Life's too short.

If these organisations
are not the sort that would host or condone port scanning then it could be
that either their IP has been spoofed or they have been compromised and
someone else is running it from their systems.  Either way they probably
want to know.

Maybe.

Has anyone got a script to automatically do this mailing out?

http://www.mynetwatchman.com/


___________________________________________________________________

Sheffield Linux User's Group -
http://www.sheflug.co.uk/mailfaq.html

 GNU the choice of a complete generation.

Follow-Ups:
- RE: [Sheflug] Security : Port scanning
  - From: Chris Johnson

References:
- [Sheflug] Security : Port scanning
  - From: Chris Johnson

Prev by Date: Re: [Sheflug] openBSD 3.2 X setup
Next by Date: [Sheflug] Security : Port scanning
Previous by thread: [Sheflug] Security : Port scanning
Next by thread: RE: [Sheflug] Security : Port scanning
Index(es):
- Date
- Thread