<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: Brute-force attacks from Nokia</title>
	<atom:link href="http://dan.cx/blog/2007/05/brute-force-attacks-from-nokia/feed/" rel="self" type="application/rss+xml" />
	<link>http://dan.cx/blog/2007/05/brute-force-attacks-from-nokia/</link>
	<description>Blog of Daniel, a slightly awesome 19-year-old web developer from Melbourne, Australia</description>
	<lastBuildDate>Mon, 06 Sep 2010 22:14:39 +0000</lastBuildDate>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.0</generator>
	<item>
		<title>By: Daniel15</title>
		<link>http://dan.cx/blog/2007/05/brute-force-attacks-from-nokia/comment-page-1/#comment-6455</link>
		<dc:creator>Daniel15</dc:creator>
		<pubDate>Thu, 05 Jul 2007 14:50:58 +0000</pubDate>
		<guid isPermaLink="false">http://www.daniel15.com/blog/2007/05/02/brute-force-attacks-from-nokia/#comment-6455</guid>
		<description>It&#039;s not a referer, it&#039;s the reverse DNS entry (changing an IP address back to a hostname). Unless Nokia&#039;s ISP screwed up the reverse DNS, it&#039;s definitely them:
&lt;pre&gt;
daniel@daniel-laptop:~$ host  63.97.248.34
34.248.97.63.in-addr.arpa domain name pointer machine34.nokia.com.
&lt;/pre&gt;

I&#039;m guessing it&#039;s a zombie Windows PC with viruses and stuff on it :P

&quot;Oh and apologies for posting on such an old blog item&quot;
No problem... I like people commenting on my blog, no matter how old the blog item is :)</description>
		<content:encoded><![CDATA[<p>It&#8217;s not a referer, it&#8217;s the reverse DNS entry (changing an IP address back to a hostname). Unless Nokia&#8217;s ISP screwed up the reverse DNS, it&#8217;s definitely them:<br />
<pre><pre>
daniel@daniel-laptop:~$ host&nbsp;&nbsp;63.97.248.34
34.248.97.63.in-addr.arpa domain name pointer machine34.nokia.com.
</pre></pre></p>
<p>I&#8217;m guessing it&#8217;s a zombie Windows PC with viruses and stuff on it <img src='http://dan.cx/blog/wp-includes/images/smilies/icon_razz.gif' alt=':P' class='wp-smiley' /> </p>
<p>&#8220;Oh and apologies for posting on such an old blog item&#8221;<br />
No problem&#8230; I like people commenting on my blog, no matter how old the blog item is <img src='http://dan.cx/blog/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' /> </p>
]]></content:encoded>
	</item>
	<item>
		<title>By: MikeSel^</title>
		<link>http://dan.cx/blog/2007/05/brute-force-attacks-from-nokia/comment-page-1/#comment-6321</link>
		<dc:creator>MikeSel^</dc:creator>
		<pubDate>Sun, 01 Jul 2007 11:25:56 +0000</pubDate>
		<guid isPermaLink="false">http://www.daniel15.com/blog/2007/05/02/brute-force-attacks-from-nokia/#comment-6321</guid>
		<description>I recently suffered something similar, but mine was from Microsoft servers.. (tide526.microsoft.com) i have since discovered this was a spoofed referrer. So all may not be what it seems!

Oh and apologies for posting on such an old blog item :$</description>
		<content:encoded><![CDATA[<p>I recently suffered something similar, but mine was from Microsoft servers.. (tide526.microsoft.com) i have since discovered this was a spoofed referrer. So all may not be what it seems!</p>
<p>Oh and apologies for posting on such an old blog item :$</p>
]]></content:encoded>
	</item>
</channel>
</rss>
