Welcome to WebmasterWorld Guest from 54.166.179.165

Forum Moderators: phranque

Message Too Old, No Replies

site security

my firewall captured this, ?? who or what it means

     

Richard Zandvliet

4:06 am on Jan 7, 2001 (gmt 0)

Inactive Member
Account Expired

 
 


does any body know what this is, it comes up on my firewall protector,
Output from ARIN WHOIS
[arin.net...]

--------------------------------------------------------------------------------

Search for :

--------------------------------------------------------------------------------

Rogers@Home (NETBLK-ON-ROG-OMP-1)
1 Mount Pleasant Road
Toronto, ON M4Y 2Y5
CANADA

Netname: ON-ROG-OMP-1
Netblock: 24.112.31.0 - 24.112.31.255

Coordinator:
Network Security, Fraud (AD30-ARIN) abuse@rogers.home.net
(416) 935-4729

Domain System inverse mapping provided by:

NS.ON.ROGERS.WAVE.CA24.112.32.2
NS.BC.ROGERS.WAVE.CA24.112.31.254

Record last updated on 12-Jun-1998.
Database last updated on 6-Jan-2001 18:28:05 EDT.

4:27 am on Jan 7, 2001 (gmt 0)

Senior Member

WebmasterWorld Senior Member 10+ Year Member

joined:Mar 10, 2000
posts:2151
votes: 0


Rogers is the cable company in Canada that is managing the @HOME stuff.

NS.ON.ROGERS.WAVE.CA24.112.32.2 is likely a server in Ontario and NS.BC.ROGERS.WAVE.CA24.112.31.254 is likely a server in British Columbia. @HOME owns the whole 24.xxx.xxx.xxx range.

If you were hit by just a single IP I would guess it was just a regular user. If you were spidered it might be a home grown spider that someone is running for fun.

Richard Zandvliet

4:39 am on Jan 7, 2001 (gmt 0)

Inactive Member
Account Expired

 
 


hi again, it was sending to 203.62.163.xxx
whoever that is, is there any danger, or why are they doing this, my firewall gets about 1 of these every hour, a freind who left his comp. on had all his files looked at, thats why i installed it... any suggestions..
richard
4:42 am on Jan 7, 2001 (gmt 0)

Senior Member

WebmasterWorld Senior Member 10+ Year Member

joined:Mar 10, 2000
posts:2151
votes: 0


Richard - what was the exact IP that hit your firewall?

Richard Zandvliet

5:05 am on Jan 7, 2001 (gmt 0)

Inactive Member
Account Expired

 
 


this is a copy of what info i get from my firewall.......Source Destination
(from)IP Address: 24.113.172.82 (to)IP Address: 203.62.163.xxx
(from)Host Name: Who is this? (TO)Host Name: Who is this?
(FROM)Port: 2735 (TO)Port: 12345
Program: Not Available File Name: Not Available
(this gives from and to) other than that and the previous posting i have no info..
ps 34 degreess celsius here... what about your end
10:38 pm on Jan 7, 2001 (gmt 0)

Senior Member

WebmasterWorld Senior Member tedster is a WebmasterWorld Top Contributor of All Time 10+ Year Member

joined:May 26, 2000
posts:37301
votes: 0


>> my firewall gets about 1 of these every hour

Might this be related to the problem discussed on another thread, where the "www" must be included?