Connections from 158.152.1.48/158.152.1.53

Article View: demon.ip.support.nt

Article #79

Back to demon.ip.support.nt Previous Next

#79

From: Richard Tibbetts
Date: Tue, 16 Jul 2002 20:30

7 lines
1365 bytes

Should I be worried?  My firewall has suddenly started logging *lots*
of attempted connections from the Demon DNS servers from port 53,
trying to connect to a variety of 4nnn ports.  This seems to be a new
thing.
-- 
Richard Tibbetts
http://www.primepeace.ltd.uk/

Technical Details

Message-ID: <l409jucpmg7vfflb88i9930172dvhaoklg@4ax.com>

Path:

arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!sn-xit-02!sn-xit-01!sn-xit-08!supernews.com!feed.textport.net!news.stealth.net!news.stealth.net!kibo.news.demon.net!news.demon.co.uk!demon!ppeace.demon.co.uk!not-for-mail

Show Full Headers

Complete Article Headers

X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: 112d46,c716dabf41f2b438,start
X-Google-Attributes: gid112d46,public
X-Google-ArrivalTime: 2002-07-16 13:30:58 PST
Path: arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!sn-xit-02!sn-xit-01!sn-xit-08!supernews.com!feed.textport.net!news.stealth.net!news.stealth.net!kibo.news.demon.net!news.demon.co.uk!demon!ppeace.demon.co.uk!not-for-mail
From: Richard Tibbetts <richard@primepeace.ltd.uk>
Newsgroups: demon.ip.support.nt
Subject: Connections from 158.152.1.48/158.152.1.53
Date: Tue, 16 Jul 2002 21:30:01 +0100
Organization: primepeace ltd - independent cyborg consultancy
Message-ID: <l409jucpmg7vfflb88i9930172dvhaoklg@4ax.com>
Reply-To: richard@primepeace.ltd.uk
NNTP-Posting-Host: ppeace.demon.co.uk
X-NNTP-Posting-Host: ppeace.demon.co.uk:158.152.75.77
X-Trace: news.demon.co.uk 1026851387 nnrp-01:27261 NO-IDENT ppeace.demon.co.uk:158.152.75.77
X-Complaints-To: abuse@demon.net
X-Newsreader: Forte Agent 1.91/32.564
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Lines: 7