site security

my firewall captured this, ?? who or what it means

[Richard Zandvliet]

does any body know what this is, it comes up on my firewall protector,
Output from ARIN WHOIS
[arin.net...]

--------------------------------------------------------------------------------

Search for :

--------------------------------------------------------------------------------

Rogers@Home (NETBLK-ON-ROG-OMP-1)
1 Mount Pleasant Road
Toronto, ON M4Y 2Y5
CANADA

Netname: ON-ROG-OMP-1
Netblock: 24.112.31.0 - 24.112.31.255

Coordinator:
Network Security, Fraud (AD30-ARIN) [e-mail]
[phone]

Domain System inverse mapping provided by:

NS.ON.ROGERS.WAVE.CA24.112.32.2
NS.BC.ROGERS.WAVE.CA24.112.31.254

Record last updated on 12-Jun-1998.
Database last updated on 6-Jan-2001 18:28:05 EDT.

[oilman]

Rogers is the cable company in Canada that is managing the @HOME stuff.

NS.ON.ROGERS.WAVE.CA24.112.32.2 is likely a server in Ontario and NS.BC.ROGERS.WAVE.CA24.112.31.254 is likely a server in British Columbia. @HOME owns the whole 24.xxx.xxx.xxx range.

If you were hit by just a single IP I would guess it was just a regular user. If you were spidered it might be a home grown spider that someone is running for fun.

[Richard Zandvliet]

hi again, it was sending to 203.62.163.xxx
whoever that is, is there any danger, or why are they doing this, my firewall gets about 1 of these every hour, a freind who left his comp. on had all his files looked at, thats why i installed it... any suggestions..
richard

[oilman]

Richard - what was the exact IP that hit your firewall?

[Richard Zandvliet]

this is a copy of what info i get from my firewall.......Source Destination
(from)IP Address: 24.113.172.82 (to)IP Address: 203.62.163.xxx
(from)Host Name: Who is this? (TO)Host Name: Who is this?
(FROM)Port: 2735 (TO)Port: 12345
Program: Not Available File Name: Not Available
(this gives from and to) other than that and the previous posting i have no info..
ps 34 degreess celsius here... what about your end

[tedster]

>> my firewall gets about 1 of these every hour

Might this be related to the problem discussed on another thread, where the "www" must be included?