Starting around the 5th of September, I have around 100 entries in my log file that indicate
something is trying to connect to an address in Japan.
The information provided is as follows:-----------(The time is all hours of the day... )Protocol:
Source IP: 192.168.1.101Destination IP:
(Varies, anywhere from 1 to 6)Source DNS:
SlaveDestination DNS: KD061200196249.ppp.prin.ne.jp-----------
All of the outgoing attempts are to that specific IP address.
This is on a business PC, and upstream of ZoneAlarm are multiple hardware firewalls, so I am not concerned about the outgoing attempts being successful.
What I am concerned about is what exactly is trying to connect to that address.
Nothing has been installed on the PC in question.
A quick Google returned little results, most of them in Japanese,
so I am at somewhat of a loss to explain it.
Has anyone heard of anything trying to connect to that address before?
Windows XP Pro
Message Edited by jeparham on 10-07-2008 09:30 AM