[Dshield] LocalHost is 224.0.0.1 and RemoteHost is 127.0.0.1

Mr Babak Memari memari at myrealbox.com
Tue Jan 20 14:59:13 GMT 2004


Salaam
What is your idea about these logs?
In these logs , you can see that  LocalHost is 224.0.0.1  and 
RemoteHost is 127.0.0.1 .
Why?
Is this a New Hacker`s trick to SNIFF  or Redirct your Data?
I am a Dial-Up user .


Starttime Application Protocol     RemoteAddress RemotePort LocalHost 
LocalPort
4:36  SYSTEM     IGMP    IN REFUSED     62.41.36.132    0      
224.0.0.1     0
4:34  SYSTEM     IGMP    IN REFUSED     62.41.36.132    0      
224.0.0.1     0
4:32  SYSTEM     IGMP    IN REFUSED     62.41.36.132    0      
224.0.0.1     0
4:29  mozilla.exe     TCP    OUT REFUSED 127.0.0.1          1027      
0.0.0.0     1028
11:11 SYSTEM     IGMP    IN REFUSED     62.41.36.132    0      
224.0.0.1     0
11:09 SYSTEM     IGMP    IN REFUSED     62.41.36.132    0      
224.0.0.1     0
11:07 SYSTEM     IGMP    IN REFUSED     62.41.36.132    0      
224.0.0.1     0
10:44 mozilla.exe     TCP    OUT REFUSED 127.0.0.1          1142      
0.0.0.0     1143



-----
Babak from IRAN
www.voidspace.org.uk/babak





More information about the list mailing list