~BD~ wrote:

>>> If you do an rdns on 150.70.75.28, you'll see that it points to
>>> wtp-g3-maya2.sjdc.
>>
>>> So my question is - what the heck is the .sjdc TLD?
>>
>> So it's just a bull**** rDNS record.
>>
>> It looks like it's located in Japan.
>>
>> Traceroute to 150.70.75.28 gives this IP as the last hop:
>>
>> 216.99.132.117
>>
>> Guess who owns that ip. Yup - Trend Micro.
>>
>> For some reason, Trend Micro likes to operate their web-proxy
>> security products (if that's what this is) on servers located
>> in Japan...

> IIRC, Trend is a Japanese company. Perhaps *that* is the reason! ;-)
>
> This might help! http://en.wikipedia.org/wiki/Trend_Micro

Huh.

And I thought Trend Micro was a US company.

It looks like I'm seeing the behavior of this product:

http://www.scmagazine.com/trend-micr...y/review/2672/

=======
1/7/2009

The InterScan Web Security Virtual Appliance (IWSVA) is a gateway
solution providing protection for web-based threats via HTTP and FTP.
The product is delivered as a CD, but installs as a purpose built
virtual appliance.

Price: $13,450 (1,000 users)
======

From your wikipedia entry:

======
Website administrators however report abusive behavior from the Trend
Micro Network that is displaying malware characteristics. Reported
behavior[7] indicates security risks for users of Trend Micro Internet
Security who access internet banking facilities.
======