Re: [cobalt-security] PortSentry/Active System Attacks

[Michael Stauber <cobalt@xxxxxxxxxxxxxx>]

Hi Damian,

> I strongly disagree.  While it is not "illegal" to portscan some else's
> systems (depending on the country you live in), it is generally indicitive
> of something happening on the source machine.  Nothing may happen to you,
> but I'm sure that the source administrator would appreciate hearing that
> one of his boxes is doing portscans.  By letting him know, you have
> possibly stopped the problem before it gets to you.

everybody as he sees fit. But IF I'd report each and any portscan to the 
admin of the originating network(s) I'd do nothing else the whole day. Today 
has been a quite day. I've been portscanned five times so far in the last 19 
hours, all from different networks. And there were seven or eight attempts to 
access port 111. All of them were firewalled by Portsentry with IPChains.

And that does NOT include the stange UDP activity I've noticed in the last 
couple of days.

-- 

Mit freundlichen Grüßen / Best regards

Michael Stauber

 Stauber Multimedia Design ____ Phone:  +49-6471-923812
 Hauptstrasse 31 ______  D-56244 Goddert ______ Germany
 SMD.NET ___ SOLARSPEED.NET ___ FORUMWORLD.COM