Hey,
I run a small network, and can afford to respond to most port
scans that sweep by, usually first to the originating network
admins, and sometimes the upstream ISPs.
Many of the scans that hit my network, especially on the
weekends, are of the port 8080 variety, sometimes including
port 3128, which seem to be looking for HTTP Proxy services.
Often these scans are coming from China, so I started thinking
that maybe these were students looking for a relay point
to surf the web without being blocked, a little freedom of
information, and that I was doing a disservice by ratting
them out.
We don't run any HTTP Proxies on our network, so it wouldn't
hurt us to stop reporting on them, but I wanted to see
if there was similar sentiment to mine that these might
be benign scans that, in the name of democracy, we might
want to stop reporting on in general ?
Any opinions?
-- Joshua
______________________________________________________________________
Joshua Chamas Chamas Enterprises Inc.
NODEWORKS - web link monitoring Long Beach, CA USA 1-562-432-2469
http://www.nodeworks.com http://www.chamas.com
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
