3 ms·
If you are auto-generating outbound SMTP traffic with abuse complaints from a fully automated script, sent to the ARIN/RIPE/APNIC/LACNIC/AFRINIC POC email addre
by walrus01 4y ago
If you are auto-generating outbound SMTP traffic with abuse complaints from a fully automated script, sent to the ARIN/RIPE/APNIC/LACNIC/AFRINIC POC email addresses of IP space holders because something portscanned your firewall, you are part of the problem, not the solution.
If I had a dollar for every person who has turned loose such a tool to shit up my abuse@ispname.com inbox...
- autoexec 4y agoIf you're getting reports of port scanning from the same IPs over and over, they're probably bots and I'd think most ISPs would want to know. The automated emails are usually in the same formats making them easy to filter and parse too.
- wil421 4y agoThat’s an interesting idea to automate my complaints. I seriously doubt the Las Vegas “located” IP with Hong Kong addresses on their registration or Shanghai UCloud Information Technology Company IPs are scanning me for good reasons. What do you think would happen if I run an older version of plex with a known vulnerability?
- Eisenstein 4y agoI mean, isn't that what shodan is for? Who would bother port scanning for that stuff?
- red-iron-pine 4y agoShodan is public. Chinese intelligence wants their version to be more detailed and not public.