Search:  

 
 
   All ForumsHot TopicsGallery






how-to block ads


 
Forums » Up and Running » Security » Security » weird Level3 IP space uploads
Search Topic:
Uniqs:
705
Share Topic:
RSS topic:
toggle:
flat / full
normal / watch
Posting:
Post a:
Post a:
Robert Soloway arrested, Spam continues to flood inboxs »
« Security Software Updates - 04 Jun 2007  
AuthorAll Replies


AlexNYC

join:2001-06-02
Edwards, CO


1 edit
 weird Level3 IP space uploads

There has been some weird activity coming out of my network and I can't figure out exactly what it is.

It's going out to various Ip's like
8.255.1.254, 8.255.65.254, 8.255.2.254, 8.255.52.254, etc. on port 80 ... but no actual (http: //) requests ...

Has anyone seen something like this? It has moved quite a bit of data in the last few days.

Here's what I googled, but it didn't help much ...
»bsn.borderware.com/index.php?fn=web


EGeezer
Summertime -
Premium
join:2002-08-04
Country!
·Callcentric
·RoadRunner Cable
·AT&T CallVantage

Not enough information to guess. You need to start at the source of the connection requests. Try running netstat -b on one of the sources to see what application is connecting. Also, running Packetyzer on them can show you what's in the packets being sent.
--
The society which scorns excellence in plumbing as a humble activity and tolerates shoddiness in philosophy because it is an exalted activity will have neither good plumbing nor good philosophy: neither its pipes or its theories will hold water.


rawwhide
Zer0
Premium
join:2000-09-03
Zero
clubs:
·AT&T DSL Service


3 edits
reply to AlexNYC
Hamachi?
Hamachi uses 5.x.x.x address range. I am not for sure about 8.x.x.x.
»www.impresariostudios.com/blog/i···hamachi/
»en.wikipedia.org/wiki/Hamachi
--
HUH!!! Blah Blah F'in Blah

TheWiseGuy
Dog And Butterfly
Premium,MVM
join:2002-07-04
Yonkers, NY

reply to AlexNYC
According to IDserve it seems to be a Footprint Server. I believe these were used in the past for Windows Auto-update. Not sure if they still are. You should try and determine what is sending the packets. See

»Security »What is using port XXX on my computer?

»Checking Automatic Update

»www.infoworld.com/cgi-bin/displa···.120.htm
--
Warning, If you post nonsense and use misinformation and are here to argue based on those methods, you will be put on ignore.


AlexNYC

join:2001-06-02
Edwards, CO


1 edit
said by TheWiseGuy See Profile :

I believe these were used in the past for Windows Auto-update.
You are absolutelly right ... apparently there is an auto-update that is stuck in a loop on quite a few computers!!! and not just on my network.

Thanks to everyone for your help! You hit the nail on the head.

Alex


EGeezer
Summertime -
Premium
join:2002-08-04
Country!
·Callcentric
·RoadRunner Cable
·AT&T CallVantage

Da Wiseguy strikes gold again! - There was a spate of performance problems recently with Microsoft and/or Windows update, and a couple of patches released for them. You may have that problem in PCs in your net.

See »Problem with Automatic Update since Tuesday

for more.
--
The society which scorns excellence in plumbing as a humble activity and tolerates shoddiness in philosophy because it is an exalted activity will have neither good plumbing nor good philosophy: neither its pipes or its theories will hold water.

TheWiseGuy
Dog And Butterfly
Premium,MVM
join:2002-07-04
Yonkers, NY
reply to AlexNYC
I'm glad I could help.

EG, good catch on the Auto-update thread, explains why it was happening.
Forums » Up and Running » Security » SecurityRobert Soloway arrested, Spam continues to flood inboxs »
« Security Software Updates - 04 Jun 2007  


Tuesday, 10-Nov 02:18:07 Terms of Use | Privacy Policy | Hosting by www.nac.net - DSL,Hosting & Co-lo | feedback | contact
over 10 years online! © 1999-2009 dslreports.com.
page compression OFF
Most commented news this week
· [82] VoIP Over 3G Still Not Working For iPhone
· [80] Verizon Keeps Swinging At AT&T
· [33] Bill Would Force ISPs To Block Financial Scams
· [21] Mediacom Hints At 50, 100 Mbps Speeds
· [14] Clearwire To Get Another $1.5 Billion
· [11] Monday Morning Links
· [9] 15 States Have Now Gotten Broadband Mapping Money
· [5] AT&T Launching New 7.2 Mbps 3G Modem
Most people now reading
· Framed for child porn 151; by a PC virus [Security]
· Know when to run! [Home Repair & Improvement]
· 3.x Feral Druid - Bear Tanking Guide [World of Warcraft]
· Windows 7 boot manager editing questions [Microsoft Help]
· [SU] Apple Releases Mac OS X 10.6.2 [All Things Macintosh]
· My cat is reluctant to exercise. [General Questions]
· 60 Minutes piece on cyber security last night [Security]
· How in the world am I going to get into college? [General Questions]
· MI424WR-GEN2 Rev E Configuration Thread [Verizon Fiber Optics]
· [WIN7] Which Services in Win 7 Have You Turned Off? [Microsoft Help]