[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[cobalt-users] Hacking attempts on certain port what is this used for?
- Subject: [cobalt-users] Hacking attempts on certain port what is this used for?
- From: "Derrick Hall" <admin@xxxxxxxxxxxxxxxxxxx>
- Date: Wed Feb 21 17:49:15 2001
- List-id: Mailing list for users to share thoughts on Cobalt products. <cobalt-users.list.cobalt.com>
I keep getting different hackers trying to hack in on port 111 any one know
at it is?
Active System Attack Alerts
=-=-=-=-=-=-=-=-=-=-=-=-=-=
Feb 18 16:30:03 www portsentry[724]: attackalert: Connect from host:
edda.fis.cinvestav.mx/148.247.8.20 to TCP port: 111
Feb 18 16:30:03 www portsentry[724]: attackalert: Host 148.247.8.20 has been
blocked via wrappers with string: "ALL: 148.247.8.20"
Feb 18 16:30:03 www portsentry[724]: attackalert: Host 148.247.8.20 has been
blocked via dropped route using command: "/sbin/route add -host 148.247.8.20
gw 127.0.0.1"
Feb 18 16:30:03 www portsentry[724]: attackalert: Connect from host:
edda.fis.cinvestav.mx/148.247.8.20 to TCP port: 111
Feb 18 16:30:03 www portsentry[724]: attackalert: Host: 148.247.8.20 is
already blocked. Ignoring
Feb 18 16:30:03 www portsentry[724]: attackalert: Connect from host:
edda.fis.cinvestav.mx/148.247.8.20 to TCP port: 111
Feb 18 16:30:03 www portsentry[724]: attackalert: Host: 148.247.8.20 is
already blocked. Ignoring
Feb 18 16:30:03 www portsentry[724]: attackalert: Connect from host:
edda.fis.cinvestav.mx/148.247.8.20 to TCP port: 111
Feb 18 16:30:03 www portsentry[724]: attackalert: Host: 148.247.8.20 is
already blocked. Ignoring
Feb 18 16:30:03 www portsentry[724]: attackalert: Connect from host:
edda.fis.cinvestav.mx/148.247.8.20 to TCP port: 111
Feb 18 16:30:03 www portsentry[724]: attackalert: Host: 148.247.8.20 is
already blocked. Ignoring