Re: weird Level3 IP space uploads in Security http://www.dslreports.com/forum/r18446741 en Sat, 28 Nov 2009 09:41:32 EDT Sat, 28 Nov 2009 09:41:32 EDT Re: weird Level3 IP space uploads http://www.dslreports.com/forum/remark,18451618 TheWiseGuy : I'm glad I could help.

EG, good catch on the Auto-update thread, explains why it was happening.]]> http://www.dslreports.com/forum/remark,18451618 Tue, 05 Jun 2007 07:55:21 EDT Re: weird Level3 IP space uploads http://www.dslreports.com/forum/remark,18447013 EGeezer : Da Wiseguy strikes gold again! :D - There was a spate of performance problems recently with Microsoft and/or Windows update, and a couple of patches released for them. You may have that problem in PCs in your net.

See »Problem with Automatic Update since Tuesday

for more.
--
The society which scorns excellence in plumbing as a humble activity and tolerates shoddiness in philosophy because it is an exalted activity will have neither good plumbing nor good philosophy: neither its pipes or its theories will hold water.
]]> http://www.dslreports.com/forum/remark,18447013 Mon, 04 Jun 2007 13:40:22 EDT Re: weird Level3 IP space uploads http://www.dslreports.com/forum/remark,18446865 AlexNYC :
said by TheWiseGuy See Profile :

I believe these were used in the past for Windows Auto-update.
You are absolutelly right ... apparently there is an auto-update that is stuck in a loop on quite a few computers!!! and not just on my network.

Thanks to everyone for your help! You hit the nail on the head.

Alex]]> http://www.dslreports.com/forum/remark,18446865 Mon, 04 Jun 2007 13:17:36 EDT Re: weird Level3 IP space uploads http://www.dslreports.com/forum/remark,18446755 TheWiseGuy : According to IDserve it seems to be a Footprint Server. I believe these were used in the past for Windows Auto-update. Not sure if they still are. You should try and determine what is sending the packets. See

»Security »What is using port XXX on my computer?

»Checking Automatic Update

»www.infoworld.com/cgi-bin/displa···.120.htm
--
Warning, If you post nonsense and use misinformation and are here to argue based on those methods, you will be put on ignore.]]> http://www.dslreports.com/forum/remark,18446755 Mon, 04 Jun 2007 13:00:58 EDT Re: weird Level3 IP space uploads http://www.dslreports.com/forum/remark,18446741 rawwhide : Hamachi?
Hamachi uses 5.x.x.x address range. I am not for sure about 8.x.x.x.
»www.impresariostudios.com/blog/i···hamachi/
»en.wikipedia.org/wiki/Hamachi
--
HUH!!! Blah Blah F'in Blah]]> http://www.dslreports.com/forum/remark,18446741 Mon, 04 Jun 2007 12:58:07 EDT Re: weird Level3 IP space uploads http://www.dslreports.com/forum/remark,18446737 EGeezer : Not enough information to guess. You need to start at the source of the connection requests. Try running netstat -b on one of the sources to see what application is connecting. Also, running Packetyzer on them can show you what's in the packets being sent.
--
The society which scorns excellence in plumbing as a humble activity and tolerates shoddiness in philosophy because it is an exalted activity will have neither good plumbing nor good philosophy: neither its pipes or its theories will hold water.
]]> http://www.dslreports.com/forum/remark,18446737 Mon, 04 Jun 2007 12:57:45 EDT weird Level3 IP space uploads http://www.dslreports.com/forum/remark,18446260 AlexNYC : There has been some weird activity coming out of my network and I can't figure out exactly what it is.

It's going out to various Ip's like
8.255.1.254, 8.255.65.254, 8.255.2.254, 8.255.52.254, etc. on port 80 ... but no actual (http: //) requests ... :mad:

Has anyone seen something like this? It has moved quite a bit of data in the last few days.

Here's what I googled, but it didn't help much ...
»bsn.borderware.com/index.php?fn=web]]> http://www.dslreports.com/forum/remark,18446260 Mon, 04 Jun 2007 11:15:33 EDT