[lug] What Is hosts2-ns

Peter Hutnick peter-lists at hutnick.com
Sat May 25 17:30:26 MDT 2002


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Saturday 25 May 2002 05:05 pm, SoloCDM wrote:
> On Linux, what is hosts2-ns?  How is it accessed from a remote host?
> Someone recently tried to access my server through port 81.

I don't know what they were probing for.  It seems that the most common things 
that folks run on 81 are proxies and "secondary" webservers (as Zan 
mentioned) and something called music01 (http://www.music01.com/)

Undoubtedly it was some widespread probe and doesn't affect you, since you 
aren't running anything on port 81.  OTOH, you are on someones radar and if 
your box isn't tight it is likely that such a probe will eventually find a 
hole.  Take it as someone trying your doorknob, and use it as warning that 
you need to keep an eye on all your doors and widows.

Port 81 is a "well known port" assigned to host2-ns which seems to be a 
service that never was.  At a wild guess I would say it might have been blown 
out of the water by DNS.  It was apparently proposed/developed by Earl 
Killian who was once EAK at MORDOR.S1.GOV (and before that was EAK at MIT-MC.ARPA!)

If anyone knows anything about it, please share!

- -Peter

- -- 
/"\ ASCII Ribbon campaign against HTML e-mail
\ /
 X   Get my PGP key at http://hutnick.com/pgp
/ \  6128 5651 6F23 EC17 6EBD  737D 960A 20E6 76CA 8A59
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iD8DBQE88B6Tlgog5nbKilkRAv2iAKC3mn2QqG2WgFmsDIq8hqhEWIplXACfeeCh
FeDvt4XqCMdEyHhb31w7YA4=
=U7/E
-----END PGP SIGNATURE-----




More information about the LUG mailing list