Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.


Dawg

233 posts

Master Geek
+1 received by user: 1


#29802 20-Jan-2009 08:13
Send private message


Morning all,

I blocked a svchost request this morning from a strange dns. (i didn;t recognise)

I then checked the hacker info in Zone alarm & the request looks like it came from Telstraclear.

Is this legit/safe/something?

Whois Information
% [whois.apnic.net node-2] % Whois data copyright terms http://www.apnic.net/db/dbcopyright.html inetnum: 203.96.144.0 - 203.96.159.255 netname: TELSTRACLEAR-NZ descr: TelstraClear Ltd country: NZ admin-c: TAC3-AP tech-c: TTC7-AP mnt-by: APNIC-HM mnt-lower: MAINT-NZ-TELSTRACLEAR notify: apnic.changes@team.telstraclear.co.nz status: ALLOCATED PORTABLE changed: hm-changed@apnic.net 19951215 changed: hm-changed@apnic.net 20041214 source: APNIC role: TelstraClear Administrative Contact address: TelstraClear Limited address: Network Planning address: Private Bag 92143 address: Auckland country: NZ e-mail: apnic.changes@team.telstraclear.co.nz phone: +64 9 912 5205 trouble: For network abuse contact: trouble: list.admin@team.telstraclear.co.nz trouble: +64 9 912 5161 trouble: For 24/7 after-hours NOC contact: trouble: +64 9 912 4482 notify: apnic.changes@team.telstraclear.co.nz tech-c: TTC7-AP admin-c: TAC3-AP nic-hdl: TAC3-AP mnt-by: MAINT-NZ-TELSTRACLEAR changed: hm-changed@apnic.net 20041125 source: APNIC role: TelstraClear Technical Contact address: TelstraClear Limited address: Customer Help address: Private Bag 92143 address: Auckland country: NZ e-mail: list.admin@team.telstraclear.co.nz phone: +64 9 912 5161 trouble: For network abuse contact: trouble: list.admin@team.telstraclear.co.nz trouble: +64 9 912 5161 trouble: For 24/7 after-hours NOC contact: trouble: +64 9 912 4482 notify: apnic.changes@team.telstraclear.co.nz tech-c: TTC7-AP admin-c: TAC3-AP nic-hdl: TTC7-AP mnt-by: MAINT-NZ-TELSTRACLEAR changed: hm-changed@apnic.net 20041125 source: APNIC

Create new topic
freitasm
BDFL - Memuneh
80646 posts

Uber Geek
+1 received by user: 41029

Administrator
ID Verified
Trusted
Geekzone
Lifetime subscriber

#190700 20-Jan-2009 08:38
Send private message

What port was used? Was is it on the cable modem network? There are lot of normal background noise/activity on a cable modem network - and broadcasts are not uncommon - ARP for example.




Referral links: Quic Broadband (free setup code: R587125ERQ6VE) | Samsung | AliExpress | Wise | Sharesies 

 

Support Geekzone by subscribing (browse ads-free), or making a one-off or recurring donation through PressPatron.

 




Dawg

233 posts

Master Geek
+1 received by user: 1


  #190705 20-Jan-2009 09:00
Send private message

I am on the TCL cable network.

I will have to check the port when I get back home.

Dawg

233 posts

Master Geek
+1 received by user: 1


  #190847 20-Jan-2009 17:20
Send private message

Port 53




xpd

xpd
Geek of Coastguard
14115 posts

Uber Geek
+1 received by user: 4574

Retired Mod
ID Verified
Trusted
Lifetime subscriber

  #190875 20-Jan-2009 18:45
Send private message

Thats DNS.

So dont block it or you'll find youve blocked yourself from the net (apart from using IP addresses)




XPD / Gavin

 

LinkTree

 

 

 


Create new topic








Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.