home.social

#portscanning — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #portscanning, aggregated by home.social.

  1. adingbatponder :nixos: 👾 @adingbatponder ·

    Using and with manual checks using to identify IP addresses that are attacking my reverse proxy device. I block in the IPs that tick all three boxes:
    1. suricata reports attack,
    2. claude code investigates and confirms attack (and we log the CVE etc.), and
    3. IP is already high confidence bad actor.
    A bit slow really due to manual checking. How does one extend to ? What measures should one add?

    #suricata #ids #abuseipdb #claudecode #nftables #ipv6
  2. adingbatponder :nixos: 👾 @[email protected] ·

    Using #suricata #IDS and #abuseipdb with manual checks using #claudecode to identify IP addresses that are attacking my reverse proxy device. I block in #nftables the IPs that tick all three boxes:
    1. suricata reports attack,
    2. claude code investigates and confirms attack (and we log the CVE etc.), and
    3. IP is already high confidence bad actor.
    A bit slow really due to manual checking. How does one extend to #IPv6 ? What measures should one add? #portscanning

    #suricata #ids #abuseipdb #claudecode #nftables #ipv6
  3. adingbatponder :nixos: 👾 @[email protected] ·

    Using #suricata #IDS and #abuseipdb with manual checks using #claudecode to identify IP addresses that are attacking my reverse proxy device. I block in #nftables the IPs that tick all three boxes:
    1. suricata reports attack,
    2. claude code investigates and confirms attack (and we log the CVE etc.), and
    3. IP is already high confidence bad actor.
    A bit slow really due to manual checking. How does one extend to #IPv6 ? What measures should one add? #portscanning

    #suricata #ids #abuseipdb #claudecode #nftables #ipv6
  4. adingbatponder :nixos: 👾 @[email protected] ·

    Using #suricata #IDS and #abuseipdb with manual checks using #claudecode to identify IP addresses that are attacking my reverse proxy device. I block in #nftables the IPs that tick all three boxes:
    1. suricata reports attack,
    2. claude code investigates and confirms attack (and we log the CVE etc.), and
    3. IP is already high confidence bad actor.
    A bit slow really due to manual checking. How does one extend to #IPv6 ? What measures should one add? #portscanning

    #suricata #ids #abuseipdb #claudecode #nftables #ipv6
  5. adingbatponder :nixos: 👾 @[email protected] ·

    Using #suricata #IDS and #abuseipdb with manual checks using #claudecode to identify IP addresses that are attacking my reverse proxy device. I block in #nftables the IPs that tick all three boxes:
    1. suricata reports attack,
    2. claude code investigates and confirms attack (and we log the CVE etc.), and
    3. IP is already high confidence bad actor.
    A bit slow really due to manual checking. How does one extend to #IPv6 ? What measures should one add? #portscanning

    #portscanning #ipv6 #nftables #claudecode #abuseipdb #ids