<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<p>Time to call a hosting company and complain?<img
src="cid:part1.E4E36CEE.395D13D3@gmail.com" alt="" width="1012"
height="730"></p>
<div class="moz-cite-prefix">On 8/28/21 7:40 PM, John Carlson wrote:<br>
</div>
<blockquote type="cite"
cite="mid:bdb4ecf3-52ed-8645-a79c-0cc7987de4e1@gmail.com">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<p>$ nslookup alpha.web3dconsortium.org</p>
<p>Server: 127.0.0.53<br>
Address: 127.0.0.53#53<br>
<br>
Non-authoritative answer:<br>
alpha.web3dconsortium.org canonical name =
web3dconsortium.org.<br>
Name: web3dconsortium.org<br>
Address: 67.225.191.65<br>
$ find . -type f -print0| xargs -0 grep
alpha.web3dconsortium.org</p>
<p>[no output]</p>
<p>$ find . -type f -print0| xargs -0 grep 67.225.191.65</p>
<p>[no output]</p>
<p>$ find . -type f -print0| xargs -0 grep web3dconsortium.org</p>
<p>[no output]</p>
<p>Yes, I know about tunneling backwards through HTTPS.</p>
<p>It's not funny or humorous. It appears that a Java program
(X3DJSAIL-based, potentially) is connecting to the
web3dconsortium.org site</p>
<p>I will start auditing X3DJSAIL with similar searches.<br>
</p>
<p>John<br>
</p>
<div class="moz-cite-prefix">On 8/28/21 7:28 PM, John Carlson
wrote:<br>
</div>
<blockquote type="cite"
cite="mid:CAGC3UEn30oRHY0U1S9wwLfocEXK+aDXGPOWCVx3OaY4-TYGq0g@mail.gmail.com">
<meta http-equiv="content-type" content="text/html;
charset=UTF-8">
<div dir="ltr">Just noticed these connections. I'll look
through the examples I'm running
<div><br>
</div>
<div><span style="font-family:monospace"><span
style="color:rgb(0,0,0)">$ lsof -i </span><br>
COMMAND PID USER FD TYPE DEVICE
SIZE/OFF NODE NAME <br>
kdeconnec 1052534 coderextreme 13u IPv6 4444337
0t0 UDP *:1716 <br>
kdeconnec 1052534 coderextreme 14u IPv6 4444338
0t0 TCP *:1716 (LISTEN) <br>
java 1492305 coderextreme 12u IPv6 12020289
0t0 TCP coderextreme-Kubuntu20<br>
:56884->alpha.web3dconsortium.org:https (ESTABLISHED) <br>
java 1493264 coderextreme 12u IPv6 12015610
0t0 TCP coderextreme-Kubuntu20<br>
:56886->alpha.web3dconsortium.org:https (SYN_SENT)<br>
</span></div>
<div><span style="font-family:monospace"><br>
</span></div>
<div><span style="font-family:monospace">I wasn't running a
web browser that I know of. Also my Thunderbird icon got
erased from my desktop?</span></div>
<div><span style="font-family:monospace"><br>
</span></div>
<div><font face="monospace">John</font></div>
</div>
</blockquote>
</blockquote>
</body>
</html>