In the wee hour of 09:21 PM 5/6/01 -0500, Barry Aronson bequeathed such
tales as these:
>At 09:09 PM 5/6/01 -0500, you wrote:
>>Jeff,
>>Port 6347 is gnutella. A popular peer to peer file and MP3 swapping
>>program. Someone must have had your IP at one time with gutella serving. Or
>>maybe they think you do. I don't think it is much to worry about. ZA blocked
>>it so no big sweat IMHO.
>>
>>gnutella-svc 6346/tcp gnutella-svc
>>gnutella-svc 6346/udp gnutella-svc
>>gnutella-rtr 6347/tcp gnutella-rtr
>>gnutella-trt 6347/udp gnutella-rtr
>>
>>t0m
>>
>>
>> > Hello all,
>> > Sorry to bring this subject up again-but I am receiving alerts with the
>> > following information. Every time I click on more info-I can't get to the
>> > page, it says page cannot be found, Can not find server or DNS error.
>> > Here is the info from ZA:
>> > Firewall blocked Internet access to your computer (TCP port 6347)from
>> > 217.81.109.140 (TCP port 64977)(TCP flag: S)
>>=====================================================
>
>Actually Jeff's scan is originating from Germany and is blocked from Arin
>Whois. I did a Traceroute and got to the end. Tried to open up the site
>but no luck.
>
>Barry Aronson -- [EMAIL PROTECTED]
Barry, I found the IP on Whois.Ripe.net easily, it's from Germany and it's
a German telecom ISP. This is the full description:
% This is the RIPE Whois server.
% The objects are in RPSL format.
% Please visit http://www.ripe.net/rpsl for more information.
% Rights restricted by copyright.
% See http://www.ripe.net/ripencc/pub-services/db/copyright.html
inetnum: 217.80.0.0 - 217.89.31.255
netname: DTAG-DIAL14
descr: Deutsche Telekom AG
country: DE
admin-c: RH2086-RIPE
tech-c: AH12705-RIPE
tech-c: ST5359-RIPE
status: ASSIGNED PA
remarks: ************************************************************
remarks: * ABUSE CONTACT: [EMAIL PROTECTED] IN CASE OF HACK ATTACKS, *
remarks: * ILLEGAL ACTIVITY, VIOLATION, SCANS, PROBES, SPAM, ETC. *
remarks: ************************************************************
notify: [EMAIL PROTECTED]
notify: [EMAIL PROTECTED]
mnt-by: DTAG-NIC
changed: [EMAIL PROTECTED] 20010321
source: RIPE
route: 217.80.0.0/12
descr: Deutsche Telekom AG, Internet service provider
origin: AS3320
mnt-by: DTAG-RR
changed: [EMAIL PROTECTED] 20001027
source: RIPE
person: Reinhard Hausdorf
address: Deutsche Telekom AG
address: Am Kavalleriesand 3
address: D-64295 Darmstadt
address: Germany
phone: +49
nic-hdl: RH2086-RIPE
notify: [EMAIL PROTECTED]
notify: [EMAIL PROTECTED]
mnt-by: DTAG-NIC
changed: [EMAIL PROTECTED] 20010321
source: RIPE
person: Andreas Hengl
address: Deutsche Telekom AG
address: Internetplanung Nuernberg
address: Suedwestpark 26
address: 90449 Nuernberg
address: Germany
phone: +49 911 1509609
fax-no: +49 911 1509618
e-mail: [EMAIL PROTECTED]
nic-hdl: AH12705-RIPE
notify: [EMAIL PROTECTED]
notify: [EMAIL PROTECTED]
mnt-by: DTAG-NIC
changed: [EMAIL PROTECTED] 20010321
source: RIPE
person: Security Team
address: Deutsche Telekom AG
address: Technikniederlassung Schwaebisch Hall
address: D-89070 Ulm
address: Germany
phone: +49 731 100 84055
fax-no: +49 731 100 84150
e-mail: [EMAIL PROTECTED]
nic-hdl: ST5359-RIPE
notify: [EMAIL PROTECTED]
notify: [EMAIL PROTECTED]
mnt-by: DTAG-NIC
changed: [EMAIL PROTECTED] 20010321
source: RIPE
I haven't failed, I've found 10,000 ways that don't work.
Thomas Edison (1847-1931)
============= PCWorks Mailing List =================
Don't see your post? Check our posting guidelines &
make sure you've followed proper posting procedures,
http://pcworkers.com/rules.htm
Contact list owner <[EMAIL PROTECTED]>
Unsubscribing and other changes: http://pcworkers.com
=====================================================
