See: http://163.30.156.15:3000/sortDataThpt.html?showH=2&showL=2&col=-6
Anyone? on another host: 131.174.196.133 → http://163.30.156.15:3000/131.174.196.133.html
Had to read up on this to have an ascertained guess: SAP: DSAP=0xAA/SSAP=0xAA
polonus
See: http://163.30.156.15:3000/sortDataThpt.html?showH=2&showL=2&col=-6
Anyone? on another host: 131.174.196.133 → http://163.30.156.15:3000/131.174.196.133.html
Had to read up on this to have an ascertained guess: SAP: DSAP=0xAA/SSAP=0xAA
polonus
U saw that connection was filtering on: 1720/tcp open H.323/Q.931?
So they were checking on bit-torrent traffic!
What is this ntop scanning used for?
polonus
Seems that it all has to do with my firestarter configuration.
polonus