What is happening with CLOUDFLARENET

Discussion in 'other anti-malware software' started by Escalader, Jun 11, 2013.

Thread Status:
Not open for further replies.
  1. Escalader

    Escalader Registered Member

    Joined:
    Dec 12, 2005
    Posts:
    3,710
    Location:
    Land of the Mooses
    what is happening with CLOUDFLARENET

    Here is a translated log entry I got guys.
    NetRange: 108.162.192.0 - 108.162.255.255
    CIDR: 108.162.192.0/18
    OriginAS: AS13335
    NetName: CLOUDFLARENET
    NetHandle: NET-108-162-192-0-1
    Parent: NET-108-0-0-0-0
    NetType: Direct Assignment
    Comment: http://www.cloudflare.com
    RegDate: 2011-10-28
    Updated: 2012-03-02
    Ref: http://whois.arin.net/rest/net/NET-108-162-192-0-1

    Now I have a list of blocked ip's and this log entry is just a sample they were all blocked.
    A series of 3 applications that tried for these sites as follows:

    12:57:04 PM SANDBOXIECRYPTO.EXE OUT TCP 108.162.232.8 80 Blocked by IP Blocklist 0 0
    1:01:14 PM SVCHOST.EXE OUT TCP 108.162.232.5 80 Blocked by IP Blocklist 0 0
    1:31:44 PM SYSTEM OUT UDP 108.162.232.8 137 Blocked by IP Blocklist 0 0

    Any clues as to what and why is going on here?

    I know that cloudflarenet is an anti DofS for hosts. But why is my system trying to send packets to it?
     
  2. itman

    itman Registered Member

    Joined:
    Jun 22, 2010
    Posts:
    1,537
    Location:
    U.S.A.
  3. Escalader

    Escalader Registered Member

    Joined:
    Dec 12, 2005
    Posts:
    3,710
    Location:
    Land of the Mooses

    TY! Great link.... new concerns...

    Yes! It seems the host protection sites we all hope work right for our hosts and ISP's aren't 100%!

    Not a surprise.

    My set up sending packets to Cloudflare is no doubt them checking me out!
     
Thread Status:
Not open for further replies.