What block Siwecos scans/EN
Version vom 22. April 2020, 17:01 Uhr von Petra (Diskussion | Beiträge) (Die Seite wurde neu angelegt: „== What security tools can block Siwecos scans? == === Firewall === Make sure your firewall whitelists our IP addresses. We currently use the following IP a…“)
What security tools can block Siwecos scans?
Firewall
Make sure your firewall whitelists our IP addresses.
We currently use the following IP addresses:
- 159.69.220.230 (scanner)
- 116.203.133.16 (test scanner)
PortSentry
Security tools such as "PortSentry" could be a reason why our scanners cannot perform port scans (which are part of the investigation).
To prevent own systems from getting caught by portsentry, there is the file »/etc/portsentry/portsentry.ignore.static« . Here you can define single hosts or whole networks that are spared from all countermeasures.
We currently use the following IP addresses:
- 159.69.220.230 (scanner)
- 116.203.133.16 (test scanner)