[lug] Re: What Is hosts2-ns

[SoloCDM]

Peter Hutnick stated the following:
> 
> On Saturday 25 May 2002 05:05 pm, SoloCDM wrote:
> 
> > On Linux, what is hosts2-ns?  How is it accessed from a remote host?
> > Someone recently tried to access my server through port 81.
> 
> I don't know what they were probing for.  It seems that the most
> common things that folks run on 81 are proxies and "secondary"
> webservers (as Zan mentioned) and something called music01
> (http://www.music01.com/)
> 
> Undoubtedly it was some widespread probe and doesn't affect you, since
> you aren't running anything on port 81.  OTOH, you are on someones
> radar and if your box isn't tight it is likely that such a probe will
> eventually find a hole.  Take it as someone trying your doorknob, and
> use it as warning that you need to keep an eye on all your doors and
> widows.
> 
> Port 81 is a "well known port" assigned to host2-ns which seems
> to be a service that never was.  At a wild guess I would say it
> might have been blown out of the water by DNS.  It was apparently
> proposed/developed by Earl Killian who was once EAK at MORDOR.S1.GOV (and
> before that was EAK at MIT-MC.ARPA!)
> 
> If anyone knows anything about it, please share!

Another source said it is probably a new WinIIS worm.

-- 
Note: When you reply to this message, please include the mailing
      list/newsgroup address and my email address in To:.

*********************************************************************
Signed,
SoloCDM