Re: Have you seen this in your logs?

From: H C (keydet89at_private)
Date: Mon Apr 30 2001 - 07:47:02 PDT

Next message: le: "Backdoor Q access?"

Previous message: Curley Mr Eric P: "Weird traffic"
In reply to: Jason Lewis: "Have you seen this in your logs?"
Next in thread: John: "Re: IP 1.2.3.4"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Jason,

According to a visual traceroute, the IP is indeed
translated to that hostname, and is located in
Singapore.

So what was your question, specifically?  Was it with
regards to the port 18200 -> port 350 connection, or
was it with the hostname?

--- Jason Lewis <jlewisat_private> wrote:
> Apr 29 22:16:18 firewall kernel: Packet log: eth1i
> DENY eth1 PROTO=6
> 203.194.128.238:18200 1.2.3.4:350
>
> 203.194.128.238 Resolves to
> slammed.by.fatlady.eighty.nine.kilograms.org
>
> My IP has been sanitized.
>
> I am not sure what to make of it.  Any ideas?
>
> Jason Lewis
> http://www.rivalpath.com
> "All you can do is manage the risks. There is no
security."

__________________________________________________
Do You Yahoo!?
Yahoo! Auctions - buy the things you want at great prices
http://auctions.yahoo.com/

Next message: le: "Backdoor Q access?"
Previous message: Curley Mr Eric P: "Weird traffic"
In reply to: Jason Lewis: "Have you seen this in your logs?"
Next in thread: John: "Re: IP 1.2.3.4"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Mon Apr 30 2001 - 09:33:55 PDT