Re: [cobalt-users] Port 137 Scans

["Charles Williams \(CEO\)" <hosting.mailing.list.account@xxxxxxxxxxxxxxx>]

----- Original Message -----
From: "Wayne Sagar" <wsagar@xxxxxxxx>
To: <cobalt-users@xxxxxxxxxxxxxxx>
Sent: Monday, April 23, 2001 6:44 PM
Subject: [cobalt-users] Port 137 Scans


> Anybody seen this "guy" trying them on 137?
>
> Active System Attack Alerts
> =-=-=-=-=-=-=-=-=-=-=-=-=-=
> Apr 23 07:16:24 www portsentry[527]: attackalert: Connect from host:
> ws56171.ocar.army.pentagon.mil/134.11.56.171 to UDP port: 137
> Apr 23 07:16:24 www portsentry[527]: attackalert: Host 134.11.56.171 has
> been blocked via wrappers with string: "ALL: 134.11.56.171"
>
> Same host has hit me on at least three different ip's... sort of a strange
> host dont'cha'think?
>
> Wayne

Wayne,

This doesn't suprise me in the least.  With the messure of military network
security my guess is he just wanted to see what better security looked like.

HAHA
chuck