Recent content by L0to

I ran "netstat -ano" and looked up some random established connections running on ports 80 and 443. Most came back as Microsoft or Cloudflare but some show up as ips from European countries with not much info other than the isp NTT. Wondering if this is normal or rat like activity. If anyone...

Thanks for the quick reply, forgot this was due to the vpn im using. The alerts do pop up even when I'm not using vpn so I'll update with a screenshot next time I get and alert not using the vpn.

I've had xarp installed for a while and alerts come up at least once a day. "StaticPreserveFitler: packet would overwrite a static entry for the ip address xx.xx.255.255. mac address would be changed from ff-ff-ff-ff-ff to xx-ff-xf-xx-xx." Not sure if this is sufficient info to go off of but...

Thanks a bunch

Ran the arp -a command and was wondering what all these internet addresses are. The x's are what appear to be my gateway address. Internet Address Type xx.xx.xx.1 dynamic xx.xx.xx.31 dynamic xx.xx.xx.61 dynamic xx.xx.xx.179 dynamic...