[Dshield] LocalHost is 224.0.0.1 and RemoteHost is 127.0.0.1

Tony Nichols tony at mail.applog.com
Tue Jan 20 21:03:41 GMT 2004


That would be a cisco router in your area 224.0.0.1

t o n y
On Tue, 2004-01-20 at 09:59, Mr Babak Memari wrote:
> Salaam
> What is your idea about these logs?
> In these logs , you can see that  LocalHost is 224.0.0.1  and 
> RemoteHost is 127.0.0.1 .
> Why?
> Is this a New Hacker`s trick to SNIFF  or Redirct your Data?
> I am a Dial-Up user .
> 
> 
> Starttime Application Protocol     RemoteAddress RemotePort LocalHost 
> LocalPort
> 4:36  SYSTEM     IGMP    IN REFUSED     62.41.36.132    0      
> 224.0.0.1     0
> 4:34  SYSTEM     IGMP    IN REFUSED     62.41.36.132    0      
> 224.0.0.1     0
> 4:32  SYSTEM     IGMP    IN REFUSED     62.41.36.132    0      
> 224.0.0.1     0
> 4:29  mozilla.exe     TCP    OUT REFUSED 127.0.0.1          1027      
> 0.0.0.0     1028
> 11:11 SYSTEM     IGMP    IN REFUSED     62.41.36.132    0      
> 224.0.0.1     0
> 11:09 SYSTEM     IGMP    IN REFUSED     62.41.36.132    0      
> 224.0.0.1     0
> 11:07 SYSTEM     IGMP    IN REFUSED     62.41.36.132    0      
> 224.0.0.1     0
> 10:44 mozilla.exe     TCP    OUT REFUSED 127.0.0.1          1142      
> 0.0.0.0     1143
> 
> 
> 
> -----
> Babak from IRAN
> www.voidspace.org.uk/babak
> 
> 
> _______________________________________________
> list mailing list
> list at dshield.org
> To change your subscription options (or unsubscribe), see: http://www.dshield.org/mailman/listinfo/list




More information about the list mailing list