on Thu, 11 Sep 2003 
17:07:05 PDT7 
> [G:\]host 66.220.17.151 
>   66.220.17.151 = 151.17.220.66.in-addr.arpa 
>  
> My firewall shows unusually heavy activity from 66.220.17.151 trying to 
> break into my machine.  I've never used HOST before and don't understand 
> the response.  HOST.EXE has no online help and the Warp TCP/IP help file 
> isn't clear on what the response means. 
That is the name that 66.220.17.151 resolves to.  In this case by itself it is 
not much use.  The most likely reason is that someone's computer is infected 
with a worm and that worm is trying to propagate itself into your machine.  
Since you have a firewall on your machine there is probably not much to worry 
about. 
I could not find any official reporting addresses for this IP.  Send a message 
to all of these addresses, one of them my be helpful. 
postmaster@66.in-addr.arpa 
postmaster@17.220.66.in-addr.arpa 
postmaster@220.66.in-addr.arpa 
postmaster@151.17.220.66.in-addr.arpa 
postmaster@in-addr.arpa 
I think the IP address belongs to 
Hurricane Ridge LLC (HURRICANE2-DOM) 
   701 5th Ave, Suite 6801 
   Seattle, WA 98104 
I could not find a reporting address for them either. 
--  
Robert Blair 
===================================================== 
To unsubscribe from this list, send an email message 
to "steward@scoug.com". In the body of the message, 
put the command "unsubscribe scoug-help". 
For problems, contact the list owner at 
"rollin@scoug.com". 
===================================================== 
<< Previous Message << 
 >> Next Message >>
Return to [ 12 | 
September | 
2003 ]
The Southern California OS/2 User Group
P.O. Box 26904
Santa Ana, CA  92799-6904, USA
Copyright 2001 the Southern California OS/2 User Group.  ALL RIGHTS 
RESERVED. 
SCOUG, Warp Expo West, and Warpfest are trademarks of the Southern California OS/2 User Group.
OS/2, Workplace Shell, and IBM are registered trademarks of International 
Business Machines Corporation.
All other trademarks remain the property of their respective owners.