This object is in archive! 
Facilitate reporting of security problems
Open Discussion
We just set up a new dedicated server and have the emails sent to root forwarded to us. We are seeing alerts about login attempts and port scanning which is fairly normal. But I have taken to looking up the IP address used and then reporting the activity to the admin in charge of the block for the offending IP address.
A nice feature would be to do this automatically or with my confirmation. This would save time or could automate the process. Even if the system was restricted to only sending a few emails per day, this would be more than is currently done to notify admins of abuse problems originating with their network.
Thank you,
Chris Nielsen
Replies have been locked on this page!