#portscan — Public Fediverse posts

20K IPs scanning our IPv4 SSH ports and testing our defenses for free (bis). We're so grateful.

A graph showing a massive increase in SSH scanning over the last week.

#SSH #PortScan #Scan

20K IPs scanning our IPv4 SSH ports and testing our defenses for free (bis). We're so grateful.

A graph showing a massive increase in SSH scanning over the last week.

#SSH #PortScan #Scan

20K IPs scanning our IPv4 SSH ports and testing our defenses for free (bis). We're so grateful.

A graph showing a massive increase in SSH scanning over the last week.

#SSH #PortScan #Scan

20K IPs scanning our IPv4 SSH ports and testing our defenses for free (bis). We're so grateful.

A graph showing a massive increase in SSH scanning over the last week.

#SSH #PortScan #Scan

20K IPs scanning our IPv4 SSH ports and testing our defenses for free (bis). We're so grateful.

A graph showing a massive increase in SSH scanning over the last week.

#SSH #PortScan #Scan

10K IPs scanning our IPv4 SSH ports and testing our defenses for free. Lovely.

#SSH #PortScan #Scan #IPv4

10K IPs scanning our IPv4 SSH ports and testing our defenses for free. Lovely.

#SSH #PortScan #Scan #IPv4

10K IPs scanning our IPv4 SSH ports and testing our defenses for free. Lovely.

#SSH #PortScan #Scan #IPv4

10K IPs scanning our IPv4 SSH ports and testing our defenses for free. Lovely.

#SSH #PortScan #Scan #IPv4

10K IPs scanning our IPv4 SSH ports and testing our defenses for free. Lovely.

#SSH #PortScan #Scan #IPv4

Enable sfportscan preprocessor in Snort to detect TCP SYN, UDP, and ICMP scans. Uses a sliding window algorithm to track source IP, destination IP, and protocol, classifying scans as portscan or portsweep. Deploy on Ubuntu 22.04, Debian 12, or FreeBSD 13. #snort #portscan #ValtersIT

https://www.valtersit.com/vault/snort-with-portscan-detection-preprocessor-for-anomaly-alert-ddf24e/

Enable sfportscan preprocessor in Snort to detect TCP SYN, UDP, and ICMP scans. Uses a sliding window algorithm to track source IP, destination IP, and protocol, classifying scans as portscan or portsweep. Deploy on Ubuntu 22.04, Debian 12, or FreeBSD 13. #snort #portscan #ValtersIT

https://www.valtersit.com/vault/snort-with-portscan-detection-preprocessor-for-anomaly-alert-ddf24e/

Angry IP Scanner has released a new version.

And I was named as a contributor 😀

https://github.com/angryip/ipscan/releases/tag/3.9.3

By the way, my ipscan plugins are free software (GNU GPLv3, REUSE compliant) and can be found on Codeberg.

https://codeberg.org/mark22k/ipscan-plugins
https://codeberg.org/mark22k/-/packages/generic/ipscan-plugins/

#Networking #Programming #ipscan #PortScan
#SSH #RouterOS #EchoProtocol #TimeProtocol #CHARGEN #ChargenProtocol #DaytimeProtocol #DNS #Leetspeak #Ping

Angry IP Scanner has released a new version.

And I was named as a contributor 😀

https://github.com/angryip/ipscan/releases/tag/3.9.3

By the way, my ipscan plugins are free software (GNU GPLv3, REUSE compliant) and can be found on Codeberg.

https://codeberg.org/mark22k/ipscan-plugins
https://codeberg.org/mark22k/-/packages/generic/ipscan-plugins/

#Networking #Programming #ipscan #PortScan
#SSH #RouterOS #EchoProtocol #TimeProtocol #CHARGEN #ChargenProtocol #DaytimeProtocol #DNS #Leetspeak #Ping

Angry IP Scanner has released a new version.

And I was named as a contributor 😀

https://github.com/angryip/ipscan/releases/tag/3.9.3

By the way, my ipscan plugins are free software (GNU GPLv3, REUSE compliant) and can be found on Codeberg.

https://codeberg.org/mark22k/ipscan-plugins
https://codeberg.org/mark22k/-/packages/generic/ipscan-plugins/

#Networking #Programming #ipscan #PortScan
#SSH #RouterOS #EchoProtocol #TimeProtocol #CHARGEN #ChargenProtocol #DaytimeProtocol #DNS #Leetspeak #Ping

Angry IP Scanner has released a new version.

And I was named as a contributor 😀

https://github.com/angryip/ipscan/releases/tag/3.9.3

By the way, my ipscan plugins are free software (GNU GPLv3, REUSE compliant) and can be found on Codeberg.

https://codeberg.org/mark22k/ipscan-plugins
https://codeberg.org/mark22k/-/packages/generic/ipscan-plugins/

#Networking #Programming #ipscan #PortScan
#SSH #RouterOS #EchoProtocol #TimeProtocol #CHARGEN #ChargenProtocol #DaytimeProtocol #DNS #Leetspeak #Ping

Monitored SIEM: We're seeing some unusual port scanning activity

Sys Admin: It's me, hi, I'm the problem, it's me

#sysadmin #security #networksecurity #nmap #portscan #firewall

Monitored SIEM: We're seeing some unusual port scanning activity

Sys Admin: It's me, hi, I'm the problem, it's me

#sysadmin #security #networksecurity #nmap #portscan #firewall

Monitored SIEM: We're seeing some unusual port scanning activity

Sys Admin: It's me, hi, I'm the problem, it's me

#sysadmin #security #networksecurity #nmap #portscan #firewall

Monitored SIEM: We're seeing some unusual port scanning activity

Sys Admin: It's me, hi, I'm the problem, it's me

#sysadmin #security #networksecurity #nmap #portscan #firewall

Monitored SIEM: We're seeing some unusual port scanning activity

Sys Admin: It's me, hi, I'm the problem, it's me

#sysadmin #security #networksecurity #nmap #portscan #firewall

Are there lots of port scan bots on the loose again today? I got over 700 new IP bans in the Fail2Ban recidive jail today. Lot's of IP's from the communistic orc Federation and from China, too. Annoying...

#portscan #bots #fail2ban #server #webhosting

Are there lots of port scan bots on the loose again today? I got over 700 new IP bans in the Fail2Ban recidive jail today. Lot's of IP's from the communistic orc Federation and from China, too. Annoying...

#portscan #bots #fail2ban #server #webhosting

Are there lots of port scan bots on the loose again today? I got over 700 new IP bans in the Fail2Ban recidive jail today. Lot's of IP's from the communistic orc Federation and from China, too. Annoying...

#portscan #bots #fail2ban #server #webhosting

TIL The FreeBSD kernel auto-tarpits (for want of a better word) portscans on your host as soon as they attempt to connect to a closed port. If you see the following in your logs, that’s what’s happening.

"kernel: Limiting closed port RST response from 3877 to 190 packets/sec”

Shodan - looking at you!

You can have more fun using blackhole in sysctl

https://man.freebsd.org/cgi/man.cgi?query=blackhole&sektion=4&manpath=freebsd-release-ports

None of this is a substitute for a firewall.

#FreeBSD #Unix #hosting #portscanners #portscan

TIL The FreeBSD kernel auto-tarpits (for want of a better word) portscans on your host as soon as they attempt to connect to a closed port. If you see the following in your logs, that’s what’s happening.

"kernel: Limiting closed port RST response from 3877 to 190 packets/sec”

Shodan - looking at you!

You can have more fun using blackhole in sysctl

https://man.freebsd.org/cgi/man.cgi?query=blackhole&sektion=4&manpath=freebsd-release-ports

None of this is a substitute for a firewall.

#FreeBSD #Unix #hosting #portscanners #portscan

someone's bot net is giving it a go #sysadmin #crowdsec #botnet #portscan

someone's bot net is giving it a go #sysadmin #crowdsec #botnet #portscan

someone's bot net is giving it a go #sysadmin #crowdsec #botnet #portscan

someone's bot net is giving it a go #sysadmin #crowdsec #botnet #portscan

someone's bot net is giving it a go #sysadmin #crowdsec #botnet #portscan

For anyone interested: I'm now using Port Authority. It's free, open source and works nicely.

https://play.google.com/store/apps/details?id=com.aaronjwood.portauthority.free

#nmap #android #security #portscan #fing #infosec

For anyone interested: I'm now using Port Authority. It's free, open source and works nicely.

https://play.google.com/store/apps/details?id=com.aaronjwood.portauthority.free

#nmap #android #security #portscan #fing #infosec

For anyone interested: I'm now using Port Authority. It's free, open source and works nicely.

https://play.google.com/store/apps/details?id=com.aaronjwood.portauthority.free

#nmap #android #security #portscan #fing #infosec

For anyone interested: I'm now using Port Authority. It's free, open source and works nicely.

https://play.google.com/store/apps/details?id=com.aaronjwood.portauthority.free

#nmap #android #security #portscan #fing #infosec

“Brave aims to curb practice of websites that #PortScan visitors. Brave will allow users to choose which sites can access [#localhost] network resources.” Dan Goodin, Ars Technica #Privacy #WebBrowsers
https://arstechnica.com/security/2023/06/brave-will-soon-control-which-sites-can-access-your-local-network-resources/
This should be the new #WebPlatform standard: deny by default. A handful of allow-by-default exceptions for PC vendors’ support sites that connect to a helper service on a specific port to identify the model and installed driver versions. One of very few legitimate uses.

“Brave aims to curb practice of websites that #PortScan visitors. Brave will allow users to choose which sites can access [#localhost] network resources.” Dan Goodin, Ars Technica #Privacy #WebBrowsers
https://arstechnica.com/security/2023/06/brave-will-soon-control-which-sites-can-access-your-local-network-resources/
This should be the new #WebPlatform standard: deny by default. A handful of allow-by-default exceptions for PC vendors’ support sites that connect to a helper service on a specific port to identify the model and installed driver versions. One of very few legitimate uses.

“Brave aims to curb practice of websites that #PortScan visitors. Brave will allow users to choose which sites can access [#localhost] network resources.” Dan Goodin, Ars Technica #Privacy #WebBrowsers
https://arstechnica.com/security/2023/06/brave-will-soon-control-which-sites-can-access-your-local-network-resources/
This should be the new #WebPlatform standard: deny by default. A handful of allow-by-default exceptions for PC vendors’ support sites that connect to a helper service on a specific port to identify the model and installed driver versions. One of very few legitimate uses.

“Brave aims to curb practice of websites that #PortScan visitors. Brave will allow users to choose which sites can access [#localhost] network resources.” Dan Goodin, Ars Technica #Privacy #WebBrowsers
https://arstechnica.com/security/2023/06/brave-will-soon-control-which-sites-can-access-your-local-network-resources/
This should be the new #WebPlatform standard: deny by default. A handful of allow-by-default exceptions for PC vendors’ support sites that connect to a helper service on a specific port to identify the model and installed driver versions. One of very few legitimate uses.

#Brave aims to curb practice of websites that port scan visitors | Ars Technica

Brave will allow users to choose which sites can access local network resources
#portscan #privacy

https://arstechnica.com/security/2023/06/brave-will-soon-control-which-sites-can-access-your-local-network-resources/

#Brave aims to curb practice of websites that port scan visitors | Ars Technica

Brave will allow users to choose which sites can access local network resources
#portscan #privacy

https://arstechnica.com/security/2023/06/brave-will-soon-control-which-sites-can-access-your-local-network-resources/

#Brave aims to curb practice of websites that port scan visitors | Ars Technica

Brave will allow users to choose which sites can access local network resources
#portscan #privacy

https://arstechnica.com/security/2023/06/brave-will-soon-control-which-sites-can-access-your-local-network-resources/

#Brave aims to curb practice of websites that port scan visitors | Ars Technica

Brave will allow users to choose which sites can access local network resources
#portscan #privacy

https://arstechnica.com/security/2023/06/brave-will-soon-control-which-sites-can-access-your-local-network-resources/

#Brave aims to curb practice of websites that port scan visitors | Ars Technica

Brave will allow users to choose which sites can access local network resources
#portscan #privacy

https://arstechnica.com/security/2023/06/brave-will-soon-control-which-sites-can-access-your-local-network-resources/

O Brave, our network's savior and friend.
We bow at your feet, our issues to mend.
Allowing us to choose where we go
Standing as defenders against those who port scan and so.
Our thanks and gratitude you shall always receive.
For giving us control and the power to believe.

#brave #portscan #cybersecurity #networksafety #ode #poetry

https://arstechnica.com/security/2023/06/brave-will-soon-control-which-sites-can-access-your-local-network-resources/

O Brave, our network's savior and friend.
We bow at your feet, our issues to mend.
Allowing us to choose where we go
Standing as defenders against those who port scan and so.
Our thanks and gratitude you shall always receive.
For giving us control and the power to believe.

#brave #portscan #cybersecurity #networksafety #ode #poetry

https://arstechnica.com/security/2023/06/brave-will-soon-control-which-sites-can-access-your-local-network-resources/

anybody here use #masscan on internal pen tests if the network is big? I'm looking for advice on what rate you might run at. I'm not worried about noise, I am worried about swamping the network.

#masscan #pentest #portscan #scanning #networksecurity

anybody here use #masscan on internal pen tests if the network is big? I'm looking for advice on what rate you might run at. I'm not worried about noise, I am worried about swamping the network.

#masscan #pentest #portscan #scanning #networksecurity

anybody here use #masscan on internal pen tests if the network is big? I'm looking for advice on what rate you might run at. I'm not worried about noise, I am worried about swamping the network.

#masscan #pentest #portscan #scanning #networksecurity

anybody here use #masscan on internal pen tests if the network is big? I'm looking for advice on what rate you might run at. I'm not worried about noise, I am worried about swamping the network.

#masscan #pentest #portscan #scanning #networksecurity

Yesterday a ~6000 members #botnet started to #portscan hosts en masse. Watch out.