republican-creole
Search:  

 
 
   All ForumsHot TopicsGallery






how-to block ads


 
Forums » Up and Running » Security » Security » weird Level3 IP space uploads
Search Topic:
Uniqs:
665
Share Topic:
RSS topic:
toggle:
flat / full
normal / watch
Posting:
Post a:
Post a:
Robert Soloway arrested, Spam continues to flood inboxs »
« Security Software Updates - 04 Jun 2007  
AuthorAll Replies


AlexNYC

join:2001-06-02
Edwards, CO


1 edit
 weird Level3 IP space uploads

There has been some weird activity coming out of my network and I can't figure out exactly what it is.

It's going out to various Ip's like
8.255.1.254, 8.255.65.254, 8.255.2.254, 8.255.52.254, etc. on port 80 ... but no actual (http: //) requests ...

Has anyone seen something like this? It has moved quite a bit of data in the last few days.

Here's what I googled, but it didn't help much ...
»bsn.borderware.com/index.php?fn=web


EGeezer
Summertime -
Premium
join:2002-08-04
Country!
·Callcentric
·RoadRunner Cable
·AT&T CallVantage

Not enough information to guess. You need to start at the source of the connection requests. Try running netstat -b on one of the sources to see what application is connecting. Also, running Packetyzer on them can show you what's in the packets being sent.
--
The society which scorns excellence in plumbing as a humble activity and tolerates shoddiness in philosophy because it is an exalted activity will have neither good plumbing nor good philosophy: neither its pipes or its theories will hold water.


rawwhide
Zer0
Premium
join:2000-09-03
Zero
clubs:
·AT&T DSL Service


3 edits
reply to AlexNYC
Hamachi?
Hamachi uses 5.x.x.x address range. I am not for sure about 8.x.x.x.
»www.impresariostudios.com/blog/i···hamachi/
»en.wikipedia.org/wiki/Hamachi
--
HUH!!! Blah Blah F'in Blah

TheWiseGuy
Dog And Butterfly
Premium,MVM
join:2002-07-04
Yonkers, NY

reply to AlexNYC
According to IDserve it seems to be a Footprint Server. I believe these were used in the past for Windows Auto-update. Not sure if they still are. You should try and determine what is sending the packets. See

»Security »What is using port XXX on my computer?

»Checking Automatic Update

»www.infoworld.com/cgi-bin/displa···.120.htm
--
Warning, If you post nonsense and use misinformation and are here to argue based on those methods, you will be put on ignore.


AlexNYC

join:2001-06-02
Edwards, CO


1 edit
said by TheWiseGuy See Profile :

I believe these were used in the past for Windows Auto-update.
You are absolutelly right ... apparently there is an auto-update that is stuck in a loop on quite a few computers!!! and not just on my network.

Thanks to everyone for your help! You hit the nail on the head.

Alex


EGeezer
Summertime -
Premium
join:2002-08-04
Country!
·Callcentric
·RoadRunner Cable
·AT&T CallVantage

Da Wiseguy strikes gold again! - There was a spate of performance problems recently with Microsoft and/or Windows update, and a couple of patches released for them. You may have that problem in PCs in your net.

See »Problem with Automatic Update since Tuesday

for more.
--
The society which scorns excellence in plumbing as a humble activity and tolerates shoddiness in philosophy because it is an exalted activity will have neither good plumbing nor good philosophy: neither its pipes or its theories will hold water.

TheWiseGuy
Dog And Butterfly
Premium,MVM
join:2002-07-04
Yonkers, NY
reply to AlexNYC
I'm glad I could help.

EG, good catch on the Auto-update thread, explains why it was happening.
Forums » Up and Running » Security » SecurityRobert Soloway arrested, Spam continues to flood inboxs »
« Security Software Updates - 04 Jun 2007  


Sunday, 05-Jul 07:39:04 Terms of Use | Privacy Policy | Hosting by www.nac.net - DSL,Hosting & Co-lo | feedback | contact
over 9.5 years online! © 1999-2009 dslreports.com.republican-creole
page compression OFF
Most commented news this week
· [146] Biden Unveils Broadband Stimulus
· [95] AT&T: 65,000 SMS Sent Per SECOND
· [91] Compuserve Classic Says Goodnight
· [83] Thomas To Appeal Huge RIAA Fines
· [77] Obama Using NSA, AT&T For New Snooping Project
· [73] Fourth Of July Open Thread
· [71] iPhone 3GS Already Jailbroken
· [67] Verizon: Cut Your Landline To Save Money
· [61] Cable Carriers Miss Tru2Way Deadline
· [60] The Pirate Bay Gets Sold
Most people now reading
· TekSavvy Down [TekSavvy]
· 6 firetrucks at 151 [TekSavvy]
· Symantec executive: dangerous to run free antivirus [Security]
· Best free email accounts? [General Questions]
· [ Professions] Northrend Herbalism and Mining Tracks [World of Warcraft]
· [ Classes] DK best DPS spec [World of Warcraft]
· show usage on invoice [TekSavvy]
· "RipIt", a Mac the Ripper alternative [All Things Macintosh]
· Uverse DSL With Static IPS WORST ISP EVER! [AT&T U-verse]
· How to create ISO with nero 8 [Software]