Re: [MLUG - DISCUSSION] network scanning?

[Michael <EMAIL:PROTECTED>]

I've noticed that it's easy to spam your logs from some services such as
ftp servers. I think forcing passive mode to ftp sites your using
helps. Or you can just have those responses ignored. Weird lil programs
like ICQ tend to leave odd stuff too.

*^*^*^*
Michael McGlothlin <EMAIL:PROTECTED>
http://www.kavlon.com

On Sun, 1 Apr 2001, Mike Miller wrote:

> Sure, I appended a typical report below -- it shows entries from my iplog
> files.  I have the various machines send me logs by e-mail, then I use
> scripts to extract log entries.  I have a file that I use as a form
> letter.  It's a bit of work, but it has been interesting.
> 
> What are you using?  Your log doesn't look like iplog or tcp_wrappers log.
> I don't understand from your log which port those machines were accessing.
> Is it possible that your machine did something to evoke those responses?
> Otherwise you are saying that it is a coordinated effort by at least three
> different machines.  I haven't had that happen to me during the one year
> while I've been keeping track of these things.

--
To manage your subscription, go to http://mlug.missouri.edu/members/edit.php

Archives are available at http://mlug.missouri.edu/list-archives/