What block Siwecos scans/EN

Aus Siwecos
Version vom 22. April 2020, 16:01 Uhr von Petra (Diskussion | Beiträge) (Die Seite wurde neu angelegt: „== What security tools can block Siwecos scans? == === Firewall === Make sure your firewall whitelists our IP addresses. We currently use the following IP a…“)
(Unterschied) ← Nächstältere Version | Aktuelle Version (Unterschied) | Nächstjüngere Version → (Unterschied)
Wechseln zu: Navigation, Suche

What security tools can block Siwecos scans?

Firewall

Make sure your firewall whitelists our IP addresses.

We currently use the following IP addresses:

- 159.69.220.230 (scanner)
- 116.203.133.16 (test scanner)

PortSentry

Security tools such as "PortSentry" could be a reason why our scanners cannot perform port scans (which are part of the investigation).

To prevent own systems from getting caught by portsentry, there is the file »/etc/portsentry/portsentry.ignore.static« . Here you can define single hosts or whole networks that are spared from all countermeasures.

We currently use the following IP addresses:

- 159.69.220.230 (scanner)
- 116.203.133.16 (test scanner)