[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[cobalt-users] Help wanted tracking down IP 211.115.219.57



Hi there,

About three or four times a day my RAQ4 reports 'attackalerts' since I had 
PortSentry installed on the system  Normally I can find the owner of the 
IP address and then report the attempt to 'abuse' and 'postmaster' at 
where-ever.

Lastnight  the RAQ reported the following  (via Portsentry) :-

Active System Attack Alerts
=-=-=-=-=-=-=-=-=-=-=-=-=-=
Feb 26 23:04:27 ns portsentry[758]: attackalert: SYN/Normal scan from 
host: 211.115.219.57/211.115.219.57 to TCP port: 111
Feb 26 23:04:27 ns portsentry[758]: attackalert: Host 211.115.219.57 has 
been blocked via wrappers with string: "ALL: 211.115.219.57"

As I say, I can normally find the owner of the IP address using Sam Spade 
but this one has me beaten.  Can anyone point me in the right direction so 
that I can find out who this IP address belongs to?

Cheers

John