Agreed - Nepenthes with Honeytrap works nice... send all the bad ports to the honeypot and tell Honeytrap to Mirror the connection (LOL, use with caution) I also use http://www.nirsoft.net/utils/ipnetinfo.html IPNETInfo for the looks up of rouge IP's it works nice...
-----Original Message----- From: Ziots, Edward [mailto:[EMAIL PROTECTED] Sent: Monday, July 28, 2008 1:41 PM To: NT System Admin Issues Subject: RE: People that keep scanning my firewall Set up a honeypot and watch the scans go way up. Z Edward E. Ziots Network Engineer Lifespan Organization MCSE,MCSA,MCP,Security+,Network+,CCA Phone: 401-639-3505 -----Original Message----- From: Phil Brutsche [mailto:[EMAIL PROTECTED] Sent: Monday, July 28, 2008 2:36 PM To: NT System Admin Issues Subject: Re: People that keep scanning my firewall In that case, good luck getting them to do anything about it. If they are being a particular nuisance you could block that subnet at the router upstream from your firewall. David W. McSpadden wrote: > most are out of country..... -- Phil Brutsche [EMAIL PROTECTED] ~ Upgrade to Next Generation Antispam/Antivirus with Ninja! ~ ~ <http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm> ~ ~ Upgrade to Next Generation Antispam/Antivirus with Ninja! ~ ~ <http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm> ~ ~ Upgrade to Next Generation Antispam/Antivirus with Ninja! ~ ~ <http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm> ~
