Re: question IDS? réponse: OSSEC HIDS

To: debian-user-french@lists.debian.org
Subject: Re: question IDS? réponse: OSSEC HIDS
From: Laurent Besson <lolo@system-linux.net>
Date: Tue, 23 Jan 2007 16:57:29 +0100
Message-id: <[🔎] 200701231657.29588.lolo@system-linux.net>
In-reply-to: <[🔎] 200701231653.16466.lolo@system-linux.net>
References: <[🔎] 409557.17970.qm@web27010.mail.ukl.yahoo.com> <[🔎] 45B220B5.9060802@gmail.com> <[🔎] 200701231653.16466.lolo@system-linux.net>

On s'aperçoit d'ailleurs dans les logs que les scan firewall s'accompagnent de 
tentatives apache :

mar jan 23 16:51:01 CET 2007 /var/ossec/active-response/bin/apache-drop.sh add 
- 84.96.75.196 1169567461.321371 30112
mar jan 23 16:51:01 CET 2007 /var/ossec/active-response/bin/host-deny.sh add - 
84.96.75.196 1169567461.321371 30112
mar jan 23 16:51:01 CET 2007 /var/ossec/active-response/bin/firewall-drop.sh 
add - 84.96.75.196 1169567461.321371 30112

Reply to:

References:
- RE : question IDS (detection d'intrusion) et autre logcheck?
  - From: Pitshou Asingalembi <depitsho@yahoo.fr>
- Re: question IDS? reponse: OSSEC HIDS
  - From: "xtz.info@gmail.com" <dead.but.dreamer@gmail.com>
- Re: question IDS? réponse: OSSEC HIDS
  - From: Laurent Besson <lolo@system-linux.net>

Prev by Date: Re: question IDS? réponse: OSSEC HIDS
Next by Date: chroot "mal démonté"
Previous by thread: Re: question IDS? réponse: OSSEC HIDS
Next by thread: Re: question IDS? réponse: OSSEC HIDS
Index(es):
- Date
- Thread