Comment on Got my first script kiddy

atzanteol@sh.itjust.works ⁨2⁩ ⁨months⁩ ago

• MightBeFluffy@pawb.social ⁨2⁩ ⁨months⁩ ago

  Yes. Don’t port scan my shit.

  source

  • non_burglar@lemmy.world ⁨2⁩ ⁨months⁩ ago

    Umm…

    You know how that works, right? Like, if you don’t want to expose ports, just… don’t expose them. But you can’t prevent port scanning.

    I would love to see the support request from AWS for this.

    source

    • MightBeFluffy@pawb.social ⁨2⁩ ⁨months⁩ ago

      I don’t have any ports. I do not care if I did. Port scanning is not authorized traffic.

      I would love to see the support request from AWS for this.

      Here you go:

      Mandiant ASM scanners perform a variety of security-related data-gathering tasks, all intended to positively identify assets and their security posture. The gathered information is analyzed by our research team and proactively published to the owners of this information through our freemium product. No Collection task performed requires authorized access. It is intentionally designed to be light. While your IDS or WAF may have alerted on these scans, these are benign flags and are not indicative of malicious behavior.

      If you have further questions, or would like to opt-out, please reply to this message and you will be routed to the appropriate team.

      source

      • Onomatopoeia@lemmy.cafe ⁨2⁩ ⁨months⁩ ago

        port scanning is not authorized traffic

        Hahahahahaha

        And?

        source

        • -> View More Comments
      • ramble81@lemmy.zip ⁨2⁩ ⁨months⁩ ago

        In other words their response was “hey dumbass here’s what happened, now move along”. They didn’t do anything except school you.

        source

        • -> View More Comments
      • non_burglar@lemmy.world ⁨2⁩ ⁨months⁩ ago

        Port scanning is not authorized traffic.

        Lol what

        I think you should read the terms of your AWS contract. How do you think aws moves instances if not for agents gathering metrics?

        And this case is Mandiant, so you’re fine.

        Are you sure you’re ready for AWS?

        source

        • -> View More Comments
      • TheKMAP@lemmynsfw.com ⁨2⁩ ⁨months⁩ ago

        You have bad takes, so my recommendation is to not block Mandiant ASM so that they are able to find stuff, if you mess up.

        source
  • atzanteol@sh.itjust.works ⁨2⁩ ⁨months⁩ ago

    “Good luck with that.”

    I realize you’re inexperienced and excited, but this is truly no big deal. Port scans are quite common and aren’t even always malicious. You can use nmap to scan systems yourself - just to see what’s out there or to test if your firewalls are woking, etc.

    source

    • qt0x40490FDB@lemmy.ml ⁨2⁩ ⁨months⁩ ago

      And the first time I used nmap on my college network, a professor called up the help desk to report that he had been port scanned.

      Then my freind at the help desk told me not to run nmap again and to wait until after dark to pull all the reel to reel tapes out of the dumpster….

      source