At 03:59 PM 7/29/2009, you wrote:
It looks like somebody is trying to figure out my internal users as
evidenced by log excerpts below. Is there something I could do to, if
not prevent this, reduce it?
If you're seeing a lot of attempts, I say just block them in your firewall...
# whois 93.85.224.123
OrgName: RIPE Network Coordination Centre
OrgID: RIPE
Address: P.O. Box 10096
City: Amsterdam
StateProv:
PostalCode: 1001EB
Country: NL
ReferralServer: whois://whois.ripe.net:43
NetRange: 93.0.0.0 - 93.255.255.255
CIDR: 93.0.0.0/8
