Security Incidents mailing list archives
Strange activity to a laptop?
From: LOS Ralph <rlos () ENVESTNET COM>
Date: Thu, 5 Oct 2000 10:23:25 -0500
Hello everyone.
(This is about as detailed as I can get without revealing too much)
We have recently had a laptop from a consultant come into our
network, no antivirus software, WinNT 4.0 WS, sp4! Immediately, my firewall
picks up traffic from the outbound NAT IP on their network towards this
machine. Traffic looks like the snippit below. At first I thought it might
be SNMP traffic somehow - but it's not. A detailed scan of the machine
reveals it was listening on port 1029 (couldn't find anything open on that
port). I closed and disabled service after service, until I was only left
with NT's necessary functionality - and still port 1029 was open and
listening. I'm totally at a loss. <snippit below>
Does ANYONE have any GOOD tools for WinNT/Win2k to find out what
port is bound to what executable/whatever?! Secondly, are there programs
that will allow you to effectively 'kill' services (GUI maybe?) that NT
wouldn't ordinarily allow you to see(if hidden?). Can someone provide me
with some GOOD tools to start snooping around this laptop with?! I haven't
been able to solve this problem - and it's generating TONS of traffic on our
network (inbound) that has to be stopped by our firewall.
I contacted the admin on the other side, he's clueless so I can't
even get a packet dump of machines sending to this particular one (since
they're behind a single IP address/NAT).
09/22/2000 15:59:42.064 - UDP packet dropped - Source:63.83.16.70,
161, Destination:63.140.xxx.xxx, 1181
09/22/2000 15:59:42.064 - UDP packet dropped - Source:63.83.16.70,
123, Destination:63.140.xxx.xxx, 1181
09/22/2000 15:59:42.080 - UDP packet dropped - Source:63.83.16.70,
124, Destination:63.140.xxx.xxx, 1181
09/22/2000 15:59:42.080 - UDP packet dropped - Source:63.83.16.70,
125, Destination:63.140.xxx.xxx, 1181
09/22/2000 15:59:42.080 - UDP packet dropped - Source:63.83.16.70,
138, Destination:63.140.xxx.xxx, 1181
09/22/2000 15:59:42.080 - UDP packet dropped - Source:63.83.16.70,
139, Destination:63.140.xxx.xxx, 1181
09/22/2000 15:59:42.080 - UDP packet dropped - Source:63.83.16.70,
140, Destination:63.140.xxx.xxx, 1181
09/22/2000 15:59:47.816 - UDP packet dropped - Source:63.83.16.70,
141, Destination:63.140.xxx.xxx, 1181
09/22/2000 16:00:11.128 - UDP packet dropped - Source:63.83.16.70,
161, Destination:63.140.xxx.xxx, 1202
09/22/2000 16:00:11.144 - UDP packet dropped - Source:63.83.16.70,
142, Destination:63.140.xxx.xxx, 1202
09/22/2000 16:00:11.144 - UDP packet dropped - Source:63.83.16.70,
143, Destination:63.140.xxx.xxx, 1202
09/22/2000 16:00:11.144 - UDP packet dropped - Source:63.83.16.70,
144, Destination:63.140.xxx.xxx, 1202
09/22/2000 16:00:11.144 - UDP packet dropped - Source:63.83.16.70,
145, Destination:63.140.xxx.xxx, 1202
09/22/2000 16:00:11.144 - UDP packet dropped - Source:63.83.16.70,
146, Destination:63.140.xxx.xxx, 1202
09/22/2000 16:00:11.160 - UDP packet dropped - Source:63.83.16.70,
147, Destination:63.140.xxx.xxx, 1202
09/22/2000 16:00:12.144 - UDP packet dropped - Source:63.83.16.70,
161, Destination:63.140.xxx.xxx, 1203
09/22/2000 16:00:12.144 - UDP packet dropped - Source:63.83.16.70,
148, Destination:63.140.xxx.xxx, 1203
09/22/2000 16:00:12.144 - UDP packet dropped - Source:63.83.16.70,
149, Destination:63.140.xxx.xxx, 1203
09/22/2000 16:00:12.144 - UDP packet dropped - Source:63.83.16.70,
150, Destination:63.140.xxx.xxx, 1203
09/22/2000 16:00:12.160 - UDP packet dropped - Source:63.83.16.70,
151, Destination:63.140.xxx.xxx, 1203
09/22/2000 16:00:12.160 - UDP packet dropped - Source:63.83.16.70,
152, Destination:63.140.xxx.xxx, 1203
09/22/2000 16:00:12.160 - UDP packet dropped - Source:63.83.16.70,
153, Destination:63.140.xxx.xxx, 1203
09/22/2000 16:00:17.896 - UDP packet dropped - Source:63.83.16.70,
154, Destination:63.140.xxx.xxx, 1203
09/22/2000 16:00:41.256 - UDP packet dropped - Source:63.83.16.70,
161, Destination:63.140.xxx.xxx, 1204
09/22/2000 16:00:41.256 - UDP packet dropped - Source:63.83.16.70,
155, Destination:63.140.xxx.xxx, 1204
09/22/2000 16:00:41.256 - UDP packet dropped - Source:63.83.16.70,
156, Destination:63.140.xxx.xxx, 1204
09/22/2000 16:00:41.256 - UDP packet dropped - Source:63.83.16.70,
157, Destination:63.140.xxx.xxx, 1204
09/22/2000 16:00:41.256 - UDP packet dropped - Source:63.83.16.70,
158, Destination:63.140.xxx.xxx, 1204
09/22/2000 16:00:41.256 - UDP packet dropped - Source:63.83.16.70,
159, Destination:63.140.xxx.xxx, 1204
09/22/2000 16:00:41.256 - UDP packet dropped - Source:63.83.16.70,
160, Destination:63.140.xxx.xxx, 1204
09/22/2000 16:00:42.240 - Possible Port Scan - Source:63.83.16.70,
161, Destination:63.140.xxx.xxx, 1205 - -
09/22/2000 16:00:42.240 - UDP packet dropped - Source:63.83.16.70,
162, Destination:63.140.xxx.xxx, 1205
09/22/2000 16:00:42.240 - UDP packet dropped - Source:63.83.16.70,
163, Destination:63.140.xxx.xxx, 1205
09/22/2000 16:00:42.256 - UDP packet dropped - Source:63.83.16.70,
164, Destination:63.140.xxx.xxx, 1205
09/22/2000 16:00:42.256 - UDP packet dropped - Source:63.83.16.70,
165, Destination:63.140.xxx.xxx, 1205
09/22/2000 16:00:42.256 - UDP packet dropped - Source:63.83.16.70,
166, Destination:63.140.xxx.xxx, 1205
09/22/2000 16:00:42.256 - UDP packet dropped - Source:63.83.16.70,
167, Destination:63.140.xxx.xxx, 1205
09/22/2000 16:00:48.016 - UDP packet dropped - Source:63.83.16.70,
168, Destination:63.140.xxx.xxx, 1205
09/22/2000 16:01:11.304 - UDP packet dropped - Source:63.83.16.70,
161, Destination:63.140.xxx.xxx, 1206
09/22/2000 16:01:11.304 - UDP packet dropped - Source:63.83.16.70,
169, Destination:63.140.xxx.xxx, 1206
09/22/2000 16:01:11.320 - UDP packet dropped - Source:63.83.16.70,
170, Destination:63.140.xxx.xxx, 1206
09/22/2000 16:01:11.320 - UDP packet dropped - Source:63.83.16.70,
171, Destination:63.140.xxx.xxx, 1206
09/22/2000 16:01:11.320 - UDP packet dropped - Source:63.83.16.70,
172, Destination:63.140.xxx.xxx, 1206
09/22/2000 16:01:11.320 - UDP packet dropped - Source:63.83.16.70,
173, Destination:63.140.xxx.xxx, 1206
09/22/2000 16:01:11.320 - UDP packet dropped - Source:63.83.16.70,
174, Destination:63.140.xxx.xxx, 1206
09/22/2000 16:01:12.304 - UDP packet dropped - Source:63.83.16.70,
161, Destination:63.140.xxx.xxx, 1207
09/22/2000 16:01:12.304 - UDP packet dropped - Source:63.83.16.70,
175, Destination:63.140.xxx.xxx, 1207
09/22/2000 16:01:12.320 - UDP packet dropped - Source:63.83.16.70,
176, Destination:63.140.xxx.xxx, 1207
09/22/2000 16:01:12.320 - UDP packet dropped - Source:63.83.16.70,
177, Destination:63.140.xxx.xxx, 1207
09/22/2000 16:01:12.320 - UDP packet dropped - Source:63.83.16.70,
178, Destination:63.140.xxx.xxx, 1207
09/22/2000 16:01:12.320 - UDP packet dropped - Source:63.83.16.70,
179, Destination:63.140.xxx.xxx, 1207
09/22/2000 16:01:12.336 - UDP packet dropped - Source:63.83.16.70,
180, Destination:63.140.xxx.xxx, 1207
09/22/2000 16:01:18.096 - UDP packet dropped - Source:63.83.16.70,
181, Destination:63.140.xxx.xxx, 1207
09/22/2000 16:01:41.416 - UDP packet dropped - Source:63.83.16.70,
161, Destination:63.140.xxx.xxx, 1208
09/22/2000 16:01:41.416 - UDP packet dropped - Source:63.83.16.70,
182, Destination:63.140.xxx.xxx, 1208
09/22/2000 16:01:41.416 - UDP packet dropped - Source:63.83.16.70,
183, Destination:63.140.xxx.xxx, 1208
09/22/2000 16:01:41.432 - UDP packet dropped - Source:63.83.16.70,
184, Destination:63.140.xxx.xxx, 1208
09/22/2000 16:01:41.432 - UDP packet dropped - Source:63.83.16.70,
185, Destination:63.140.xxx.xxx, 1208
09/22/2000 16:01:41.432 - UDP packet dropped - Source:63.83.16.70,
186, Destination:63.140.xxx.xxx, 1208
09/22/2000 16:01:41.432 - UDP packet dropped - Source:63.83.16.70,
187, Destination:63.140.xxx.xxx, 1208
09/22/2000 16:01:42.416 - UDP packet dropped - Source:63.83.16.70,
161, Destination:63.140.xxx.xxx, 1209
09/22/2000 16:01:42.416 - UDP packet dropped - Source:63.83.16.70,
188, Destination:63.140.xxx.xxx, 1209
09/22/2000 16:01:42.432 - UDP packet dropped - Source:63.83.16.70,
189, Destination:63.140.xxx.xxx, 1209
09/22/2000 16:01:42.432 - UDP packet dropped - Source:63.83.16.70,
190, Destination:63.140.xxx.xxx, 1209
09/22/2000 16:01:42.432 - UDP packet dropped - Source:63.83.16.70,
191, Destination:63.140.xxx.xxx, 1209
09/22/2000 16:01:42.432 - UDP packet dropped - Source:63.83.16.70,
192, Destination:63.140.xxx.xxx, 1209
09/22/2000 16:01:42.432 - UDP packet dropped - Source:63.83.16.70,
193, Destination:63.140.xxx.xxx, 1209
09/22/2000 16:01:48.192 - UDP packet dropped - Source:63.83.16.70,
194, Destination:63.140.xxx.xxx, 1209
09/22/2000 16:02:11.480 - Probable Port Scan - Source:63.83.16.70,
161, Destination:63.140.xxx.xxx, 1210 - -
09/22/2000 16:02:11.480 - UDP packet dropped - Source:63.83.16.70,
195, Destination:63.140.xxx.xxx, 1210
09/22/2000 16:02:11.496 - UDP packet dropped - Source:63.83.16.70,
196, Destination:63.140.xxx.xxx, 1210
09/22/2000 16:02:11.496 - UDP packet dropped - Source:63.83.16.70,
197, Destination:63.140.xxx.xxx, 1210
09/22/2000 16:02:11.496 - UDP packet dropped - Source:63.83.16.70,
198, Destination:63.140.xxx.xxx, 1210
09/22/2000 16:02:11.496 - UDP packet dropped - Source:63.83.16.70,
199, Destination:63.140.xxx.xxx, 1210
09/22/2000 16:02:11.496 - UDP packet dropped - Source:63.83.16.70,
200, Destination:63.140.xxx.xxx, 1210
09/22/2000 16:02:12.480 - UDP packet dropped - Source:63.83.16.70,
161, Destination:63.140.xxx.xxx, 1211
09/22/2000 16:02:12.480 - UDP packet dropped - Source:63.83.16.70,
201, Destination:63.140.xxx.xxx, 1211
09/22/2000 16:02:12.480 - UDP packet dropped - Source:63.83.16.70,
202, Destination:63.140.xxx.xxx, 1211
09/22/2000 16:02:12.496 - UDP packet dropped - Source:63.83.16.70,
203, Destination:63.140.xxx.xxx, 1211
09/22/2000 16:02:12.496 - UDP packet dropped - Source:63.83.16.70,
204, Destination:63.140.xxx.xxx, 1211
09/22/2000 16:02:12.496 - UDP packet dropped - Source:63.83.16.70,
205, Destination:63.140.xxx.xxx, 1211
09/22/2000 16:02:12.496 - UDP packet dropped - Source:63.83.16.70,
206, Destination:63.140.xxx.xxx, 1211
09/22/2000 16:02:18.272 - UDP packet dropped - Source:63.83.16.70,
207, Destination:63.140.xxx.xxx, 1211
09/22/2000 16:02:41.560 - UDP packet dropped - Source:63.83.16.70,
161, Destination:63.140.xxx.xxx, 1212
09/22/2000 16:02:41.560 - UDP packet dropped - Source:63.83.16.70,
208, Destination:63.140.xxx.xxx, 1212
09/22/2000 16:02:41.560 - UDP packet dropped - Source:63.83.16.70,
209, Destination:63.140.xxx.xxx, 1212
09/22/2000 16:02:41.560 - UDP packet dropped - Source:63.83.16.70,
210, Destination:63.140.xxx.xxx, 1212
09/22/2000 16:02:41.576 - UDP packet dropped - Source:63.83.16.70,
211, Destination:63.140.xxx.xxx, 1212
09/22/2000 16:02:41.576 - UDP packet dropped - Source:63.83.16.70,
212, Destination:63.140.xxx.xxx, 1212
09/22/2000 16:02:41.576 - UDP packet dropped - Source:63.83.16.70,
213, Destination:63.140.xxx.xxx, 1212
09/22/2000 16:02:42.560 - UDP packet dropped - Source:63.83.16.70,
161, Destination:63.140.xxx.xxx, 1213
09/22/2000 16:02:42.560 - UDP packet dropped - Source:63.83.16.70,
214, Destination:63.140.xxx.xxx, 1213
09/22/2000 16:02:42.560 - UDP packet dropped - Source:63.83.16.70,
215, Destination:63.140.xxx.xxx, 1213
09/22/2000 16:02:42.576 - UDP packet dropped - Source:63.83.16.70,
216, Destination:63.140.xxx.xxx, 1213
09/22/2000 16:02:42.576 - UDP packet dropped - Source:63.83.16.70,
217, Destination:63.140.xxx.xxx, 1213
09/22/2000 16:02:42.576 - UDP packet dropped - Source:63.83.16.70,
218, Destination:63.140.xxx.xxx, 1213
09/22/2000 16:02:42.576 - UDP packet dropped - Source:63.83.16.70,
219, Destination:63.140.xxx.xxx, 1213
09/22/2000 16:02:48.336 - UDP packet dropped - Source:63.83.16.70,
220, Destination:63.140.xxx.xxx, 1213
09/22/2000 16:03:11.640 - UDP packet dropped - Source:63.83.16.70,
161, Destination:63.140.xxx.xxx, 1214
09/22/2000 16:03:11.640 - UDP packet dropped - Source:63.83.16.70,
221, Destination:63.140.xxx.xxx, 1214
09/22/2000 16:03:11.656 - UDP packet dropped - Source:63.83.16.70,
222, Destination:63.140.xxx.xxx, 1214
09/22/2000 16:03:11.656 - UDP packet dropped - Source:63.83.16.70,
223, Destination:63.140.xxx.xxx, 1214
09/22/2000 16:03:11.656 - UDP packet dropped - Source:63.83.16.70,
224, Destination:63.140.xxx.xxx, 1214
09/22/2000 16:03:11.672 - UDP packet dropped - Source:63.83.16.70,
225, Destination:63.140.xxx.xxx, 1214
09/22/2000 16:03:11.672 - UDP packet dropped - Source:63.83.16.70,
226, Destination:63.140.xxx.xxx, 1214
09/22/2000 16:03:12.704 - UDP packet dropped - Source:63.83.16.70,
161, Destination:63.140.xxx.xxx, 1215
09/22/2000 16:03:12.720 - UDP packet dropped - Source:63.83.16.70,
227, Destination:63.140.xxx.xxx, 1215
09/22/2000 16:03:12.720 - UDP packet dropped - Source:63.83.16.70,
228, Destination:63.140.xxx.xxx, 1215
09/22/2000 16:03:12.720 - UDP packet dropped - Source:63.83.16.70,
229, Destination:63.140.xxx.xxx, 1215
09/22/2000 16:03:12.720 - UDP packet dropped - Source:63.83.16.70,
230, Destination:63.140.xxx.xxx, 1215
09/22/2000 16:03:12.720 - UDP packet dropped - Source:63.83.16.70,
231, Destination:63.140.xxx.xxx, 1215
09/22/2000 16:03:12.720 - UDP packet dropped - Source:63.83.16.70,
232, Destination:63.140.xxx.xxx, 1215
09/22/2000 16:03:18.496 - UDP packet dropped - Source:63.83.16.70,
233, Destination:63.140.xxx.xxx, 1215
09/22/2000 16:03:44.848 - UDP packet dropped - Source:63.83.16.70,
161, Destination:63.140.xxx.xxx, 1216
09/22/2000 16:03:44.848 - UDP packet dropped - Source:63.83.16.70,
234, Destination:63.140.xxx.xxx, 1216
09/22/2000 16:03:44.848 - UDP packet dropped - Source:63.83.16.70,
235, Destination:63.140.xxx.xxx, 1216
09/22/2000 16:03:44.864 - UDP packet dropped - Source:63.83.16.70,
236, Destination:63.140.xxx.xxx, 1216
09/22/2000 16:03:44.864 - UDP packet dropped - Source:63.83.16.70,
237, Destination:63.140.xxx.xxx, 1216
09/22/2000 16:03:44.864 - UDP packet dropped - Source:63.83.16.70,
238, Destination:63.140.xxx.xxx, 1216
09/22/2000 16:03:44.864 - UDP packet dropped - Source:63.83.16.70,
239, Destination:63.140.xxx.xxx, 1216
09/22/2000 16:03:45.848 - UDP packet dropped - Source:63.83.16.70,
161, Destination:63.140.xxx.xxx, 1217
09/22/2000 16:03:45.848 - UDP packet dropped - Source:63.83.16.70,
240, Destination:63.140.xxx.xxx, 1217
09/22/2000 16:03:45.848 - UDP packet dropped - Source:63.83.16.70,
241, Destination:63.140.xxx.xxx, 1217
09/22/2000 16:03:45.864 - UDP packet dropped - Source:63.83.16.70,
242, Destination:63.140.xxx.xxx, 1217
09/22/2000 16:03:45.864 - UDP packet dropped - Source:63.83.16.70,
243, Destination:63.140.xxx.xxx, 1217
09/22/2000 16:03:45.864 - UDP packet dropped - Source:63.83.16.70,
244, Destination:63.140.xxx.xxx, 1217
09/22/2000 16:03:45.864 - UDP packet dropped - Source:63.83.16.70,
245, Destination:63.140.xxx.xxx, 1217
09/22/2000 16:03:51.656 - UDP packet dropped - Source:63.83.16.70,
246, Destination:63.140.xxx.xxx, 1217
09/22/2000 16:04:14.928 - UDP packet dropped - Source:63.83.16.70,
161, Destination:63.140.xxx.xxx, 1218
09/22/2000 16:04:14.944 - UDP packet dropped - Source:63.83.16.70,
248, Destination:63.140.xxx.xxx, 1218
09/22/2000 16:04:14.944 - UDP packet dropped - Source:63.83.16.70,
249, Destination:63.140.xxx.xxx, 1218
09/22/2000 16:04:14.944 - UDP packet dropped - Source:63.83.16.70,
250, Destination:63.140.xxx.xxx, 1218
09/22/2000 16:04:14.944 - UDP packet dropped - Source:63.83.16.70,
251, Destination:63.140.xxx.xxx, 1218
09/22/2000 16:04:15.000 - UDP packet dropped - Source:63.83.16.70,
252, Destination:63.140.xxx.xxx, 1218
09/22/2000 16:04:15.000 - UDP packet dropped - Source:63.83.16.70,
253, Destination:63.140.xxx.xxx, 1218
09/22/2000 16:04:15.944 - Possible Port Scan - Source:63.83.16.70,
161, Destination:63.140.xxx.xxx, 1219
09/22/2000 16:04:15.944 - UDP packet dropped - Source:63.83.16.70,
254, Destination:63.140.xxx.xxx, 1219
09/22/2000 16:04:15.944 - UDP packet dropped - Source:63.83.16.70,
255, Destination:63.140.xxx.xxx, 1219
09/22/2000 16:04:15.944 - UDP packet dropped - Source:63.83.16.70,
256, Destination:63.140.xxx.xxx, 1219
09/22/2000 16:04:15.944 - UDP packet dropped - Source:63.83.16.70,
257, Destination:63.140.xxx.xxx, 1219
09/22/2000 16:04:16.000 - UDP packet dropped - Source:63.83.16.70,
258, Destination:63.140.xxx.xxx, 1219
09/22/2000 16:04:16.000 - UDP packet dropped - Source:63.83.16.70,
259, Destination:63.140.xxx.xxx, 1219
09/22/2000 16:04:21.720 - UDP packet dropped - Source:63.83.16.70,
260, Destination:63.140.xxx.xxx, 1219
09/22/2000 16:04:45.080 - UDP packet dropped - Source:63.83.16.70,
161, Destination:63.140.xxx.xxx, 1220
09/22/2000 16:04:45.080 - UDP packet dropped - Source:63.83.16.70,
261, Destination:63.140.xxx.xxx, 1220
09/22/2000 16:04:45.080 - UDP packet dropped - Source:63.83.16.70,
262, Destination:63.140.xxx.xxx, 1220
09/22/2000 16:04:45.080 - UDP packet dropped - Source:63.83.16.70,
263, Destination:63.140.xxx.xxx, 1220
09/22/2000 16:04:45.096 - UDP packet dropped - Source:63.83.16.70,
264, Destination:63.140.xxx.xxx, 1220
09/22/2000 16:04:45.096 - UDP packet dropped - Source:63.83.16.70,
265, Destination:63.140.xxx.xxx, 1220
09/22/2000 16:04:45.096 - UDP packet dropped - Source:63.83.16.70,
266, Destination:63.140.xxx.xxx, 1220
09/22/2000 16:04:47.656 - UDP packet dropped - Source:63.83.16.70,
161, Destination:63.140.xxx.xxx, 1221
09/22/2000 16:04:47.656 - UDP packet dropped - Source:63.83.16.70,
267, Destination:63.140.xxx.xxx, 1221
09/22/2000 16:04:47.672 - UDP packet dropped - Source:63.83.16.70,
268, Destination:63.140.xxx.xxx, 1221
09/22/2000 16:04:47.672 - UDP packet dropped - Source:63.83.16.70,
269, Destination:63.140.xxx.xxx, 1221
09/22/2000 16:04:47.672 - UDP packet dropped - Source:63.83.16.70,
270, Destination:63.140.xxx.xxx, 1221
09/22/2000 16:04:47.672 - UDP packet dropped - Source:63.83.16.70,
271, Destination:63.140.xxx.xxx, 1221
09/22/2000 16:04:47.672 - UDP packet dropped - Source:63.83.16.70,
272, Destination:63.140.xxx.xxx, 1221
09/22/2000 16:04:51.816 - UDP packet dropped - Source:63.83.16.70,
273, Destination:63.140.xxx.xxx, 1220
09/22/2000 16:04:58.608 - UDP packet dropped - Source:63.83.16.70,
274, Destination:63.140.xxx.xxx, 1221
09/22/2000 16:05:16.736 - UDP packet dropped - Source:63.83.16.70,
161, Destination:63.140.xxx.xxx, 1222
09/22/2000 16:05:16.752 - UDP packet dropped - Source:63.83.16.70,
275, Destination:63.140.xxx.xxx, 1222
09/22/2000 16:05:16.752 - UDP packet dropped - Source:63.83.16.70,
276, Destination:63.140.xxx.xxx, 1222
09/22/2000 16:05:16.752 - UDP packet dropped - Source:63.83.16.70,
277, Destination:63.140.xxx.xxx, 1222
09/22/2000 16:05:16.752 - UDP packet dropped - Source:63.83.16.70,
278, Destination:63.140.xxx.xxx, 1222
09/22/2000 16:05:16.752 - UDP packet dropped - Source:63.83.16.70,
279, Destination:63.140.xxx.xxx, 1222
09/22/2000 16:05:16.768 - UDP packet dropped - Source:63.83.16.70,
280, Destination:63.140.xxx.xxx, 1222
09/22/2000 16:05:17.752 - UDP packet dropped - Source:63.83.16.70,
161, Destination:63.140.xxx.xxx, 1223
09/22/2000 16:05:17.752 - UDP packet dropped - Source:63.83.16.70,
281, Destination:63.140.xxx.xxx, 1223
09/22/2000 16:05:17.752 - UDP packet dropped - Source:63.83.16.70,
282, Destination:63.140.xxx.xxx, 1223
09/22/2000 16:05:17.768 - UDP packet dropped - Source:63.83.16.70,
283, Destination:63.140.xxx.xxx, 1223
09/22/2000 16:05:17.768 - UDP packet dropped - Source:63.83.16.70,
284, Destination:63.140.xxx.xxx, 1223
09/22/2000 16:05:17.768 - UDP packet dropped - Source:63.83.16.70,
285, Destination:63.140.xxx.xxx, 1223
09/22/2000 16:05:17.784 - UDP packet dropped - Source:63.83.16.70,
286, Destination:63.140.xxx.xxx, 1223
09/22/2000 16:05:23.528 - UDP packet dropped - Source:63.83.16.70,
287, Destination:63.140.xxx.xxx, 1223
09/22/2000 16:05:46.832 - UDP packet dropped - Source:63.83.16.70,
161, Destination:63.140.xxx.xxx, 1224
09/22/2000 16:05:46.832 - UDP packet dropped - Source:63.83.16.70,
288, Destination:63.140.xxx.xxx, 1224
09/22/2000 16:05:46.832 - UDP packet dropped - Source:63.83.16.70,
289, Destination:63.140.xxx.xxx, 1224
09/22/2000 16:05:46.832 - UDP packet dropped - Source:63.83.16.70,
290, Destination:63.140.xxx.xxx, 1224
09/22/2000 16:05:46.832 - UDP packet dropped - Source:63.83.16.70,
291, Destination:63.140.xxx.xxx, 1224
09/22/2000 16:05:46.832 - UDP packet dropped - Source:63.83.16.70,
292, Destination:63.140.xxx.xxx, 1224
09/22/2000 16:05:46.848 - UDP packet dropped - Source:63.83.16.70,
293, Destination:63.140.xxx.xxx, 1224
09/22/2000 16:05:47.832 - UDP packet dropped - Source:63.83.16.70,
161, Destination:63.140.xxx.xxx, 1225
09/22/2000 16:05:47.832 - UDP packet dropped - Source:63.83.16.70,
294, Destination:63.140.xxx.xxx, 1225
09/22/2000 16:05:47.832 - UDP packet dropped - Source:63.83.16.70,
295, Destination:63.140.xxx.xxx, 1225
09/22/2000 16:05:47.832 - UDP packet dropped - Source:63.83.16.70,
296, Destination:63.140.xxx.xxx, 1225
09/22/2000 16:05:47.832 - UDP packet dropped - Source:63.83.16.70,
297, Destination:63.140.xxx.xxx, 1225
09/22/2000 16:05:47.848 - UDP packet dropped - Source:63.83.16.70,
298, Destination:63.140.xxx.xxx, 1225
09/22/2000 16:05:47.848 - UDP packet dropped - Source:63.83.16.70,
299, Destination:63.140.xxx.xxx, 1225
09/22/2000 16:05:53.608 - UDP packet dropped - Source:63.83.16.70,
300, Destination:63.140.xxx.xxx, 1225
09/22/2000 16:06:17.160 - UDP packet dropped - Source:63.83.16.70,
161, Destination:63.140.xxx.xxx, 1226
09/22/2000 16:06:17.160 - UDP packet dropped - Source:63.83.16.70,
302, Destination:63.140.xxx.xxx, 1226
09/22/2000 16:06:17.160 - UDP packet dropped - Source:63.83.16.70,
303, Destination:63.140.xxx.xxx, 1226
09/22/2000 16:06:17.160 - UDP packet dropped - Source:63.83.16.70,
304, Destination:63.140.xxx.xxx, 1226
09/22/2000 16:06:17.176 - UDP packet dropped - Source:63.83.16.70,
305, Destination:63.140.xxx.xxx, 1226
09/22/2000 16:06:17.176 - UDP packet dropped - Source:63.83.16.70,
306, Destination:63.140.xxx.xxx, 1226
09/22/2000 16:06:17.176 - UDP packet dropped - Source:63.83.16.70,
307, Destination:63.140.xxx.xxx, 1226
09/22/2000 16:06:18.160 - UDP packet dropped - Source:63.83.16.70,
308, Destination:63.140.xxx.xxx, 1227
09/22/2000 16:06:18.160 - UDP packet dropped - Source:63.83.16.70,
161, Destination:63.140.xxx.xxx, 1227
09/22/2000 16:06:18.160 - UDP packet dropped - Source:63.83.16.70,
309, Destination:63.140.xxx.xxx, 1227
09/22/2000 16:06:18.176 - UDP packet dropped - Source:63.83.16.70,
310, Destination:63.140.xxx.xxx, 1227
09/22/2000 16:06:18.176 - UDP packet dropped - Source:63.83.16.70,
311,
Destination:63.140.xxx.xxx, 1227
09/22/2000 16:06:18.176 - UDP packet dropped - Source:63.83.16.70,
312, Destination:63.140.xxx.xxx, 1227
09/22/2000 16:06:18.176 - UDP packet dropped - Source:63.83.16.70,
313, Destination:63.140.xxx.xxx, 1227
Ralph M. Los
Internet Systems & Security Admin. (312) 827-3945 (direct)
EnvestNet Advisory Corp. (312) 296-9003 (wireless)
rlos () envestnet com
Current thread:
- Strange activity to a laptop? LOS Ralph (Oct 05)
- Re: Strange activity to a laptop? Stefan Wagner (Oct 06)
- <Possible follow-ups>
- Re: Strange activity to a laptop? Johnson, Greg (Oct 06)
- Re: Strange activity to a laptop? Lastname, Firstname (Oct 06)
- Re: Strange activity to a laptop? Frank Knobbe (Oct 08)
- Re: Strange activity to a laptop? Jay Random (Oct 11)
- Re: Strange activity to a laptop? Stephen Quigg (Oct 12)