[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[cobalt-users] Help wanted tracking down IP 211.115.219.57
- Subject: [cobalt-users] Help wanted tracking down IP 211.115.219.57
- From: johnm@xxxxxxxxxxxxxxxxxxxx
- Date: Tue Feb 27 01:07:04 2001
- List-id: Mailing list for users to share thoughts on Cobalt products. <cobalt-users.list.cobalt.com>
Hi there,
About three or four times a day my RAQ4 reports 'attackalerts' since I had
PortSentry installed on the system Normally I can find the owner of the
IP address and then report the attempt to 'abuse' and 'postmaster' at
where-ever.
Lastnight the RAQ reported the following (via Portsentry) :-
Active System Attack Alerts
=-=-=-=-=-=-=-=-=-=-=-=-=-=
Feb 26 23:04:27 ns portsentry[758]: attackalert: SYN/Normal scan from
host: 211.115.219.57/211.115.219.57 to TCP port: 111
Feb 26 23:04:27 ns portsentry[758]: attackalert: Host 211.115.219.57 has
been blocked via wrappers with string: "ALL: 211.115.219.57"
As I say, I can normally find the owner of the IP address using Sam Spade
but this one has me beaten. Can anyone point me in the right direction so
that I can find out who this IP address belongs to?
Cheers
John