full-disclosure - Re: Strange connection from google desktop search

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <20050306050634.32692.qmail@web25207.mail.ukl.yahoo.com>
From: steve_r125 at yahoo.co.uk (Steve R)
Subject: Re: Strange connection from google desktop search

--- RandallM <randallm@...mail.com> wrote:
> The following established connection was noticed:
>  TCP    xxx.xxx.x.xx:2869      64.233.187.104:80    
>  ESTABLISHED     2824
> 
> Process viewer reported it to be:
> Googledesktop.exe
> 
> SamSpade says:
> 
> 03/05/05 21:54:31 whois  64.233.187.104
> I don't recognise any domain in 187.104, trying
> internic
> 
> whois -h whois.internic.net 187.104 ...
> 
> Whois Server Version 1.3
> 
> Domain names in the .com and .net domains can now be
> registered
> with many different competing registrars. Go to
> http://www.internic.net
> for detailed information.
> 
> No match for "187.104".
> 
> 03/05/05 22:07:21 finger @ 64.233.187.104
> finger @ 64.233.187.104 failed, no such host
> 
> 03/05/05 22:07:47 dns  64.233.187.104
> No DNS for this address
> (host doesn't exist)

FYI,

Output from ARIN WHOIS
Search results for: 64.233.187.104

OrgName:    Google Inc. 
OrgID:      GOGL
Address:    2400 E. Bayshore Parkway
City:       Mountain View
StateProv:  CA
PostalCode: 94043
Country:    US

NetRange:   64.233.160.0 - 64.233.191.255 
CIDR:       64.233.160.0/19 
NetName:    GOOGLE
NetHandle:  NET-64-233-160-0-1
Parent:     NET-64-0-0-0-0
NetType:    Direct Allocation
NameServer: NS1.GOOGLE.COM
NameServer: NS2.GOOGLE.COM
Comment:    
RegDate:    2003-08-18
Updated:    2004-03-05

TechHandle: ZG39-ARIN
TechName:   Google Inc. 
TechPhone:  +1-650-318-0200
TechEmail:  arin-contact@...gle.com 

OrgTechHandle: ZG39-ARIN
OrgTechName:   Google Inc. 
OrgTechPhone:  +1-650-318-0200
OrgTechEmail:  arin-contact@...gle.com

# ARIN WHOIS database, last updated 2005-03-05 19:10
# Enter ? for additional hints on searching ARIN's
WHOIS database.


Send instant messages to your online friends http://uk.messenger.yahoo.com