[Full-Disclosure] Re: Strange connection from google desktop search

[Steve R <steve_r125@xxxxxxxxxxx>]

--- RandallM <randallm@xxxxxxxxxxx> wrote:
> The following established connection was noticed:
>  TCP    xxx.xxx.x.xx:2869      64.233.187.104:80    
>  ESTABLISHED     2824
> 
> Process viewer reported it to be:
> Googledesktop.exe
> 
> SamSpade says:
> 
> 03/05/05 21:54:31 whois  64.233.187.104
> I don't recognise any domain in 187.104, trying
> internic
> 
> whois -h whois.internic.net 187.104 ...
> 
> Whois Server Version 1.3
> 
> Domain names in the .com and .net domains can now be
> registered
> with many different competing registrars. Go to
> http://www.internic.net
> for detailed information.
> 
> No match for "187.104".
> 
> 03/05/05 22:07:21 finger @ 64.233.187.104
> finger @ 64.233.187.104 failed, no such host
> 
> 03/05/05 22:07:47 dns  64.233.187.104
> No DNS for this address
> (host doesn't exist)

FYI,

Output from ARIN WHOIS
Search results for: 64.233.187.104

OrgName:    Google Inc. 
OrgID:      GOGL
Address:    2400 E. Bayshore Parkway
City:       Mountain View
StateProv:  CA
PostalCode: 94043
Country:    US

NetRange:   64.233.160.0 - 64.233.191.255 
CIDR:       64.233.160.0/19 
NetName:    GOOGLE
NetHandle:  NET-64-233-160-0-1
Parent:     NET-64-0-0-0-0
NetType:    Direct Allocation
NameServer: NS1.GOOGLE.COM
NameServer: NS2.GOOGLE.COM
Comment:    
RegDate:    2003-08-18
Updated:    2004-03-05

TechHandle: ZG39-ARIN
TechName:   Google Inc. 
TechPhone:  +1-650-318-0200
TechEmail:  arin-contact@xxxxxxxxxx 

OrgTechHandle: ZG39-ARIN
OrgTechName:   Google Inc. 
OrgTechPhone:  +1-650-318-0200
OrgTechEmail:  arin-contact@xxxxxxxxxx

# ARIN WHOIS database, last updated 2005-03-05 19:10
# Enter ? for additional hints on searching ARIN's
WHOIS database.


Send instant messages to your online friends http://uk.messenger.yahoo.com 
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html