analyse the logs (Reliance India Ltd)

From: Madhur Ahuja (ef_at_df.com)
Date: 09/29/04


Date: Wed, 29 Sep 2004 14:13:50 +0530

Hello

Continuing the thread
<2rqur7F1dfacvU2@uni-berlin.de>
Subject : ISP keeps connecting to my port 445

I enabled File and Printer Sharing and captured the connection using
Ethereal for about 10 minutes.
My IP was 220.224.23.145 while the connecting PC was 220.224.2.117

The log is in tcpdump,ethereal format. I tried to analyze it and found that
the PC tried to
connect my ipc$ share. May be someone else can give a clue what's happening.

The log is at http://madhur.netfirms.com/capture.log

--
Madhur Ahuja [madhur<underscore>ahuja<at>yahoo<dot>com]
Homepage
http://madhur.netfirms.com


Relevant Pages

  • RE: I think Ive been hacked...please help!
    ... > connecting within seconds of boot. ... port scanning the machine from the outside ... experience performing incident response activities, ... one will run netstat and see something listening on ...
    (Incidents)
  • Re: Remote Desktop problems
    ... The> first thing you have to do is setup the router to port forward. ... In the> routers config page you should see settings to> setup port forwarding. ... Once the logon box comes up, you put in a user name>>> that's on the computer your connecting to and its password. ... >>>> laptop on my home network. ...
    (microsoft.public.windowsxp.hardware)
  • Re: Remote Desktop problems
    ... The> first thing you have to do is setup the router to port forward. ... In the> routers config page you should see settings to> setup port forwarding. ... Once the logon box comes up, you put in a user name>>> that's on the computer your connecting to and its password. ... >>>> laptop on my home network. ...
    (microsoft.public.windowsxp.general)
  • Re: Remote Desktop problems
    ... The> first thing you have to do is setup the router to port forward. ... In the> routers config page you should see settings to> setup port forwarding. ... Once the logon box comes up, you put in a user name>>> that's on the computer your connecting to and its password. ... >>>> laptop on my home network. ...
    (microsoft.public.windowsxp.work_remotely)
  • Problem Restated: OPA0 on DS10L
    ... connecting to the OPA0 port. ... normal was TEST 2, connecting from an XP1000. ... NORNS> set host/dte opa0 ...
    (comp.os.vms)