[PLUG] Mysterious port connections

dan at fiddlers-green.info dan at fiddlers-green.info
Thu Dec 15 00:14:41 UTC 2005


Quoting Rich Shepard <rshepard at appl-ecosys.com>:


> [rshepard at salmo ~/]$ whois 69.88.120.210
> Eschelon Telecommunications, Inc. ESCH-2003B (NET-69-88-64-0-1)
>                                    69.88.64.0 - 69.88.127.255
> Dickinson Equipment Co ESCH-69-88-120-208 (NET-69-88-120-208-1)
>                                    69.88.120.208 - 69.88.120.215
> 
>    Anyone you know?
> 
> Rich

No. CC has a traceroute feature and it Eschelon's gateway is the second to last
hop. Eschelon's record is:

Registrant:
Inc., Eschelon Telecom,
   730 2nd ave S
   Suite #900
   Minneapolis, MN 55402
   US

   Domain Name: ESCHELON.COM

   Administrative Contact, Technical Contact:
      Inc., Eschelon Telecom,		hostmaster at ESCHELON.COM
      730 2nd ave S
      Suite #900
      Minneapolis, MN 55402
      US
      877-646-5497 fax: 612-436-6599

   Record expires on 27-Mar-2009.
   Record created on 27-Mar-2000.
   Database last updated on 14-Dec-2005 19:24:06 EST.

   Domain servers in listed order:

   NS0.MSP.ESCHELON.COM         209.150.200.15
   NS0.SEA.ESCHELON.COM         64.65.128.6
   NS1.MSP.ESCHELON.COM         209.150.200.10

I've shutdown all incoming ports from that address and all outgoing ports to
that address. That doesn't seem to have done much though, as the ports still
show on the list...

----------------------------------------------------------------
This message was sent using IMP, the Internet Messaging Program.




More information about the PLUG mailing list