http://www.dslreports.com/forum/r9545697 en Sun, 06 Dec 2009 02:59:28 EDT Sun, 06 Dec 2009 02:59:28 EDT http://www.dslreports.com/forum/remark,9550026 detth : yes it is their ip address.
and the connection was initiated by my machine.
I run weekly virus scans, and have a trojan guard app running.
No spam seems to be flowing out via the normal ways, traffic seems normal. this is wierd..]]> http://www.dslreports.com/forum/remark,9550026 Mon, 01 Mar 2004 18:51:18 EDT http://www.dslreports.com/forum/remark,9546835 keith2468 : Is 218.228.220.5 their IP address? The name often has the IP address incorporated in it, but names can be anything.

It is behind a HW FW. So does that mean the connection had to be initiated from your system? So a trojan maybe?

I would start with a virus scan with updated signatures, since it is easy to do.

Also see if there is any evidence of spam flowing out of your system.]]> http://www.dslreports.com/forum/remark,9546835 Mon, 01 Mar 2004 13:09:31 EDT http://www.dslreports.com/forum/remark,9545697 detth : Hi all,

was logged onto one of my mail servers today, and randomly did a netstat, and i see a weird connection.
there is an open and establish PPTP via HTTP to
218-228-220-5.eonet.ne.jp.

I dont remember ever dealing with this address for anything. I always patch boxes asap, run AV software, and software firewalls, and this box sits behind a hw firewall too.

any ideas on what this could be?]]> http://www.dslreports.com/forum/remark,9545697 Mon, 01 Mar 2004 10:49:04 EDT