[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [cobalt-users] IPs related to hackers



Another one for the list, first one I have had trying to come in on port 1080.
Usually they are caught coming in on port 111.

Feb 13 01:40:16 fsn1 portsentry[24234]: attackalert: Connect from host:
AC9B76AD.ipt.aol.com/172.155.118.173 to TCP port: 1080
Feb 13 01:40:16 fsn1 portsentry[24234]: attackalert: Host 172.155.118.173 has
been blocked via wrappers with string: "ALL: 172.155.118.173"
Feb 13 01:40:16 fsn1 portsentry[24234]: attackalert: Host 172.155.118.173 has
been blocked via dropped route using command: "/sbin/route add -host
172.155.118.173 reject"