Re: Microsoft update hanging on my firewall?

From: Baho Utot (baho-utot@columbus.rr.com)
Date: 07/19/02 

From: Baho Utot <baho-utot@columbus.rr.com>
Date: Thu, 18 Jul 2002 23:26:54 GMT

On Wed, 17 Jul 2002 22:27:45 -0400, John Smith wrote:

> Baho Utot wrote:
>>
>> I was messing around and did a netstat on my firewall box for kicks and
>> saw the following:
>>
>> tcp 0 0 dhcp93123010.colum:3306 207.74.51.254:99 SYN_RECV
>> - tcp 0 0 dhcp93123010.columb:www 207.74.51.254:99
>> SYN_RECV - tcp 0 0 dhcp93123010.columb:www
>> 207.74.51.254:99 SYN_RECV - tcp
>> 0 0 dhcp93123010.columb:ssh 207.74.51.254:99 SYN_RECV -
>> tcp 0 0 dhcp93123010.columb:ssh 207.74.51.254:99 SYN_RECV
>> - tcp 0 0 dhcp93123010.colum:imap 207.74.51.254:99
>> SYN_RECV - tcp 0 0 dhcp93123010.columb:pop
>> 207.74.51.254:99 SYN_RECV - tcp
>> 0 0 dhcp93123010.columb:pop 207.74.51.254:99 SYN_RECV -
>> tcp 0 0 dhcp93123010.columb:ftp 207.74.51.254:99 SYN_RECV
>> - tcp 0 0 dhcp93123010.columb:ftp 207.74.51.254:99
>> SYN_RECV -
>>
>> When I browse the site 207.74.51.254 this is from Konqueror,
>>
>> Thank you for your interest in Windows Update
>>
>> Windows Update is the online extension of Windows that helps you get
>> the most out of your
>> computer.
>>
>> You must be running a Microsoft Windows operating system in order to
>> use Windows
>> Update.
>>
>> I don't do windows at all. Have you guys seen this before? It looks
>> like ms is connected to all my services that I run including mysql (on
>> 3306).
>>
>> I have never connected to any microsoft site and I have only my one
>> client box behind the firewall. No ms software install anywhere! I
>> have no need for ms
>>
>> Comments - interpertation anyone?
>
> Aha! I stumbled onto another curiosity ...
>
> nslookup www.auditmypc.com
> Server: xx.xx.xx.xx
> Address: xx.xx.xx.xx
>
> Name: auditmypc.com
> Address: 207.74.51.254
> Aliases: www.auditmypc.com
>
> Did somebody on the private side of your firewall maybe requested a port
> scan ?

Nope I am the only one on "myside". I am curious as to why the ms site
came up in konqueror when I browsed the ip?

Relevant Pages

  • Re: Guide to secure installtion of IIS 5
    ... don't forget a well-configured firewall. ... Do not put the computer onto the network or the Internet until after the ... Follow the instructions for hardening Windows and IIS at ... Install all service packs and security fixes from Microsoft and otherwise ...
    (microsoft.public.inetserver.iis.security)
  • Re: Is secedit.exe left by a hacker?
    ... > tested on port 445. ... > I have a Linksys router that I use as a firewall to my ... Secedit.exe is the name of a legitimate Windows file, ... investigate the files on your computer - antivirus with the latest updates ...
    (microsoft.public.win2000.security)
  • Re: Is secedit.exe left by a hacker?
    ... >> tested on port 445. ... >> I have a Linksys router that I use as a firewall to my ... >investigate the files on your computer - antivirus with ... >windows and everything else. ...
    (microsoft.public.win2000.security)
  • Re: How to Maintain an IIS Server?
    ... > server running on a Windows 2000 server. ... before a firewall and antivirus have been installed]. ... open ports; however, this will not identify which program is using the port. ...
    (microsoft.public.inetserver.iis.security)
  • Re: I am having connectivity problems
    ... Windows XP | select Windows XP Service Pack 3 ... firewall and turned ON Windows firewall. ... When I tried to install SP2 I was unable to get it thru Windows Update. ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
Loading