[wplug] Strange IP Traffic

Ryan Brown wplug at tblive.com
Fri Aug 20 10:41:57 EDT 2004


Canonical: dialup-67.25.27.171.Dial1.Miami1.Level3.net Numerical:
67.25.27.171

 

Are you by chance talking to someone in Miami on an instant messenger
client?

 

  _____  

From: wplug [mailto:wplug at ramblernet.com] 
Sent: Friday, August 20, 2004 10:08 AM
To: wplug at wplug.org
Subject: [wplug] Strange IP Traffic

 

I've noticed some strange IP traffic from one of my W2K systems across the
firewall. 
It appears that packets are going from my Windows box to IP 67.25.27.171 on
incremental TCP ports (reporting open ports?). I've used the various virus &
Trojan scans that report nothing. I'm not positive but it looks like
services.exe may be sending the data or being used by another app.

Has anyone seen this before? 

Thanks 
Ken 


-- 
This message has been scanned for viruses and 
dangerous content by  <http://www.RamblerNet.com/> RamblerNet.com, and is 
believed to be clean. 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://penguin.wplug.org/pipermail/wplug/attachments/20040820/0514b790/attachment-0001.html


More information about the wplug mailing list