Full Disclosure mailing list archives
Re: svchost.exe try to send http outside
From: Mark <fd () mchsi com>
Date: Wed, 17 Aug 2005 06:46:35 -0500
howard.lee () guoco com wrote:
The svchost.exe will stop to run when I stop the automatic update. But I'm sure the IP tried to connect by the svchost is NOT MS related site. 218.213.255.29 80.15.249.167 Regards, Howard
Well, the first one, probably not. inetnum: 218.213.0.0 - 218.213.255.255 netname: HKNET-HK descr: HKNet Company Limited descr: 15/F, Tower 2, Ever Gain Plaza, descr: 88 Container Port Road, Kwai Chung, N.T. country: HK But the second address we can't be so sure, I've heard that Microsoft uses Akamai for Windows Update. inetnum: 80.15.249.0 - 80.15.249.239 netname: AKAMAI-FT-US descr: Akamai Technologies - US machines connected to FT AS5511 -- Mark _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- svchost.exe try to send http outside howard . lee (Aug 17)
- Re: svchost.exe try to send http outside Josh Zlatin-Amishav (Aug 17)
- Re: svchost.exe try to send http outside Dave Korn (Aug 17)
- RE: svchost.exe try to send http outside Mike (Aug 17)
- RE: svchost.exe try to send http outside Aditya Deshmukh (Aug 17)
- Re: svchost.exe try to send http outside Paul Schmehl (Aug 17)
- RE: svchost.exe try to send http outside CIRT.DK Mailinglists (Aug 17)
- <Possible follow-ups>
- RE: svchost.exe try to send http outside howard . lee (Aug 17)
- Re: svchost.exe try to send http outside Mark (Aug 17)
- Re: svchost.exe try to send http outside Simon Richter (Aug 17)
- RE: svchost.exe try to send http outside howard . lee (Aug 17)
- Re: svchost.exe try to send http outside Josh Zlatin-Amishav (Aug 17)