Security Basics mailing list archives

re: Port 2848


From: H C <keydet89 () yahoo com>
Date: Wed, 18 Dec 2002 11:05:13 -0800 (PST)

Nathan,

An ARIN search on the IP addresses you mentioned
reveals:

206.204.212.226 is owned by ConXioN Corporation,
according to ARIN.  Nslookup reveals that the name of
the host is "gw02entry01.gw02.dis.symantec.com".

206.204.52.98 is also "owned by" ConXion, but it's
name is "gw01entry01.gw01.dis.symantec.com".

Here's a suggestion...rather than posting to the list
and waiting for someone to tell you what to do, why
not go on over to 192.168.100.2 and run 'netstat -an'?
 See if the connection is still open to either one of
those systems.  Then, depending on which operating
system that system is running, run a port-to-process
mapping tool (lsof or fuser for Linux/*nix, fport for
NT/2K/XP, or 'netstat -ano' on XP).  

Maybe if you did a little checking yourself, you'd
save yourself a lot of time.




__________________________________________________
Do you Yahoo!?
Yahoo! Mail Plus - Powerful. Affordable. Sign up now.
http://mailplus.yahoo.com


Current thread: