[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
RE: [cobalt-users] Portsentry
- Subject: RE: [cobalt-users] Portsentry
- From: "Curtis Ross" <Curtis_Ross@xxxxxx>
- Date: Sun Mar 25 22:05:10 2001
- List-id: Mailing list for users to share thoughts on Cobalt products. <cobalt-users.list.cobalt.com>
> -----Original Message-----
> From: info@xxxxxxxxxxxxxx@CPR
[mailto:IMCEANOTES-info+40achieve-it+2Ecom+40CPR@xxxxxx]
> Sent: Monday, March 26, 2001 5:49 AM
> To: cobalt-users@xxxxxxxxxxxxxxx
> Subject: [cobalt-users] Portsentry
>
>
> Hello,
> Can anybody explain the line below for me, which I receive approx 10
times
> each hour from Logcheck. I'm interested in the host address 10.0.0.2.
>
> Mar 26 05:14:43 ns portsentry[673]: attackalert: Host:
10.0.0.2/10.0.0.2 is
> already blocked Ignoring
>
> Thanks,
> Declan.
Looks like an internal IP that is broadcasting on a port that PortSentry
monitors. Is this one of your internal IP's?
Curtis Ross