Full Disclosure mailing list archives
Re: scanning
From: <c0redump () ackers org uk>
Date: Fri, 2 Jun 2006 12:21:40 +0100
I agree with you David. The amount of times I have e-mailed abuse@ of a netblock letting them know that one of their boxes has been rooted and some little kiddie is doing brute force dictionary attacks against SSH for example (with logs). Haven't got one reply yet!
Additionally, all those attempts you see in your apache log files, 9/10 times they are worms. But then again, there are some stupid kiddies who will try IIS exploits on a *unix box.
Blacklist all .br/.kr/.jp/.cn IPs on your firewall already is what I say. -- c0redump----- Original Message ----- From: David Alanis
To: Dixon, Wayne ; full-disclosure () lists grok org uk Sent: Friday, June 02, 2006 2:34 AM Subject: RE: [Full-disclosure] scanning
Depends on the Jurisdiction... However If I found out that it was my site, I'd have to debate on whether or not to sue your ass... But that's just me...
You would not sue anyone. Thats just saying that you would sue anyone under the sun trying to ping or go after some bot trying to scan your Apache box for IIS 5 vulnerabilities. My point is, even if you did realize someone was actively scanning your host, there would be nothing you could do, I think it would be too time consuming. Yet your question still stands. Is it legal or illegal?
David
-----Original Message----- From: full-disclosure-bounces () lists grok org uk [mailto:full-disclosure-bounces () lists grok org uk] On Behalf Of Nightfall Nightfall Sent: Thursday, June 01, 2006 7:54 PM To: full-disclosure () lists grok org uk Subject: [Full-disclosure] scanning Is it illegal if I perform a vulnerability scan on a site without permission from the owner? How about a simple port scan? thanks.. _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/ _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
"Great Spirits Have Always Encountered Violent Opposition From Mediocre Minds" - Einstein
"Cuanta estupidez en tan poco cerebro!" _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.htmlHosted and sponsored by Secunia - http://secunia.com/
_______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- RE: scanning, (continued)
- RE: scanning Dixon, Wayne (Jun 01)
- Re: scanning Valdis . Kletnieks (Jun 01)
- Re: scanning Ducki3 (Jun 02)
- Re: scanning Steve Kudlak (Jun 02)
- Re: scanning Alice Bryson (Jun 06)
- Re: scanning Neil Davis (Jun 14)
- RE: scanning David Alanis (Jun 01)
- Re: scanning Simon Smith (Jun 01)
- Re: scanning Nightfall Nightfall (Jun 01)
- Re: scanning Valdis . Kletnieks (Jun 01)
- Re: scanning c0redump (Jun 02)
- Re: scanning GroundZero Security (Jun 02)
- Re: scanning ad () heapoverflow com (Jun 02)
- Re: scanning Marcos Agüero (Jun 02)
- Re: scanning Valdis . Kletnieks (Jun 02)
- Re: scanning Simon Smith (Jun 01)
- Re: Fw: scanning Drew Masters (Jun 02)
- Re: Fw: scanning Lawrence Tang (Jun 02)
- Re: scanning GroundZero Security (Jun 12)