Welcome to WebmasterWorld Guest from 54.144.243.34

Forum Moderators: phranque

site security

my firewall captured this, ?? who or what it means

   
4:06 am on Jan 7, 2001 (gmt 0)

10+ Year Member



does any body know what this is, it comes up on my firewall protector,
Output from ARIN WHOIS
[arin.net...]

--------------------------------------------------------------------------------

Search for :

--------------------------------------------------------------------------------

Rogers@Home (NETBLK-ON-ROG-OMP-1)
1 Mount Pleasant Road
Toronto, ON M4Y 2Y5
CANADA

Netname: ON-ROG-OMP-1
Netblock: 24.112.31.0 - 24.112.31.255

Coordinator:
Network Security, Fraud (AD30-ARIN) abuse@rogers.home.net
(416) 935-4729

Domain System inverse mapping provided by:

NS.ON.ROGERS.WAVE.CA24.112.32.2
NS.BC.ROGERS.WAVE.CA24.112.31.254

Record last updated on 12-Jun-1998.
Database last updated on 6-Jan-2001 18:28:05 EDT.

4:27 am on Jan 7, 2001 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



Rogers is the cable company in Canada that is managing the @HOME stuff.

NS.ON.ROGERS.WAVE.CA24.112.32.2 is likely a server in Ontario and NS.BC.ROGERS.WAVE.CA24.112.31.254 is likely a server in British Columbia. @HOME owns the whole 24.xxx.xxx.xxx range.

If you were hit by just a single IP I would guess it was just a regular user. If you were spidered it might be a home grown spider that someone is running for fun.

4:39 am on Jan 7, 2001 (gmt 0)

10+ Year Member



hi again, it was sending to 203.62.163.xxx
whoever that is, is there any danger, or why are they doing this, my firewall gets about 1 of these every hour, a freind who left his comp. on had all his files looked at, thats why i installed it... any suggestions..
richard
4:42 am on Jan 7, 2001 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



Richard - what was the exact IP that hit your firewall?
5:05 am on Jan 7, 2001 (gmt 0)

10+ Year Member



this is a copy of what info i get from my firewall.......Source Destination
(from)IP Address: 24.113.172.82 (to)IP Address: 203.62.163.xxx
(from)Host Name: Who is this? (TO)Host Name: Who is this?
(FROM)Port: 2735 (TO)Port: 12345
Program: Not Available File Name: Not Available
(this gives from and to) other than that and the previous posting i have no info..
ps 34 degreess celsius here... what about your end
10:38 pm on Jan 7, 2001 (gmt 0)

WebmasterWorld Senior Member tedster is a WebmasterWorld Top Contributor of All Time 10+ Year Member



>> my firewall gets about 1 of these every hour

Might this be related to the problem discussed on another thread, where the "www" must be included?

 

Featured Threads

My Threads

Hot Threads This Week

Hot Threads This Month