Debian Linux network connections to 128.31.0.51?
There seems to be a backdoor in debian linux that sends out signals via port 80 to connect to http://128.31.0.51. What's going on here? Maybe instead of sneaking behind users backs you could document this invasive justification for updates of debian linux.
|
ROBTEX says debian.org, debian.net, debian.com, senfl.debian.org, planet.debian.org and at least six other hosts point to 128.31.0.51. Alioth.debian.org and 192-27.211.177.194.in-addr.arpa use 128.31.0.51 as a name server. Tracing WHOIS nfo, listing and sniffing connections first may have been more efficient.
//I've also changed your thread title to something less sensationalist and moved it to the appropriate Debian forum. |
Maybe you have the packages contest enabled? Or maybe it's apt-get running in the background to check for updates on the Debian servers? If you run netstat -natp as root you will see which program is connecting to this address.
|
All times are GMT -5. The time now is 07:42 PM. |