[x3d-public] more little elves
John Carlson
yottzumm at gmail.com
Sat Aug 28 17:40:11 PDT 2021
$ nslookup alpha.web3dconsortium.org
Server: 127.0.0.53
Address: 127.0.0.53#53
Non-authoritative answer:
alpha.web3dconsortium.org canonical name = web3dconsortium.org.
Name: web3dconsortium.org
Address: 67.225.191.65
$ find . -type f -print0| xargs -0 grep alpha.web3dconsortium.org
[no output]
$ find . -type f -print0| xargs -0 grep 67.225.191.65
[no output]
$ find . -type f -print0| xargs -0 grep web3dconsortium.org
[no output]
Yes, I know about tunneling backwards through HTTPS.
It's not funny or humorous. It appears that a Java program
(X3DJSAIL-based, potentially) is connecting to the web3dconsortium.org site
I will start auditing X3DJSAIL with similar searches.
John
On 8/28/21 7:28 PM, John Carlson wrote:
> Just noticed these connections. I'll look through the examples I'm
> running
>
> $ lsof -i
> COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME
> kdeconnec 1052534 coderextreme 13u IPv6 4444337 0t0 UDP *:1716
> kdeconnec 1052534 coderextreme 14u IPv6 4444338 0t0 TCP
> *:1716 (LISTEN)
> java 1492305 coderextreme 12u IPv6 12020289 0t0 TCP
> coderextreme-Kubuntu20
> :56884->alpha.web3dconsortium.org:https (ESTABLISHED)
> java 1493264 coderextreme 12u IPv6 12015610 0t0 TCP
> coderextreme-Kubuntu20
> :56886->alpha.web3dconsortium.org:https (SYN_SENT)
>
> I wasn't running a web browser that I know of. Also my Thunderbird
> icon got erased from my desktop?
>
> John
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://web3d.org/pipermail/x3d-public_web3d.org/attachments/20210828/549587f5/attachment-0001.html>
More information about the x3d-public
mailing list