Usually using and IDS such as Snort (www.snort.org). It
recognizes stuff like that and can inform you if you care to worry about
it. From: Patrick Fowler [mailto:[EMAIL PROTECTED] Sent: Friday, February 13, 2004 1:50 PM To: [EMAIL PROTECTED] Subject: RE: [IMail Forum] Port Scanning Question Where do you look to see the port scanning and how can you tell?
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
On Behalf Of Andy
Tripp
In my Web messaging logs, I have tons of IPs scanning & auditing our mail.mydomain.com. What is the consensus, do I look up their IP and report them to their ISP or do I just take it with a grain of salt?
Andy Tripp NOTICE: This e-mail message is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message.
|
- [IMail Forum] Port Scanning Question Andy Tripp
- RE: [IMail Forum] Port Scanning Question Patrick Fowler
- RE: [IMail Forum] Port Scanning Question Vincent Jordan
- RE: [IMail Forum] Port Scanning Question Jason Loven
- Re: [IMail Forum] Port Scanning Question Jason Loven
- Re: [IMail Forum] Port Scanning Question Adam Greene