Hits from t-dialin.net

I'm on broadband (ADSL) and notice from my firewall log that that I get
quite a lot of hits from this site:

In TCP: pD9542926.dip.t-dialin.net [217.84.41.38:64935]

Anyone any clues? I did a look-up but couldn't see much of relevance.
TIA

Pierre

In article <>, Pierre wrote:
>I'm on broadband (ADSL) and notice from my firewall log that that I get
>quite a lot of hits from this site:

Not enough information. Is it hitting the same port number on your box,
or is it scanning? What ports?

>In TCP: pD9542926.dip.t-dialin.net [217.84.41.38:64935]

The source port (64935) is in a range often used by port forwarding
applications. Other than that - nothing of interest.

>Anyone any clues? I did a look-up but couldn't see much of relevance.

It's obviously a dynamic port - the host name contains the IP address
in hex. Do you have any reason to be offering network services to
the outside world? If not, block the crap, and ignore it.

Old guy

Moe Trin

On Wed, 29 Sep 2004 11:50:17 +0100, Pierre wrote:

>I'm on broadband (ADSL) and notice from my firewall log that that I get
>quite a lot of hits from this site:
>
>In TCP: pD9542926.dip.t-dialin.net [217.84.41.38:64935]
>
>Anyone any clues? I did a look-up but couldn't see much of relevance.
>TIA
################
It's probably some dialup user looking for a trojan that runs on that
port. Run netstat -an to check your connections

donnie

donnie wrote:
>
> On Wed, 29 Sep 2004 11:50:17 +0100, Pierre wrote:
>
> >I'm on broadband (ADSL) and notice from my firewall log that that I get
> >quite a lot of hits from this site:
> >
> >In TCP: pD9542926.dip.t-dialin.net [217.84.41.38:64935]
> >
> >Anyone any clues? I did a look-up but couldn't see much of relevance.
> >TIA
> ################
> It's probably some dialup user looking for a trojan that runs on that
> port. Run netstat -an to check your connections

netstat -an checks out ok. No apparent problem there.

Guess I'll just continue to block it, but it'd be nice to know what's
causing it.

Pierre

Pierre

On Thu, 30 Sep 2004 11:04:51 +0100, Pierre wrote:

>
>
>donnie wrote:
>>
>> On Wed, 29 Sep 2004 11:50:17 +0100, Pierre wrote:
>>
>> >I'm on broadband (ADSL) and notice from my firewall log that that I get
>> >quite a lot of hits from this site:
>> >
>> >In TCP: pD9542926.dip.t-dialin.net [217.84.41.38:64935]
>> >
>> >Anyone any clues? I did a look-up but couldn't see much of relevance.
>> >TIA
>> ################
>> It's probably some dialup user looking for a trojan that runs on that
>> port. Run netstat -an to check your connections
>
>netstat -an checks out ok. No apparent problem there.
>
>Guess I'll just continue to block it, but it'd be nice to know what's
>causing it.
>
>Pierre
#######################
If netstat is ok then, chances are you're ok. As I said, it's
probably a dialup user scanning IPs for a particular trojan that uses
that port. It happens every day. As long as that port is closed on
your box, he/she can scan all day and it doesn't matter.

donnie

donnie wrote:
>
> On Thu, 30 Sep 2004 11:04:51 +0100, Pierre wrote:
>
> >
> >
> >donnie wrote:
> >>
> >> On Wed, 29 Sep 2004 11:50:17 +0100, Pierre wrote:
> >>
> >> >I'm on broadband (ADSL) and notice from my firewall log that that I get
> >> >quite a lot of hits from this site:
> >> >
> >> >In TCP: pD9542926.dip.t-dialin.net [217.84.41.38:64935]
> >> >
> >> >Anyone any clues? I did a look-up but couldn't see much of relevance.
> >> >TIA
> >> ################
> >> It's probably some dialup user looking for a trojan that runs on that
> >> port. Run netstat -an to check your connections
> >
> >netstat -an checks out ok. No apparent problem there.
> >
> >Guess I'll just continue to block it, but it'd be nice to know what's
> >causing it.
> >
> >Pierre
> #######################
> If netstat is ok then, chances are you're ok. As I said, it's
> probably a dialup user scanning IPs for a particular trojan that uses
> that port. It happens every day. As long as that port is closed on
> your box, he/she can scan all day and it doesn't matter.

Thanks!

Pierre