Topic "ckers.org"

Author Message
KDCinfo
[View user's profile]

Joined: 2005-06-17
Posts: 4
Location: Dallas, TX
Hi there,

I'm new here, but have been using winscp for about 6 months now. Its nice feeling secure... even if I am still ignorant of so many other thousand issues that aren't.

My question today is, I noticed in ZoneAlarm, when I connected to my site, ZA showed a 2nd firewall/application entry showing the destination DNS as ckers.org. This is "ha.ckers" - any idea why this would be a destination dns.

What's worse, the IP mentioned goes to 69.12.144.65:53. That's not a pretty sight...

Any thoughts? I'm using 382, and if I recall correctly, I downloaded it via SourceForge.

For one, I'm changing the password to the site I logged into via WinSCP.

Thanks.

Keith D Commiskey
_________________
Keith D Commiskey
My Background: https://kdcinfo.com
Advertisements
martin
[View user's profile]
Site Admin
Joined: 2002-12-10
Posts: 24530
Location: Prague, Czechia
I've never header of such problem. What application does the ZA report to open the connection? WinSCP? Who do you run the WinSCP?
_________________
Martin Prikryl
Guest




Thanks for the response. ZA did report WinSCP as the application that opened the connection. I use the standalone version, so just open the exe via a shortcut. Unfortunately, the log kept rolling and I never could recreate the notification/log entry with ZA.

Moving on: ZA was causing issues this morning, so I uninstalled and installed Kerio. The Kerio log is showing access denied to "http://ha.ckers.org/blog/feed/" every 5 minutes...
KDCinfo
[View user's profile]

Joined: 2005-06-17
Posts: 4
Location: Dallas, TX
I think I found the source of the ha.ckers.org notifications from my firewalls. Here at work, that address is actually blocked. And although I secure proxy to some addresses, my Google Desktop does not; it gets blocked... and one of my Google Desktop tab views are for relevant news feeds. Being that updates every 5 minutes, I'm guessing that's the source of the notifications.

I've shut that down and expect these 5-minute interval notifications to cease.

You never know what's going on 'till you install a firewall and inspect the logs. And even then, you're only just a little more informed.
_________________
Keith D Commiskey
My Background: https://kdcinfo.com
martin
[View user's profile]
Site Admin
Joined: 2002-12-10
Posts: 24530
Location: Prague, Czechia
Let me know... Smile
_________________
Martin Prikryl
Advertisements

You can post new topics in this forum






Search Site

What is WinSCP?

It is award-winning SFTP client, SCP client, FTPS client and FTP client integrated into one software program for file transfer to FTP server or secure SFTP server. [More]

And it's free!

Donate

About donations

$9   $19   $49   $99

About donations

Recommend

WinSCP Privacy Policy

WinSCP License