I am just curious as to what spiceworks do with those alert from alienvault when the threat is describe by alienvault as:
Text
1 2 | Scanning Host
xxx.xxx.xxx.xxx has been confirmed participating in reconnaissance and probing activities. This behavior is intended to discover information about a target (or victim) that can subsequently be used in an attack or exploit. The risks associated with scanning activity include potential denial of service, information disclosure, and bruteforce attacks whichcould lead to unauthorized access.
|