« FTP Client | Main | Peak Awareness »
October 12, 2003
What is this?
I got an e-mail from Joe who was looking at his router log and came across this IP address -- http://198.49.161.206/ from Network Solutions.
What in the heck is that stuff and why would that be hitting his house? Maybe someone spoofing that address?
Posted by michael at October 12, 2003 06:49 PM
Comments
I've noticed that Windows MSI Installer is sometime sending information to this address (on port 80) when installing a program.
If you trace route to this, you'll see it seems to be a Microsoft's computer.
Maybe is it a spy from Microsoft to know the key of your Windows or softwares installed. In this case the use of port 80 is a good mean to bypass firewall...
Ask to some hacker to verify...
Posted by: padboll at December 17, 2003 08:13 AM