Re: Strange Alert

From: David (davidwnh_at_adelphia.net)
Date: 09/08/03 

Date: Mon, 08 Sep 2003 15:02:47 GMT

If the the source ip address that sent that specific http request is the
same one that the NetBios lookup used as a destination IP addresss then yes.
>
> > If you lookup the address it has no reverse DNS entry. So when a
component
> > on your machine is looking up the IP address it follows with a netbios
> > lookup since the dns reverse lookup comes back empty. It will usually be
> > some kind of logging program that resolves ip addresses to dns addresses
> > that automatically does this. Good chance it is the logging function of
> your
> > firewall that is causing this.
>
> Tnx for answer!
>
> But interesting is that, when i had turn on apache server, was this two
> alert at the same time...
>
> this... GET /default.ida?XXXXXXXXX.... for that is guilty nimna virus on
> some server i thing..
>
> and know alert, that 192.168.0.1 wants to some ip on the net..
>
> Is maby that somehow connect?

Relevant Pages

  • Re: Cannot access a web page
    ... First let's find out what your DNS is really telling you. ... Does the lookup give you the same IP address that your HOSTS file ... More importantly that page contains absolutely no reference to Skype ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: DNS SRV Records Question
    ... The DNS Zone name in the Forward Lookup Zone is ad.farlite.co.nz ... Running Win2k server SP4 ... DS RPC Bind. ...
    (microsoft.public.win2000.dns)
  • Re: Non-blocking connect BLOCKS
    ... > I'm using asyncore to download a large list of web pages, ... > noticed dispatcher.connect blocks for some hosts. ... Most likely the connect call is doing a DNS lookup, ...
    (comp.lang.python)
  • Re: NAT/DNS question/recommendation?
    ... >> NIS in my local network. ... > absolutely nothing to do with dns. ... lookup and hangs until it times out or until it gets back a reply. ... shut down the 'srvr' doesn't seem to even try this reverse DNS ...
    (freebsd-questions)
  • Re: Exchange mailing to A records intermittently instead of MX records ???
    ... That would be consistent with lookup failures. ... If you fail that time, then you fail back to the application ... it would check DNS ...
    (microsoft.public.exchange.connectivity)
Quantcast