full-disclosure - Re: improper scan abuse

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

From: benjamin at seattlefenix.net (Benjamin Krueger)
Subject: Re: improper scan abuse

* Stephen Menard (steve@...ebusters.ca) [030404 16:47]:
> I do not accept those terms
> Or maybe everyone should make such claims!
> 
> ports below have _nothing_  to do with freaking email spam

... *snip many ports commonly used for proxy servers* ...

They're scanning for open proxy servers which can be used to
relay spam. Like it or not, spammers use open proxies for their
dirty deeds and that makes these ports very relevant to email
transactions.

This practice is becoming more common, so I would suggest making
provisions for it in your firewall logging and/or reporting.

-- 
Benjamin Krueger