Subj : Re: Unwanted connections to port 23.
To : All
From : Chad Adams
Date : Fri Jun 16 2017 09:42 pm
Or use a BBS that maintains its own dnsbl and blocking ability! :)
On 05:30 12/06 , mark lewis wrote:
>
> On 2017 Jun 12 06:24:08, you wrote to me:
>
> ML>> intrusion detection systems are the only things i've seen that come
> ML>> close but the connection and attempted login still has to take
> ML>> place... the *ONLY* other option is to get off of port 23 and the
> ML>> other few that MIRAI specifically targets... that includes the
> ML>> default SSH port as well...
>
> jl> I've just come across a utility, called "PSAD", it is a port scanning
> jl> utility.. if the "danger level" meets a certain threshold, it will
> jl> automatically block the offending IP address. Pretty cool. I'm still
> jl> testing it out at the moment, but this may be what i've been looking
> jl> for.
>
>i can't say that i've ever heard of it but these bots are not port scanning...
>they're connecting and spewing their login stream... if there's nothing there
>to connect to, they cannot spew and they move on to the next IP address
they've
> been directed to look at...
>
>)\/(ark
>
>Always Mount a Scratch Monkey
>Do you manage your own servers? If you are not running an IDS/IPS yer doin' it
>wrong...
>... 56. Admit it when you're wrong.
>---
> * Origin: (1:3634/12.73)
>
--
yrNews Usenet Reader for iOS
http://appstore.com/yrNewsUsenetReader
--- Mystic BBS/NNTP v1.12 A33 (Linux/64)
* Origin: -=The ByteXchange BBS : bbs.thebytexchange.com=- (1:130/210)
