Re: Scans from proxyprotector.com

From: Charles Blackburn (charlesb_at_summerfield-technology.co.uk)
Date: 05/17/03

  • Next message: Charles Blackburn: "Re: Scans from proxyprotector.com" 
    Date: Sat, 17 May 2003 19:35:32 +0100
To: incidents@securityfocus.com

    i

    I too am getting at least 70 scans a day from this person, all socks and proxy port scan attempts. I will probably put a honey pot onto a port just to see what his next attempt will be.

    regards
    charles

    On Sat, 17 May 2003 10:34:29 -0500
    "Anthony Papaleo" <papaleo@ameritech.net> wrote:

    > This guy has scanned my system a dozen or so times in the last two
    > days.
    >
    > He can't be legitimate: If he is supposedly a security professional,
    > he would not perform scans of this type uninvited.
    > My BlackIce PF calls this suspicious activity, "...TCP port probes
    > directed at ports 3128, 8000, and 8080, which may indicate that an
    > attacker is searching the system for a proxy server."

    ----------------------------------------------------------------------------
    *** Wireless LAN Policies for Security & Management - NEW White Paper ***
    Just like wired networks, wireless LANs require network security policies
    that are enforced to protect WLANs from known vulnerabilities and threats.
    Learn to design, implement and enforce WLAN security policies to lockdown enterprise WLANs.

    To get your FREE white paper visit us at:
    http://www.securityfocus.com/AirDefense-incidents
    ----------------------------------------------------------------------------

  • Next message: Charles Blackburn: "Re: Scans from proxyprotector.com"
    • Quantcast