[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[cobalt-users] A real interesting addition to hosts.deny



Ok.. you guys have Korean addresses... big deal. :)

How about this one... check out the domain name - I think its self
explanatory...

Feb 13 16:09:54 www portsentry[1467]: attackalert: SYN/Normal scan from
host: crawler.ldap.research.netsol.com/216.168.227.9 to TCP port: 389

FYI - port 389 is where LDAP runs (Lightweight Directory Access Protocol or
something). Not entirely sure what its all about, but I think it is specific
to X windows.

I should have some fun with this one.... Oh, just in case SOMEONE doesn't
get it, netsol is Network Solutions

Have fun.
Rick