153 Inplantcg

command line args:
[C:\Program Files (x86)\OpenDNS\Umbrella Roaming

Client\UmbrellaDiagnostic.exe]
Results for: Version Info
"C:\Program Files (x86)\OpenDNS\Umbrella Roaming Client\UmbrellaDiagnostic.exe"

Version: 1.6.2
---------------------------------------------
Results for: DNS lookup of myip.opendns.com
---------------------------------------------
Results for: tracert.exe -h 20 www.google.com.
stdout:
No se puede resolver el nombre del sistema de destino www.google.com..
---------------------------------------------
Results for: nslookup.exe www.google.com.
stdout:
Servidor: UnKnown
Address: 127.0.0.1
stderr:
*** UnKnown no encuentra www.google.com.: No response from server
---------------------------------------------
Results for: nslookup.exe www.google.com. 208.67.220.220
stdout:
Servidor: resolver2.opendns.com
Address: 208.67.220.220
Nombre: www.google.com
Addresses: 2607:f8b0:4008:80d::2004
172.217.2.196
stderr:
Respuesta no autoritativa:
---------------------------------------------
stdout:
Address: 208.67.222.222
Addresses: 2607:f8b0:4008:80d::2004
172.217.2.196
stderr:
---------------------------------------------
Results for: nslookup.exe www.google.com. 2620:119:53::53
stdout:
Servidor: UnKnown
Address: 2620:119:53::53
stderr:
---------------------------------------------
Results for: nslookup.exe www.google.com. 2620:119:35::35
stdout:
Servidor: UnKnown
Address: 2620:119:35::35
stderr:
---------------------------------------------
stdout:
Servidor: a.resolvers.level3.net
Address: 4.2.2.1
Addresses: 2607:f8b0:4002:c08::63
2607:f8b0:4002:c08::67
2607:f8b0:4002:c08::68
2607:f8b0:4002:c08::69
172.217.8.132
stderr:
---------------------------------------------
stdout:
Servidor: UnKnown
Address: 127.0.0.1
stderr:
---------------------------------------------
Results for: nslookup.exe www.google.com. ::1
stdout:
Servidor: UnKnown
Address: ::1
stderr:
---------------------------------------------
stdout:
Servidor: dns.google
Address: 8.8.8.8
Addresses: 2607:f8b0:4008:80d::2004
172.217.2.132
stderr:
---------------------------------------------
stdout:
DNS request timed out.
timeout was 2 seconds.
Servidor: UnKnown
Address: 200.35.174.126
stderr:
*** Se agot¢ el tiempo de espera de la solicitud a UnKnown
---------------------------------------------
stdout:
Servidor: UnKnown
Address: 200.35.174.127
stderr:
---------------------------------------------
Results for: tracert.exe 208.67.222.222
stdout:
Traza a 208.67.222.222 sobre caminos de 30 saltos como m ximo.
1 <1 ms 1 ms 1 ms 192.168.8.251
2 <1 ms 5 ms 4 ms 169.254.249.89
3 3 ms 9 ms 9 ms 10.4.10.233
4 5 ms 12 ms 6 ms 10.4.30.78
5 * * * Tiempo de espera agotado para esta solicitud.
6 2 ms 1 ms 1 ms 10.2.18.249
7 2 ms 2 ms 2 ms 10.2.11.130
8 26 ms 26 ms 26 ms 10.30.3.21
11 27 ms 27 ms 27 ms 4.59.240.138
12 27 ms 26 ms 26 ms 208.67.222.222
Traza completa.
---------------------------------------------
Results for: tracert.exe 208.67.220.220
stdout:
Traza a 208.67.220.220 sobre caminos de 30 saltos como m ximo.
1 <1 ms <1 ms 1 ms 192.168.8.251
2 <1 ms 4 ms 4 ms 169.254.249.89
3 7 ms 10 ms 8 ms 10.4.10.233
4 12 ms 15 ms 10 ms 10.4.30.78
6 2 ms 1 ms 1 ms 10.2.18.249
7 2 ms 2 ms 2 ms 10.2.11.130
8 26 ms 26 ms 26 ms 10.30.1.2
11 27 ms 27 ms 27 ms 4.59.240.138
12 26 ms 26 ms 26 ms 208.67.220.220
Traza completa.
---------------------------------------------
Results for: tracert.exe 2620:119:35::35
stdout:
Traza a 2620:119:35::35 sobre caminos de 30 saltos como m ximo.
1 C¢digo de error Windows 1231
Traza completa.
---------------------------------------------
Results for: tracert.exe 2620:119:53::53
stdout:
Traza a 2620:119:53::53 sobre caminos de 30 saltos como m ximo.
1 C¢digo de error Windows 1231
Traza completa.
---------------------------------------------
Results for: tracert.exe api.opendns.com.
stdout:
No se puede resolver el nombre del sistema de destino api.opendns.com..
---------------------------------------------
Results for: tracert.exe bpb.opendns.com.
stdout:
No se puede resolver el nombre del sistema de destino bpb.opendns.com..
---------------------------------------------
Results for: tracert.exe block.opendns.com.
stdout:
No se puede resolver el nombre del sistema de destino block.opendns.com..
---------------------------------------------
Results for: tracert.exe hit-adult.opendns.com.
stdout:
No se puede resolver el nombre del sistema de destino hit-adult.opendns.com..
---------------------------------------------
Results for: nslookup.exe -timeout=10 -type=txt debug.opendns.com.
stdout:
Servidor: UnKnown
Address: 127.0.0.1
stderr:
*** UnKnown no encuentra debug.opendns.com.: No response from server
---------------------------------------------
Results for: nslookup.exe -timeout=10 -type=txt debug.opendns.com. 208.67.222.222
stdout:
Address: 208.67.222.222
debug.opendns.com text =
"server m21.mia"
"flags 40020 0 40 1800000000000000000039FD000000000000000"
"originid 332434944"
"orgid 2625726"
"orgflags A6"
"actype 0"
"bundle 1321878"
"source 181.189.151.110:56560"
stderr:
---------------------------------------------
Results for: nslookup.exe -timeout=10 -type=txt -port=5353 debug.opendns.com.
208.67.222.222
stdout:
Address: 208.67.222.222
"server m45.mia"
"flags 40020 0 40 1800000000000000000039FD000000000000000"
"orgid 2625726"
"orgflags A6"
"actype 0"
"bundle 1321878"
"source 181.189.151.110:55291"
stderr:
---------------------------------------------
208.67.222.222
stdout:
Address: 208.67.222.222
"server m84.mia"
"flags 40020 0 40 1800000000000000000039FD000000000000000"
"orgid 2625726"
"orgflags A6"
"actype 0"
"bundle 1321878"
"source 181.189.151.110:56056"
stderr:
---------------------------------------------
stdout:
Address: 208.67.220.220
"server m49.mia"
"flags 40020 0 40 1800000000000000000039FD000000000000000"
"orgid 2625726"
"orgflags A6"
"actype 0"
"bundle 1321878"
"source 181.189.151.110:56055"
stderr:
---------------------------------------------
208.67.220.220
stdout:
Address: 208.67.220.220
"server m61.mia"
"flags 40020 0 40 1800000000000000000039FD000000000000000"
"orgid 2625726"
"orgflags A6"
"actype 0"
"bundle 1321878"
"source 181.189.151.110:54319"
stderr:
---------------------------------------------
208.67.220.220
stdout:
Address: 208.67.220.220
"server m53.mia"
"flags 40020 0 40 1800000000000000000039FD000000000000000"
"orgid 2625726"
"orgflags A6"
"actype 0"
"bundle 1321878"
"source 181.189.151.110:56057"
stderr:
---------------------------------------------
Results for: nslookup.exe -timeout=10 -type=txt debug.opendns.com. 2620:119:53::53
stdout:
Servidor: UnKnown
Address: 2620:119:53::53
stderr:
---------------------------------------------
2620:119:53::53
stdout:
Servidor: UnKnown
Address: 2620:119:53::53
stderr:
---------------------------------------------
2620:119:53::53
stdout:
Servidor: UnKnown
Address: 2620:119:53::53
stderr:
---------------------------------------------
Results for: nslookup.exe -timeout=10 -type=txt debug.opendns.com. 2620:119:35::35
stdout:
Servidor: UnKnown
Address: 2620:119:35::35
stderr:
---------------------------------------------
2620:119:35::35
stdout:
Servidor: UnKnown
Address: 2620:119:35::35
stderr:
---------------------------------------------
2620:119:35::35
stdout:
Servidor: UnKnown
Address: 2620:119:35::35
stderr:
---------------------------------------------
stdout:
Servidor: UnKnown
Address: 127.0.0.1
stderr:
---------------------------------------------
Results for: nslookup.exe -timeout=10 -type=txt debug.opendns.com. ::1
stdout:
Servidor: UnKnown
Address: ::1
stderr:
---------------------------------------------
stdout:
Servidor: dns.google
Address: 8.8.8.8
opendns.com
primary name server = auth1.opendns.com
responsible mail addr = noc.opendns.com
serial = 1598378885
refresh = 16384 (4 hours 33 mins 4 secs)
retry = 2048 (34 mins 8 secs)
expire = 1048576 (12 days 3 hours 16 mins 16 secs)
default TTL = 2560 (42 mins 40 secs)
---------------------------------------------
stdout:
Servidor: UnKnown
Address: 200.35.174.126
stderr:
---------------------------------------------
stdout:
Servidor: UnKnown
Address: 200.35.174.127
stderr:
---------------------------------------------
Results for: nslookup.exe -timeout=10 myip.opendns.com. 208.67.222.222
stdout:
Address: 208.67.222.222
Nombre: myip.opendns.com
Address: 181.189.151.110
stderr:
---------------------------------------------
Results for: nslookup.exe -timeout=10 myip.opendns.com. 208.67.220.220
stdout:
Address: 208.67.220.220
Nombre: myip.opendns.com
Address: 181.189.151.110
stderr:
---------------------------------------------
Results for: nslookup.exe -timeout=10 myip.opendns.com. 2620:119:53::53
stdout:
Servidor: UnKnown
Address: 2620:119:53::53
stderr:
*** UnKnown no encuentra myip.opendns.com.: No response from server
---------------------------------------------
Results for: nslookup.exe -timeout=10 myip.opendns.com. 2620:119:35::35
stdout:
Servidor: UnKnown
Address: 2620:119:35::35
stderr:
*** UnKnown no encuentra myip.opendns.com.: No response from server
---------------------------------------------
Results for: nslookup.exe -timeout=10 -class=chaos -type=txt hostname.bind. 4.2.2.1
stdout:
Servidor: a.resolvers.level3.net
Address: 4.2.2.1
hostname.bind text =
"cns1.atl2.Level3.net"
stderr:
---------------------------------------------
Results for: nslookup.exe -timeout=10 -class=chaos -type=txt hostname.bind.
192.33.4.12
stdout:
in-addr.arpa nameserver = f.in-addr-servers.arpa
in-addr.arpa nameserver = b.in-addr-servers.arpa
in-addr.arpa nameserver = e.in-addr-servers.arpa
in-addr.arpa nameserver = a.in-addr-servers.arpa
in-addr.arpa nameserver = c.in-addr-servers.arpa
in-addr.arpa nameserver = d.in-addr-servers.arpa
a.in-addr-servers.arpa internet address = 199.180.182.53
b.in-addr-servers.arpa internet address = 199.253.183.183
c.in-addr-servers.arpa internet address = 196.216.169.10
d.in-addr-servers.arpa internet address = 200.10.60.53
e.in-addr-servers.arpa internet address = 203.119.86.101
f.in-addr-servers.arpa internet address = 193.0.9.1
a.in-addr-servers.arpa AAAA IPv6 address = 2620:37:e000::53
b.in-addr-servers.arpa AAAA IPv6 address = 2001:500:87::87
c.in-addr-servers.arpa AAAA IPv6 address = 2001:43f8:110::10
d.in-addr-servers.arpa AAAA IPv6 address = 2001:13c7:7010::53
e.in-addr-servers.arpa AAAA IPv6 address = 2001:dd8:6::101
f.in-addr-servers.arpa AAAA IPv6 address = 2001:67c:e0::1
Servidor: UnKnown
Address: 192.33.4.12
"iad1a.c.root-servers.org"
hostname.bind nameserver = hostname.bind
---------------------------------------------
Results for: nslookup.exe -timeout=10 -class=chaos -type=txt hostname.bind.
204.61.216.4
stdout:
Servidor: anyns.pch.net
Address: 204.61.216.4
"3.mia.pch"
---------------------------------------------
Results for: ping.exe -n 5 www.opendns.com (www.opendns.com)
stdout:
La solicitud de ping no pudo encontrar el host www.opendns.com. Compruebe el nombre
y
vuelva a intentarlo.
---------------------------------------------
Results for: tasklist.exe
stdout:
Nombre de imagen PID Nombre de sesi¢n N£m. de ses Uso de memor
========================= ======== ================ =========== ============
System Idle Process 0 Services 0 24 KB
System 4 Services 0 1,636 KB
smss.exe 320 Services 0 1,036 KB
csrss.exe 552 Services 0 4,104 KB
wininit.exe 608 Services 0 3,820 KB
csrss.exe 632 Console 1 12,884 KB
services.exe 680 Services 0 10,560 KB
winlogon.exe 704 Console 1 6,184 KB
lsass.exe 732 Services 0 12,968 KB
lsm.exe 744 Services 0 4,372 KB
svchost.exe 840 Services 0 9,752 KB
atiesrxx.exe 1000 Services 0 3,824 KB
spoolsv.exe 1424 Services 0 14,368 KB
armsvc.exe 1588 Services 0 3,572 KB
atieclxx.exe 1644 Console 1 6,812 KB
AnyDesk.exe 1676 Services 0 17,896 KB
sfc.exe 1732 Services 0 270,748 KB
cscm.exe 1840 Services 0 9,856 KB
officeclicktorun.exe 1888 Services 0 30,228 KB
escsvc64.exe 1964 Services 0 3,348 KB
taskhost.exe 1052 Console 1 18,260 KB
dwm.exe 2104 Console 1 86,328 KB
explorer.exe 2140 Console 1 75,980 KB
E_S60RPB.EXE 2160 Services 0 3,104 KB
UrBackupClient.exe 2268 Console 1 7,164 KB
AnyDesk.exe 2284 Console 1 14,668 KB
Launchy.exe 2356 Console 1 15,552 KB
ijplmsvc.exe 2420 Services 0 3,632 KB
OcsSystray.exe 2616 Console 1 6,384 KB
ERCInterface.exe 2628 Console 1 33,260 KB
taskeng.exe 2864 Console 1 5,528 KB
RAVBg64.exe 2216 Console 1 760 KB
RAVCpl64.exe 2176 Console 1 828 KB
jusched.exe 3724 Console 1 7,840 KB
CNQMMAIN.EXE 3768 Console 1 29,892 KB
EEventManager.exe 3800 Console 1 8,400 KB
iptray.exe 3808 Console 1 8,940 KB
TeamViewer_Service.exe 3844 Services 0 26,236 KB
UrBackupClientBackend.exe 4808 Services 0 12,876 KB
OcsService.exe 4864 Services 0 7,196 KB
WmiPrvSE.exe 4108 Services 0 26,876 KB
WmiPrvSE.exe 3752 Services 0 7,152 KB
CNQMSWCS.EXE 2976 Console 1 56,768 KB
SearchIndexer.exe 4640 Services 0 25,476 KB
TeamViewer.exe 5576 Console 1 25,900 KB
tv_w32.exe 5780 Console 1 5,292 KB
tv_x64.exe 5788 Console 1 5,560 KB
LHAgent.exe 2988 Services 0 15,588 KB
WatchDogService.exe 3004 Services 0 5,692 KB
TouchpointAnalyticsClient 2572 Services 0 76,732 KB
HPTouchpointManagerTray.e 5308 Console 1 18,508 KB
TouchpointGpuInfo.exe 1972 Services 0 41,896 KB
chrome.exe 2732 Console 1 113,900 KB
PSEXESVC.EXE 660 Services 0 4,972 KB
cmd.exe 1256 Services 0 3,216 KB
conhost.exe 4388 Services 0 3,356 KB
audiodg.exe 2032 Services 0 20,328 KB
mmc.exe 4408 Console 1 32,644 KB
dllhost.exe 4680 Console 1 9,420 KB
UmbrellaDiagnostic.exe 5292 Console 1 30,564 KB
TRACERT.EXE 2352 Console 1 3,620 KB
conhost.exe 5420 Console 1 3,884 KB
nslookup.exe 1300 Console 1 4,660 KB
PING.EXE 1468 Console 1 3,780 KB
tasklist.exe 5512 Console 1 6,420 KB
ipconfig.exe 4584 Console 1 5,136 KB
NETSTAT.EXE 2004 Console 1 3,820 KB
systeminfo.exe 5952 Console 1 5,968 KB
cmd.exe 4656 Console 1 3,148 KB
ROUTE.EXE 3456 Console 1 2,632 KB
powershell.exe 3068 Console 1 1,212 KB
conhost.exe 6280 Console 1 100 KB
netsh.exe 6396 Console 1 2,732 KB
powershell.exe 6484 Console 1 124 KB
conhost.exe 6492 Console 1 888 KB
powershell.exe 6500 Console 1 120 KB
---------------------------------------------
Results for: ipconfig.exe /all
stdout:
Configuraci¢n IP de Windows
Nombre de host. . . . . . . . . : 153INPLANTCG
Sufijo DNS principal . . . . . :
Tipo de nodo. . . . . . . . . . : h¡brido
Enrutamiento IP habilitado. . . : no
Proxy WINS habilitado . . . . . : no
Adaptador de Ethernet Local Area Connection:
Sufijo DNS espec¡fico para la conexi¢n. . :
Descripci¢n . . . . . . . . . . . . . . . : Realtek PCIe GBE Family Controller
Direcci¢n f¡sica. . . . . . . . . . . . . : B8-AE-ED-D0-C8-1A
DHCP habilitado . . . . . . . . . . . . . : s¡
Configuraci¢n autom tica habilitada . . . : s¡
V¡nculo: direcci¢n IPv6 local. . . : fe80::ac6b:69c0:303c:4efe%13(Preferido)
Direcci¢n IPv4. . . . . . . . . . . . . . : 192.168.8.190(Preferido)
M scara de subred . . . . . . . . . . . . : 255.255.255.0
Concesi¢n obtenida. . . . . . . . . . . . : martes, 25 de agosto de 2020
10:35:42 a.m.
La concesi¢n expira . . . . . . . . . . . : martes, 25 de agosto de 2020
12:11:53 p.m.
Puerta de enlace predeterminada . . . . . : 192.168.8.251
Servidor DHCP . . . . . . . . . . . . . . : 192.168.8.121
IAID DHCPv6 . . . . . . . . . . . . . . . : 297316077
DUID de cliente DHCPv6. . . . . . . . . . : 00-01-00-01-1F-73-21-DA-B8-AE-ED-D0-
C8-1A
Servidores DNS. . . . . . . . . . . . . . : 127.0.0.1
NetBIOS sobre TCP/IP. . . . . . . . . . . : habilitado
Adaptador de t£nel isatap.{A921D60A-5138-4D67-9174-2030BE1FBBC3}:
Estado de los medios. . . . . . . . . . . : medios desconectados
Descripci¢n . . . . . . . . . . . . . . . : Adaptador ISATAP de Microsoft
Direcci¢n f¡sica. . . . . . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP habilitado . . . . . . . . . . . . . : no
Adaptador de t£nel Teredo Tunneling Pseudo-Interface:
Estado de los medios. . . . . . . . . . . : medios desconectados
Descripci¢n . . . . . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
Direcci¢n f¡sica. . . . . . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP habilitado . . . . . . . . . . . . . : no
---------------------------------------------
Results for: netstat.exe -rn
stdout:
===========================================================================
ILista de interfaces
13...b8 ae ed d0 c8 1a ......Realtek PCIe GBE Family Controller
1...........................Software Loopback Interface 1
19...00 00 00 00 00 00 00 e0 Adaptador ISATAP de Microsoft
15...00 00 00 00 00 00 00 e0 Teredo Tunneling Pseudo-Interface
===========================================================================
IPv4 Tabla de enrutamiento
===========================================================================
Rutas activas:
Destino de red M scara de red Puerta de enlace Interfaz M‚trica
0.0.0.0 0.0.0.0 192.168.8.251 192.168.8.190 10
127.0.0.0 255.0.0.0 En v¡nculo 127.0.0.1 306
127.0.0.1 255.255.255.255 En v¡nculo 127.0.0.1 306
127.255.255.255 255.255.255.255 En v¡nculo 127.0.0.1 306
192.168.8.0 255.255.255.0 En v¡nculo 192.168.8.190 266
192.168.8.190 255.255.255.255 En v¡nculo 192.168.8.190 266
192.168.8.255 255.255.255.255 En v¡nculo 192.168.8.190 266
224.0.0.0 240.0.0.0 En v¡nculo 127.0.0.1 306
224.0.0.0 240.0.0.0 En v¡nculo 192.168.8.190 266
255.255.255.255 255.255.255.255 En v¡nculo 127.0.0.1 306
255.255.255.255 255.255.255.255 En v¡nculo 192.168.8.190 266
===========================================================================
Rutas persistentes:
Ninguno
===========================================================================
Rutas activas:
Cuando destino de red m‚trica Puerta de enlace
1 306 ::1/128 En v¡nculo
13 266 fe80::/64 En v¡nculo
13 266 fe80::ac6b:69c0:303c:4efe/128
En v¡nculo
1 306 ff00::/8 En v¡nculo
13 266 ff00::/8 En v¡nculo
===========================================================================
Rutas persistentes:
Ninguno
---------------------------------------------
Results for: systeminfo.exe
stdout:
Nombre de host: 153INPLANTCG

Nombre del sistema operativo: Microsoft Windows 7 Professional
Versi¢n del sistema operativo: 6.1.7601 Service Pack 1 Compilaci¢n 7601
Fabricante del sistema operativo: Microsoft Corporation
Configuraci¢n del sistema operativo: Estaci¢n de trabajo independiente
Tipo de compilaci¢n del sistema operativo: Multiprocessor Free
Propiedad de: INPLANT
Organizaci¢n registrada: SUNCHEMICAL GUATEMALA
Id. del producto: 00371-OEM-8992671-00437
Fecha de instalaci¢n original: 20/09/2016, 10:36:21 a.m.
Tiempo de arranque del sistema: 25/08/2020, 10:35:05 a.m.
Fabricante del sistema: LENOVO
Modelo el sistema: 10CN0001US
Tipo de sistema: x64-based PC
Procesador(es): 1 Procesadores instalados.
[01]: AMD64 Family 21 Model 19 Stepping
1 AuthenticAMD ~3500 Mhz
Versi¢n del BIOS: LENOVO FPKT36AUS, 01/07/2015
Directorio de Windows: C:\Windows
Directorio de sistema: C:\Windows\system32
Dispositivo de arranque: \Device\HarddiskVolume1
Configuraci¢n regional del sistema: es-gt;Espa¤ol (Guatemala)
Idioma de entrada: en-us;Ingl‚s (Estados Unidos)
Zona horaria: (UTC-06:00) Am‚rica Central
Cantidad total de memoria f¡sica: 3,746 MB
Memoria f¡sica disponible: 1,610 MB
Memoria virtual: tama¤o m ximo: 7,491 MB
Memoria virtual: disponible: 4,545 MB
Memoria virtual: en uso: 2,946 MB
Ubicaci¢n(es) de archivo de paginaci¢n: C:\pagefile.sys
Dominio: INPLANT
Servidor de inicio de sesi¢n: \\153INPLANTCG
Revisi¢n(es): 271 revisi¢n(es) instaladas.
[01]: KB2849697
[02]: KB2849696
[03]: KB2841134
[04]: KB2670838
[05]: KB2479943
[06]: KB2491683
[07]: KB2506014
[08]: KB2506212
[09]: KB2509553
[10]: KB2511455
[11]: KB2532531
[12]: KB2544893
[13]: KB2552343
[14]: KB2560656
[15]: KB2564958
[16]: KB2570947
[17]: KB2579686
[18]: KB2585542
[19]: KB2604115
[20]: KB2620704
[21]: KB2621440
[22]: KB2631813
[23]: KB2653956
[24]: KB2654428
[25]: KB2656356
[26]: KB2667402
[27]: KB2676562
[28]: KB2685939
[29]: KB2690533
[30]: KB2698365
[31]: KB2705219
[32]: KB2706045
[33]: KB2718704
[34]: KB2727528
[35]: KB2729094
[36]: KB2729452
[37]: KB2736422
[38]: KB2742599
[39]: KB2758857
[40]: KB2770660
[41]: KB2786081
[42]: KB2789645
[43]: KB2798162
[44]: KB2807986
[45]: KB2813430
[46]: KB2834140
[47]: KB2836942
[48]: KB2836943
[49]: KB2840149
[50]: KB2840631
[51]: KB2847927
[52]: KB2861698
[53]: KB2862152
[54]: KB2862330
[55]: KB2862335
[56]: KB2864202
[57]: KB2868038
[58]: KB2868116
[59]: KB2871997
[60]: KB2884256
[61]: KB2892074
[62]: KB2893294
[63]: KB2894844
[64]: KB2900986
[65]: KB2911501
[66]: KB2912390
[67]: KB2929733
[68]: KB2931356
[69]: KB2937610
[70]: KB2943357
[71]: KB2952664
[72]: KB2957189
[73]: KB2968294
[74]: KB2972100
[75]: KB2972211
[76]: KB2973112
[77]: KB2973201
[78]: KB2973351
[79]: KB2977292
[80]: KB2978120
[81]: KB2978742
[82]: KB2984972
[83]: KB2987107
[84]: KB2991963
[85]: KB2992611
[86]: KB2993651
[87]: KB2999226
[88]: KB3003057
[89]: KB3003743
[90]: KB3004361
[91]: KB3004375
[92]: KB3005607
[93]: KB3008923
[94]: KB3010788
[95]: KB3011780
[96]: KB3019978
[97]: KB3020369
[98]: KB3021674
[99]: KB3022777
[100]: KB3023215
[101]: KB3030377
[102]: KB3033889
[103]: KB3033929
[104]: KB3035126
[105]: KB3035132
[106]: KB3037574
[107]: KB3042058
[108]: KB3042553
[109]: KB3045685
[110]: KB3046017
[111]: KB3046269
[112]: KB3055642
[113]: KB3059317
[114]: KB3060716
[115]: KB3067903
[116]: KB3071756
[117]: KB3072305
[118]: KB3074543
[119]: KB3075220
[120]: KB3076895
[121]: KB3076949
[122]: KB3077715
[123]: KB3078601
[124]: KB3080446
[125]: KB3084135
[126]: KB3086255
[127]: KB3087039
[128]: KB3092601
[129]: KB3093513
[130]: KB3097989
[131]: KB3101722
[132]: KB3108371
[133]: KB3108381
[134]: KB3108664
[135]: KB3108670
[136]: KB3109094
[137]: KB3109103
[138]: KB3109560
[139]: KB3110329
[140]: KB3115858
[141]: KB3122648
[142]: KB3123479
[143]: KB3124275
[144]: KB3124280
[145]: KB3126587
[146]: KB3127220
[147]: KB3135983
[148]: KB3138612
[149]: KB3138910
[150]: KB3138962
[151]: KB3139398
[152]: KB3139914
[153]: KB3142024
[154]: KB3142042
[155]: KB3145739
[156]: KB3146706
[157]: KB3146963
[158]: KB3149090
[159]: KB3150220
[160]: KB3155178
[161]: KB3156016
[162]: KB3156017
[163]: KB3156019
[164]: KB3159398
[165]: KB3161561
[166]: KB3161949
[167]: KB3161958
[168]: KB3163245
[169]: KB3164033
[170]: KB3164035
[171]: KB3168965
[172]: KB3170455
[173]: KB3172605
[174]: KB3175024
[175]: KB3177186
[176]: KB3177467
[177]: KB3178034
[178]: KB3184122
[179]: KB3185911
[180]: KB3188730
[181]: KB3192391
[182]: KB3197867
[183]: KB3205394
[184]: KB3210131
[185]: KB3212642
[186]: KB4012204
[187]: KB4012212
[188]: KB4014504
[189]: KB4014565
[190]: KB4014573
[191]: KB4014579
[192]: KB4014661
[193]: KB4015546
[194]: KB4018271
[195]: KB4019263
[196]: KB4019990
[197]: KB4021558
[198]: KB4022722
[199]: KB4025252
[200]: KB4025337
[201]: KB4034679
[202]: KB4034733
[203]: KB4036586
[204]: KB4038779
[205]: KB4040685
[206]: KB4040966
[207]: KB4040980
[208]: KB4041678
[209]: KB4047206
[210]: KB4048960
[211]: KB4052978
[212]: KB4054176
[213]: KB4054521
[214]: KB4054998
[215]: KB4056568
[216]: KB4056897
[217]: KB4074587
[218]: KB4074736
[219]: KB4088878
[220]: KB4089187
[221]: KB4092946
[222]: KB4093108
[223]: KB4095514
[224]: KB4095874
[225]: KB4096040
[226]: KB4100480
[227]: KB4103712
[228]: KB4284867
[229]: KB4338423
[230]: KB4338612
[231]: KB4338823
[232]: KB4339093
[233]: KB4343205
[234]: KB4343899
[235]: KB4344152
[236]: KB4457044
[237]: KB4457055
[238]: KB4457145
[239]: KB4457426
[240]: KB4462915
[241]: KB4462949
[242]: KB4466536
[243]: KB4467106
[244]: KB4470199
[245]: KB4470600
Tarjeta(s) de red: 1 Tarjetas de interfaz de red
instaladas.
[01]: Realtek PCIe GBE Family Controller
Nombre de conexi¢n: Local Area
Connection
DHCP habilitado: S¡
Servidor DHCP: 192.168.8.121
Direcciones IP
[01]: 192.168.8.190
[02]: fe80::ac6b:69c0:303c:4efe
stderr:
---------------------------------------------
Results for: cmd.exe /c set
stdout:
ALLUSERSPROFILE=C:\ProgramData
APPDATA=C:\Users\INPLANT\AppData\Roaming
CommonProgramFiles=C:\Program Files\Common Files
CommonProgramFiles(x86)=C:\Program Files (x86)\Common Files
CommonProgramW6432=C:\Program Files\Common Files
COMPUTERNAME=153INPLANTCG
ComSpec=C:\Windows\system32\cmd.exe
FP_NO_HOST_CHECK=NO
HOMEDRIVE=C:
HOMEPATH=\Users\INPLANT
LOCALAPPDATA=C:\Users\INPLANT\AppData\Local
LOGONSERVER=\\153INPLANTCG
NUMBER_OF_PROCESSORS=4
OS=Windows_NT
Path=C:\ProgramData\Oracle\Java\javapath;C:\Windows\system32;C:\Windows;C:\Windows\
System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files
(x86)\Skype\Phone\
PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC
PROCESSOR_ARCHITECTURE=AMD64
PROCESSOR_IDENTIFIER=AMD64 Family 21 Model 19 Stepping 1, AuthenticAMD
PROCESSOR_LEVEL=21
PROCESSOR_REVISION=1301
ProgramData=C:\ProgramData
ProgramFiles=C:\Program Files
ProgramFiles(x86)=C:\Program Files (x86)
ProgramW6432=C:\Program Files
PROMPT=$P$G
PSModulePath=C:\Windows\system32\WindowsPowerShell\v1.0\Modules\
PUBLIC=C:\Users\Public
SESSIONNAME=Console
SystemDrive=C:
SystemRoot=C:\Windows
TEMP=C:\Users\INPLANT\AppData\Local\Temp
TMP=C:\Users\INPLANT\AppData\Local\Temp
USERDOMAIN=153INPLANTCG
USERNAME=INPLANT
USERPROFILE=C:\Users\INPLANT
windir=C:\Windows
windows_tracing_flags=3
windows_tracing_logfile=C:\BVTBin\Tests\installpackage\csilogfile.log
stderr:
---------------------------------------------
Results for: cmd.exe /c netsh advfirewall show allprofiles
stdout:
Configuraci¢n de Perfil de dominio:

**********************************************************************
Estado ACTIVAR
Directiva de firewall BlockInbound,AllowOutbound
LocalFirewallRules N/A (s¢lo almac‚n de GPOs)
LocalConSecRules N/A (s¢lo almac‚n de GPOs)
InboundUserNotification Habilitar
RemoteManagement Deshabilitar
UnicastResponseToMulticast Habilitar
Registro:
LogAllowedConnections Deshabilitar
LogDroppedConnections Deshabilitar
FileName %systemroot
%\system32\LogFiles\Firewall\pfirewall.log
MaxFileSize 4096
Configuraci¢n de Perfil privado:

**********************************************************************
Estado ACTIVAR
Registro:
MaxFileSize 4096
Configuraci¢n de Perfil p£blico:

**********************************************************************
Estado ACTIVAR
Registro:
MaxFileSize 4096
Aceptar
stderr:
---------------------------------------------
Results for: cmd.exe /c dir "C:\ProgramData\OpenDNS\ERC"
stdout:
El volumen de la unidad C no tiene etiqueta.
El n£mero de serie del volumen es: F4A0-A2AC
Directorio de C:\ProgramData\OpenDNS\ERC
25/08/2020 09:25 a.m. <DIR> .

25/08/2020 09:25 a.m. <DIR> ..
16/06/2020 09:28 a.m. <DIR> beacon-logs
25/08/2020 10:26 a.m. 144 client_routes.conf
16/06/2020 09:28 a.m. 73 Config.json
24/08/2020 06:52 p.m. 141 manifest.json
25/08/2020 10:33 a.m. 449,542 OpenDNS_ERC_Service.log
25/08/2020 08:35 a.m. 1,048,622 OpenDNS_ERC_Service.log.1
25/08/2020 02:56 a.m. 1,048,606 OpenDNS_ERC_Service.log.2
16/06/2020 09:28 a.m. 168 OrgInfo.json
25/08/2020 10:33 a.m. 372 PersistedNicDefaults.json
24/08/2020 06:34 p.m. 418 proxy_whitelist4.txt
17/07/2020 10:52 a.m. 418 proxy_whitelist6.txt
25/08/2020 10:08 a.m. 2,312 rasphone.pbk
24/08/2020 06:34 p.m. 114 ResolverV4-1-
A921D60A51384D6791742030BE1FBBC3-resolv.conf
16/06/2020 09:48 a.m. 260 RoamingProfile.json
25/08/2020 10:08 a.m. 1,813 sync-latest.json
16/06/2020 09:48 a.m. <DIR> Upgrades
24/08/2020 06:33 p.m. 418 whitelist.txt
15 archivos 2,553,421 bytes
4 dirs 418,943,512,576 bytes libres
stderr:
---------------------------------------------
Results for: cmd.exe /c dir "C:\Program Files (x86)\OpenDNS\Umbrella Roaming
Client"
stdout:
El volumen de la unidad C no tiene etiqueta.
El n£mero de serie del volumen es: F4A0-A2AC
Directorio de C:\Program Files (x86)\OpenDNS\Umbrella Roaming Client
16/06/2020 09:48 a.m. <DIR> .

16/06/2020 09:48 a.m. <DIR> ..
10/10/2019 04:50 p.m. 464,072 Core.dll
10/10/2019 04:50 p.m. 465,120 dnscrypt-proxy.exe
10/10/2019 04:50 p.m. 74,440 ERCInterface.exe
10/10/2019 04:50 p.m. 1,480 ERCInterface.exe.config
10/10/2019 04:50 p.m. 51,400 ERCService.exe
10/10/2019 04:50 p.m. 1,606 ERCService.exe.config
10/10/2019 04:50 p.m. 1,686 GetNetStats.bat
10/10/2019 04:50 p.m. 1,270 hermes_ca_cert.pem
10/10/2019 04:50 p.m. 878 hermes_ca_cert_2015.pem
10/10/2019 04:50 p.m. 876 hermes_ca_cert_2016.pem
10/10/2019 04:50 p.m. 300,744 ipblocking.dll
10/10/2019 04:51 p.m. 51,448 libdcplugin_erc.dll
10/10/2019 04:50 p.m. 1,040,160 libldns-1.dll
10/10/2019 04:50 p.m. 306,888 log4net.dll
10/10/2019 04:50 p.m. 26,824 networklist.dll
10/10/2019 04:50 p.m. 433,352 Newtonsoft.Json.dll
10/10/2019 04:50 p.m. 131,272 UmbrellaDiagnostic.exe
10/10/2019 04:50 p.m. 1,473 UmbrellaDiagnostic.exe.config
18 archivos 3,354,989 bytes
2 dirs 418,943,512,576 bytes libres
stderr:
---------------------------------------------
Results for: ping.exe -n 5 146.112.62.39 (new IP blocked address)
stdout:
Haciendo ping a 146.112.62.39 con 32 bytes de datos:
Respuesta desde 146.112.62.39: bytes=32 tiempo=57ms TTL=249
Estad¡sticas de ping para 146.112.62.39:
Paquetes: enviados = 5, recibidos = 5, perdidos = 0
(0% perdidos),
Tiempos aproximados de ida y vuelta en milisegundos:
M¡nimo = 56ms, M ximo = 57ms, Media = 56ms
---------------------------------------------
Results for: route.exe -4 print 146.112.62.39 (new blocked IP)
stdout:
===========================================================================
===========================================================================
===========================================================================
Rutas activas:
Ninguno
Rutas persistentes:
Ninguno
---------------------------------------------
Results for: route.exe -4 print 146.112.62.40 (grey IP - new address)
stdout:
===========================================================================
===========================================================================
===========================================================================
Rutas activas:
Ninguno
Rutas persistentes:
Ninguno
---------------------------------------------
Results for: powershell.exe -Command "(New-Object
System.Net.WebClient).DownloadString(\"http://146.112.62.39/some/page\")" (page
from new blocked IP)
stdout:
<html>
<head>
<title>IP Block Test Page</title>
<link rel="stylesheet" type="text/css" href="/testpage.css">
</head>
<body class="blank">
<p><a class="footer-link" href="http://www.umbrella.com" rel="nofollow" id="umb
rella-logo">Umbrella</a></p>
<table class="topbottom">
<tr>
<td>
<p class="redbold">
<img class="status" src="/images/fail.png" /> IP Not Blocked.
</p>
</td>
</tr>
<tr>
<td class="celltext">
If you expected to get a blocked page, please check your Policies and
your Ac
tivity Search to see whether there's a configuration error.
<br>
</td>
</tr>
<tr>
If you are still experiencing difficulty, please <a class="noline"
href="https://support.opendns.com/" rel="nofollow">Contact Support.</a>
<br>
</td>
</tr>
</table>
<p><a class="noline" href="#" onclick="window.history.back(); return false;"><i
mg class="status" src="/images/back-arrow.png" /> Go back</a></p>
</body>
</html>
---------------------------------------------
System.Net.WebClient).DownloadString(\"http://146.112.62.40/favicon.ico\")"
(allowed page from new grey IP)
stdout:
# # # ù# & ## # h# ×# ( @ #
>#!éY#0ê' # è>##ëT# íT##êo

1ž#&˜˜ # è>##?
4? ˜¦ #ë?#/>#! Æ¦ ëz üëz#˜ëz#˜Y#b
ëz#óë?#½ ë?#.ëz#›ëz#ìëz ø˜? #˜˜ #éz ?ëz#ëz#˜éz ? ?#'éz#éëz#˜ëz#˜éz#®áY
# éz#{ëz#z#\#.>#! ëz#óë?#½ êÏ #¨? #éY#mëz#˜ž
Y# z#Oëz#˜ëz#~é>#)žY#- ëY#µëz#ê?#AY#bëz# é? u Y#ª
ëz#Ò ëz#óë?#½ ™T
#ëz#¯ëz#ë?#Ž˜¦ #ëY#ëz#ö˜˜ # z#ä?#} ëz#€ëz#Ý
ëz#Oëz#¢#.˜¦ #êÏ # ëz#óë?#½ ë?#?ëz#¢žz#G˜¦ # ë?#^ëz#˜ëY
P áY## ëz#âëz#€ž#éY#0z#äëY#Î åY##ëz#šëz#çëz#Y#
b ëz#óë?#½ ë? Qëz#çëz#×ëz#ÿ ê' #z#·ë?#˜ëz#éY#? ?#Aëz#“ëz#ìëz#çéz
#àëT# Æ¦ ëY
Pë?#^™T
# êY 8ë?#/ ëo 6ëz#dê? 9 ˜? #éY#EY#bž#& ?
#z#\ëY
PÆ¦
z#B˜¦ #
˜¦ #?#A ™T
#ëz#˜éo#> žY#@ëz#çêÏ #
?#cëz#¯ ëz#¸éY#m ™o##ëz#˜?#A Y#Hëz#ž ë
z#OY#S éz#ééz#D ?#Aëz#˜ã-## éz tëz#¸ ëz#«é?#`ëz#?ëY#è
ëz#Çz#Ÿ ™o##ëz#˜?#A éz#aëz#ç ëz#œëz#œ ëz#çéz#a ?#
Aëz#˜ã-## éz#-ëz#Ç ëY#èëz#?éo#Këz " ëz#Çz#Ÿ ™o##ëz#˜?#A
éz#aëz#ç éz#néY#m ëz#çéz#a ?#Aëz#˜ã¾## éz#-ëz#Ç ë
? #ë?#I ëz#Çz#Ÿ ™o##ëz#˜?#A éz#aëz#ç
ëz#çéz#a ?#Aëz#˜ã¾## ë? #ëz#Ç éY#méz#
D ™o##ëz#˜?#A ëY#(éz#^ éz#%ž#& ?#Aëz#˜ã¾##
ê?#Fë?#k ™o##ëz#˜?#A
?#Aëz#˜ã¾##
š½
#ëz#çžz :
ÿ ;ëz#ìå#
šo
#$ ˜˜ #šo#$
˜˜˜˜˜˜˜˜˜˜˜˜˜˜˜˜˜˜˜˜˜˜˜˜˜˜˜˜£ý‰# äô?Œ
'7˜¢#oä›á'˜ö¦î”è‹‹˜˜˜˜˜¨˜ç˜˜27mr.tn2/tl•/“O”?oç?˜˜˜˜˜ì˜˜˜˜˜˜˜˜˜˜˜˜˜˜˜˜˜
˜˜˜˜˜˜˜˜˜˜˜˜( # #
áY #êÏ #å¦ #ÞT #áY##‘T

å¦ #áY## å#
áY # >#!ëz#¶ëz#lëz#_ë? Qëz#dz#’ê> #ëz#¶ëz#yžz
:ëz#«ëz#¶™o## ?#Néz#{¨? #ëz#_ë? Që? 'z#ŸêY 8ë? '¨? #ëY r?
Véz#{éo#K
å¦ #ë?#?é? uëY#=?
4éz#az#Ÿ˜? #éY#'ë?#.áY##ë?#sY#SÞT # ã¾##
ã¾## žz#G ê?#FêÏ #ëY#Yåo##ëo 6êÿ##éz#"éz 7ã¾##ëz#ÿáY #ž
z#G žz#GéY#? ëz#œáY##ëz#ÿêo
1ëY#éz#Déz#DëY#êo
1ëz#ÿáY #ëz#ð éY#? ëz#~áY##ëz#ÿéz#"Y#b Y#béz#"ëz#ÿáY #z#Ÿ
? z#z z#zê' #
Æ¦ Æ¦
˜˜ ˜˜ ˜˜ –˜ üå ã— Ží ö‹ vs Ys ˜– ‹ö ö‹ ˜˜ ˜˜ ˜˜
---------------------------------------------
System.Net.WebClient).DownloadString(\"http://146.112.62.40:8081/favicon.ico\")"
(allowed page from new grey IP)
stderr:
Excepci¢n al llamar a "DownloadString" con los argumentos "1": "No es posible c
onectar con el servidor remoto"
En l¡nea: 1 Car cter: 49
+ (New-Object System.Net.WebClient).DownloadString <<<< ("http://146.112.62.40:
8081/favicon.ico")
+ CategoryInfo : NotSpecified: (:) [], MethodInvocationException
+ FullyQualifiedErrorId : DotNetMethodException
---------------------------------------------
System.Net.WebClient).DownloadString(\"http://146.112.62.40/malware.htm\")"
(blocked page from new grey IP)
stdout:
<html>
<head>
<title>IP Block Test Page</title>
<link rel="stylesheet" type="text/css" href="/testpage.css">
</head>
<body class="blank">
<p><a class="footer-link" href="http://www.umbrella.com" rel="nofollow" id="umb
rella-logo">Umbrella</a></p>
<table class="topbottom">
<tr>
<td>
<p class="redbold">
<img class="status" src="/images/fail.png" /> You are not curre
ntly using the IP Blocking system.
</p>
</td>
</tr>
<tr>
If you expected to get to the IP Blocking test page, please check y
our Policies and your Activity Search to see whether there's a configuration er
ror.
<br>
</td>
</tr>
<tr>
If you are still experiencing difficulty, please <a class="noline"
href="https://support.opendns.com/" rel="nofollow">Contact Support.</a>
<br>
</td>
</tr>
</table>
<p><a class="noline" href="http://ipblock.opendnstest.com/"><img class="status"
src="/images/back-arrow.png" /> Back to test page</a></p>
</body>
</html>
---------------------------------------------
System.Net.WebClient).DownloadString(\"http://146.112.62.40:8081/malware.htm\")"
(blocked page from new grey IP)
stderr:
+ (New-Object System.Net.WebClient).DownloadString <<<< ("http://146.112.62.40:
8081/malware.htm")
---------------------------------------------
Results for: ping.exe -n 5 67.215.70.92 (old IP blocked address)
stdout:
Haciendo ping a 67.215.70.92 con 32 bytes de datos:
Estad¡sticas de ping para 67.215.70.92:
Paquetes: enviados = 5, recibidos = 5, perdidos = 0
(0% perdidos),
Tiempos aproximados de ida y vuelta en milisegundos:
M¡nimo = 95ms, M ximo = 98ms, Media = 95ms
---------------------------------------------
Results for: route.exe -4 print 67.215.70.92 (old blocked IP)
stdout:
===========================================================================
===========================================================================
===========================================================================
Rutas activas:
Ninguno
Rutas persistentes:
Ninguno
---------------------------------------------
Results for: route.exe -4 print 67.215.70.91 (grey IP - old address)
stdout:
===========================================================================
===========================================================================
===========================================================================
Rutas activas:
Ninguno
Rutas persistentes:
Ninguno
---------------------------------------------
System.Net.WebClient).DownloadString(\"http://67.215.70.92/some/page\")" (page from
old blocked IP)
stderr:
+ (New-Object System.Net.WebClient).DownloadString <<<< ("http://67.215.70.92/s
ome/page")
---------------------------------------------
System.Net.WebClient).DownloadString(\"http://67.215.70.91/favicon.ico\")" (allowed
page from old grey IP)
stderr:
+ (New-Object System.Net.WebClient).DownloadString <<<< ("http://67.215.70.91/f
avicon.ico")
---------------------------------------------
System.Net.WebClient).DownloadString(\"http://67.215.70.91:8081/favicon.ico\")"
(allowed page from old grey IP)
stderr:
+ (New-Object System.Net.WebClient).DownloadString <<<< ("http://67.215.70.91:8
081/favicon.ico")
---------------------------------------------
System.Net.WebClient).DownloadString(\"http://67.215.70.91/malware.htm\")" (blocked
page from old grey IP)
stderr:
+ (New-Object System.Net.WebClient).DownloadString <<<< ("http://67.215.70.91/m
alware.htm")
---------------------------------------------
System.Net.WebClient).DownloadString(\"http://67.215.70.91:8081/malware.htm\")"
(blocked page from old grey IP)
stderr:
+ (New-Object System.Net.WebClient).DownloadString <<<< ("http://67.215.70.91:8
081/malware.htm")
---------------------------------------------
Failed Results for: http://block.a.id.opendns.com/monitor.php
The remote name could not be resolved: 'block.a.id.opendns.com'
---------------------------------------------
Failed Results for: http://bpb.opendns.com/monitor/
The remote name could not be resolved: 'bpb.opendns.com'
---------------------------------------------
Results for: http://block.a.id.opendns.com/
---------------------------------------------
Problem getting http://block.a.id.opendns.com/
The remote name could not be resolved: 'block.a.id.opendns.com'
---------------------------------------------
Failed Results for: http://67.215.69.69
Unable to connect to the remote server
---------------------------------------------
Results for: proxy settings check
No proxy settings found when looking up https://api.opendns.com/v3/ as INPLANT

---------------------------------------------
Results for: C:\ProgramData\OpenDNS\ERC\proxy_whitelist.txt
---------------------------------------------
Results for: C:\ProgramData\OpenDNS\ERC\proxy_whitelist4.txt
*.10.in-addr.arpa
*.16.172.in-addr.arpa
*.local
---------------------------------------------
Results for: C:\ProgramData\OpenDNS\ERC\proxy_whitelist6.txt
*.10.in-addr.arpa
*.local
---------------------------------------------
Results for: resolv.confs
C:\ProgramData\OpenDNS\ERC\ResolverV4-1-A921D60A51384D6791742030BE1FBBC3-
resolv.conf
# resolvers for Local Area Connection
nameserver 8.8.8.8
nameserver 200.35.174.126
nameserver 200.35.174.127
---------------------------------------------
Results for: C:\ProgramData\OpenDNS\ERC\PersistedNicDefaults.json
{"nicDetails":[{"addressFamily":2,"description":"Realtek PCIe GBE Family

Controller","dns":
["8.8.8.8","200.35.174.126","200.35.174.127"],"dnsIsStatic":false,"dnsReg":
[],"hasNameServerKey":true,"id":"{A921D60A-5138-4D67-9174-
2030BE1FBBC3}","includeTransientDNS":false,"name":"Local Area
Connection","separator":","}],"transientDnsAddresses4":[],"transientDnsAddresses6":
[]}
---------------------------------------------
Results for: C:\Users\INPLANT\AppData\Roaming\OpenDNS\ERC\OpenDNS_ERC_UI.log
2020-08-25 11:35:12 [2628] [DEBUG] < 1> Attempting to reconnect to service 3390
2020-08-25 11:35:22 [2628] [ERROR] < 1> Couldn't get ERC Service status: The
communication object, System.ServiceModel.Channels.ServiceChannel, cannot be used
for communication because it is in the Faulted state.
---------------------------------------------
Results for: C:\ProgramData\OpenDNS\ERC\OpenDNS_ERC_Service.log
2020-08-25 08:35:09 [2108] [INFO ] < 25> IP BLOCKING: forwarding interface not
available; can not add route for 62.8.79.10/32
2020-08-25 08:35:11 [2108] [DEBUG] < 24> Dns Protection: NetworkProbe: no response
from 200.35.174.126
from 200.35.174.127
2020-08-25 08:35:11 [2108] [DEBUG] < 24> Dns Protection: NetworkProbe: system
resolver check succeeded
resolver check results will be cached for 300 seconds
2020-08-25 08:35:13 [2108] [DEBUG] < 25> IP BLOCKING: finished applying filtering
rules for 46679 entries
2020-08-25 08:35:17 [2108] [DEBUG] < 38> DnsCryptProxy IPv4: dnscrypt-proxy [5972]:
[ERROR] Unable to retrieve server certificates
2020-08-25 08:35:22 [2108] [DEBUG] < 23> Dns Protection: NetworkProbe: refreshing
dns64 cache (doing dns64 discovery)
[WARNING] recvfrom(client): [Connection reset by peer [WSAECONNRESET ]]
from 200.35.174.126
from 200.35.174.127
2020-08-25 08:35:26 [2108] [DEBUG] < 23> Dns Protection: NetworkProbe: dns64 check
results will be cached for 285.7631857 more seconds
[INFO] Refetching server certificates
2020-08-25 08:36:06 [2108] [INFO ] < 8> nic defaults settings changed
2020-08-25 08:36:06 [2108] [DEBUG] < 8> persisted nic details updated to
Controller","dns":
[]}
system resolver check cache
from 200.35.174.126
from 200.35.174.127
from 200.35.174.126
from 200.35.174.127
Controller","dns":
[]}
Controller","dns":
[]}
from 200.35.174.126
from 200.35.174.127
from 200.35.174.126
from 200.35.174.127
Controller","dns":
[]}
Controller","dns":
[]}
2020-08-25 08:38:06 [2108] [DEBUG] < 23> Dns Protection IPv4 State Machine: we seem
to have failed either A or AAAA record tests; error count 1
from 200.35.174.126
from 200.35.174.127
from 200.35.174.126
from 200.35.174.127
Controller","dns":
[]}
from 200.35.174.126
from 200.35.174.127
2020-08-25 08:39:59 [2108] [DEBUG] < 55> scheduling asset sync
2020-08-25 08:39:59 [2108] [DEBUG] < 27> Syncing to cloud
https://sync.hydra.opendns.com/v3/organizations/2625726/roamingdevices/0101EE3A617B
9D1A/sync?api-key=877E1202C047B9E37CC7BB789DF59685
2020-08-25 08:39:59 [2108] [DEBUG] < 27> POST DATA: {"status":
{"platform":"win_generic","upTime":50890,"hostname":"153INPLANTCG","osVersion":"Mic
rosoft Windows NT 6.1.7601 Service Pack
1","state":0,"vaOriginId":"","bundleId":"","state6":1,"vaOriginId6":"","bundleId6":
"","originTypeName":"roaming","dns64Detected":false,"activeFlags":
[],"dotNetFramework":"4.7.2"},"upgrade":
{"currentVersion":"2.2.356","upgradeReady":false,"upgradeError":"none"},"metrics":
{"upld":{"0":null},"failup":{"0":null},"upldkbyte":{"0":null},"lgkbyte":
{"10240":null},"ipblocking":
{"sc":"0","se":"50712","cac":"50","cec":"49","ce":"true","cc":"false"}}}
2020-08-25 08:39:59 [2108] [DEBUG] < 27> Transport: using web proxy for POST
2020-08-25 08:40:02 [2108] [DEBUG] < 27> GOT SYNC RESPONSE:
{"allowUdpToTcpFallback":false,"beaconConfig":
{"apiUrl":"https://beacon.p1.opendns.com/upload","sendLogs":false,"sendLogsInterval
":900,"writeLogs":true},"bundleId":0,"bundleId6":0,"customerNetworkProbeName":"","d
isableWithACVpnFullTunnel":false,"displayName":"153INPLANTCG","dnsTimeoutOverrideSe
conds":0,"downloadInterval":135,"downloadPath":"https://disthost.umbrella.com/roami
ng/upgrade/win/production/","enableDns6":true,"enableIdentity":true,"failClosedOpti
on":0,"ignoreVA":false,"ipFilteringEnabled":false,"ipKillSwitch":0,"ipSyncHost":"ip
l.opendns.com","logLevel":"debug","manifestUrl":"https://disthost.umbrella.com/roam
ing/upgrade/win/production/manifest.json","networkDisable":false,"noAutoSuffix":fal
se,"noNXDOMAIN":false,"policy":"Unknown Policy","policy6":"Unknown
Policy","respectCiscoTND":false,"runDiagnostic":false,"runDiagnosticDomain":"","erc
RecoveryOption":0,"statLogging":"enabled","statLogging6":"enabled","stopKeySeed":""
,"supportEmail":"umbrella-
support@opendns.com","uninstallKeySeed":"","swgCommonConfig":null,"swgDeviceConfig"
:null,"swgOrgConfig":null,"swgIsLicensed":false,"syncHost":"sync.hydra.opendns.com"
,"syncInterval":31,"telemetryConfig":
{"send":false,"write":false},"upgradeWhenReady":true,"useLegacyBindingOrder":false,
"userNotificationLevel":0,"whitelist":["*.10.in-addr.arpa","*.16.172.in-
addr.arpa","*.168.192.in-addr.arpa","*.17.172.in-addr.arpa","*.18.172.in-
addr.arpa","*.31.172.in-addr.arpa","*.local"]}
2020-08-25 08:40:02 [2108] [DEBUG] < 27> Changing SyncInterval to: 1860000
2020-08-25 08:40:02 [2108] [DEBUG] < 27> wrote
{"upgradeWhenReady":true,"manifestUrl":"https://disthost.umbrella.com/roaming/upgra
de/win/production/manifest.json","downloadPath":"https://disthost.umbrella.com/roam
ing/upgrade/win/production/","downloadInterval":135.0,"syncInterval":31.0,"displayN
ame":"153INPLANTCG","supportEmail":"umbrella-support@opendns.com","whitelist":
["*.10.in-addr.arpa","*.16.172.in-addr.arpa","*.168.192.in-addr.arpa","*.17.172.in-
addr.arpa","*.30.172.in-addr.arpa","*.31.172.in-
addr.arpa","*.local"],"networkDisable":false,"statLogging":"enabled","bundleId":"0"
,"ipSyncHost":"ipl.opendns.com","syncHost":"sync.hydra.opendns.com","enableDns6":tr
ue,"enableDns4":true,"ipFilteringEnabled":false,"ipKillSwitch":0,"beaconConfig":
":900.0,"writeLogs":true},"runDiagnostic":false,"runDiagnosticDomain":"","logLevel"
:"debug","telemetryConfig":
{"send":false,"write":false},"customerNetworkProbeName":"","customerNetworkProbeNoR
ecurse":false,"respectCiscoTND":false,"disableWithACVpnFullTunnel":false,"enableIde
ntity":true,"orgInfo":null,"dnsTimeoutOverrideSeconds":0,"useLegacyBindingOrder":fa
lse,"ercRecoveryOptions":0,"ignoreVA":false} to C:\ProgramData\OpenDNS\ERC\sync-
latest.json
2020-08-25 08:40:02 [2108] [INFO ] < 27> Dns Protection: updating policy...
2020-08-25 08:40:02 [2108] [DEBUG] < 27> Changing DownloadInterval to: 8100000 ms
2020-08-25 08:40:02 [2108] [INFO ] < 26> IP Protection: disabling ip blocking
2020-08-25 08:40:02 [2108] [INFO ] < 26> IP Protection: disconnecting Umbrella
connection
2020-08-25 08:40:02 [2108] [INFO ] < 26> IP Protection: about to call hangup
2020-08-25 08:40:02 [2108] [DEBUG] < 25> IP BLOCKING: tearing down routes and
blocks
Controller","dns":
[]}
Controller","dns":
[]}
2020-08-25 08:40:10 [2108] [DEBUG] < 25> IP BLOCKING: teardown complete
2020-08-25 08:40:10 [2108] [ERROR] < 25> IP BLOCKING: attempting to hang up when no
connection is active
2020-08-25 08:40:10 [2108] [INFO ] < 26> IP Protection: after hangup
2020-08-25 08:40:10 [2108] [DEBUG] < 26> IP Protection: disconnect complete
from 200.35.174.126
from 200.35.174.127
from 200.35.174.126
from 200.35.174.127
Controller","dns":
[]}
Controller","dns":
[]}
from 200.35.174.126
from 200.35.174.127
from 200.35.174.126
from 200.35.174.127
from 200.35.174.126
from 200.35.174.127
Controller","dns":
[]}
from 200.35.174.126
from 200.35.174.127
from 200.35.174.126
from 200.35.174.127
Controller","dns":
[]}
from 200.35.174.126
from 200.35.174.127
2020-08-25 08:43:27 [2108] [DEBUG] < 23> Dns Protection IPv4 State Machine: state
machine indicates that nics should use their default dns settings
2020-08-25 08:43:27 [2108] [DEBUG] < 10> network change - old: {Local Area
Connection,e,[192.168.8.190],[192.168.8.251],[127.0.0.1]}
2020-08-25 08:43:27 [2108] [DEBUG] < 23> restored nic {A921D60A-5138-4D67-9174-
2030BE1FBBC3} dns addresses to []
2020-08-25 08:43:27 [2108] [DEBUG] < 10> network change - new: {Local Area
Connection,e,[192.168.8.190],[192.168.8.251],
[8.8.8.8,200.35.174.126,200.35.174.127]}
2020-08-25 08:43:27 [2108] [DEBUG] < 10> network change - diff: Local Area
Connection:dns:[127.0.0.1]=>[8.8.8.8,200.35.174.126,200.35.174.127]
2020-08-25 08:43:27 [2108] [INFO ] < 23> Dns Protection IPv4 State Machine: state
changed: [Protected] => [FailOpen]
{"nicDetails":[],"transientDnsAddresses4":[],"transientDnsAddresses6":[]}
from 200.35.174.126
from 200.35.174.127
2020-08-25 08:43:32 [2108] [DEBUG] < 23> Dns Protection IPv4 State Machine:
dnscrypt-proxy.exe will restart; desired dnscrypt-proxy.exe run state changed
(transparent => encrypted)
restarting dnscrypt-proxy.exe; changed state: [FailOpen] => [Reserved]
Recreating PersistedNicDefaults.json
2020-08-25 08:43:32 [2108] [INFO ] < 23> DnsCryptProxy IPv4: Launching C:\Program
Files (x86)\OpenDNS\Umbrella Roaming Client\dnscrypt-proxy.exe --local-
address=127.0.0.1 --resolver-address=208.67.222.222:443 --plugin="C:\Program Files
(x86)\OpenDNS\Umbrella Roaming Client\libdcplugin_erc.dll,-i,192.168.8.190,-
o,2625726,-d,0101EE3A617B9D1A,-n,-
w,C:\ProgramData\OpenDNS\ERC\proxy_whitelist4.txt,C:\ProgramData\OpenDNS\ERC\Resolv
erV4-1-A921D60A51384D6791742030BE1FBBC3-resolv.conf"
[INFO] Loading plugin [C:\Program Files (x86)\OpenDNS\Umbrella Roaming
Client\libdcplugin_erc.dll]
[INFO] erc: local address is 192.168.8.190
[INFO] erc: org id is 2625726
[INFO] erc: using device id '0101EE3A617B9D1A'
[INFO] erc: forwardnx: 1
[INFO] erc: whitelist loaded from C:\ProgramData\OpenDNS\ERC\proxy_whitelist4.txt
[INFO] erc: loaded resolv_conf file C:\ProgramData\OpenDNS\ERC\ResolverV4-1-
[INFO] erc: Using nameserver 8.8.8.8:53 from C:\ProgramData\OpenDNS\ERC\ResolverV4-
1-A921D60A51384D6791742030BE1FBBC3-resolv.conf
[INFO] erc: Using nameserver 200.35.174.126:53 from
resolv.conf
resolv.conf
[INFO] Loaded plugin: [Perform deviceid, whitelist and forwardernx services]
[INFO] Generating a new key pair
[INFO] Done
[INFO] Proxying from 127.0.0.1:53 to 208.67.222.222:443
[WARNING] Encrypted probe dropped, no certs
encrypted probe error count has reached maximum allowable failures; we'll try
protected mode next
(encrypted => transparent)
address=127.0.0.1 --resolver-address=208.67.222.222:53 --transparent
--plugin="C:\Program Files (x86)\OpenDNS\Umbrella Roaming
Client\libdcplugin_erc.dll,-i,192.168.8.190,-o,2625726,-d,0101EE3A617B9D1A,-n,-
resolv.conf
resolv.conf
[INFO] Done
[INFO] Running in transparent mode...
[INFO] also opening encrypted connection from 127.0.0.1:53 to 208.67.222.222:443
protected mode next
from 200.35.174.126
from 200.35.174.127
machine indicates that nics should use localhost for dns
changed: [Reserved] => [Protected]
Connection,e,[192.168.8.190],[192.168.8.251],
[8.8.8.8,200.35.174.126,200.35.174.127]}
Connection,e,[192.168.8.190],[192.168.8.251],[127.0.0.1]}
Connection:dns:[8.8.8.8,200.35.174.126,200.35.174.127]=>[127.0.0.1]
Controller","dns":
[]}
from 200.35.174.126
from 200.35.174.127
Controller","dns":
[]}
Controller","dns":
[]}
Controller","dns":
[]}
Controller","dns":
[]}
from 200.35.174.126
from 200.35.174.127
from 200.35.174.126
from 200.35.174.127
Controller","dns":
[]}
Controller","dns":
[]}
from 200.35.174.126
from 200.35.174.127
2020-08-25 08:46:42 [2108] [INFO ] < 26> IP Protection: IP blocking not enabled;
will not connect to Umbrella
from 200.35.174.126
from 200.35.174.127
Controller","dns":
[]}
Controller","dns":
[]}
Controller","dns":
[]}
from 200.35.174.126
from 200.35.174.127
Controller","dns":
[]}
Controller","dns":
[]}
Controller","dns":
[]}
from 200.35.174.126
from 200.35.174.127
from 200.35.174.126
from 200.35.174.127
Controller","dns":
[]}
Controller","dns":
[]}
from 200.35.174.126
from 200.35.174.127
from 200.35.174.126
from 200.35.174.127
Connection,e,[192.168.8.190],[192.168.8.251],[127.0.0.1]}
Connection,e,[192.168.8.190],[192.168.8.251],
[8.8.8.8,200.35.174.126,200.35.174.127]}
Connection:dns:[127.0.0.1]=>[8.8.8.8,200.35.174.126,200.35.174.127]
from 200.35.174.126
from 200.35.174.127
o,2625726,-d,0101EE3A617B9D1A,-n,-
resolv.conf
resolv.conf
[INFO] Done
changed: [Reserved] => [FailOpen]
from 200.35.174.126
from 200.35.174.127
protected mode next
resolv.conf
resolv.conf
[INFO] Done
from 200.35.174.126
from 200.35.174.127
protected mode next
from 200.35.174.126
from 200.35.174.127
Connection,e,[192.168.8.190],[192.168.8.251],
[8.8.8.8,200.35.174.126,200.35.174.127]}
Connection,e,[192.168.8.190],[192.168.8.251],[127.0.0.1]}
Connection:dns:[8.8.8.8,200.35.174.126,200.35.174.127]=>[127.0.0.1]
Controller","dns":
[]}
Controller","dns":
[]}
from 200.35.174.126
from 200.35.174.127
Controller","dns":
[]}
Controller","dns":
[]}
from 200.35.174.126
from 200.35.174.127
from 200.35.174.126
from 200.35.174.127
Controller","dns":
[]}
Controller","dns":
[]}
from 200.35.174.126
from 200.35.174.127
Controller","dns":
[]}
from 200.35.174.126
from 200.35.174.127
from 200.35.174.126
from 200.35.174.127
Controller","dns":
[]}
Controller","dns":
[]}
from 200.35.174.126
from 200.35.174.127
Controller","dns":
[]}
Controller","dns":
[]}
from 200.35.174.126
from 200.35.174.127
from 200.35.174.126
from 200.35.174.127
Controller","dns":
[]}
Controller","dns":
[]}
from 200.35.174.126
from 200.35.174.127
from 200.35.174.126
from 200.35.174.127
Controller","dns":
[]}
Controller","dns":
[]}
from 200.35.174.126
from 200.35.174.127
Controller","dns":
[]}
from 200.35.174.126
from 200.35.174.127
from 200.35.174.126
from 200.35.174.127
Controller","dns":
[]}
from 200.35.174.126
from 200.35.174.127
Controller","dns":
[]}
Controller","dns":
[]}
Controller","dns":
[]}
Connection,e,[192.168.8.190],[192.168.8.251],[127.0.0.1]}
Connection,e,[192.168.8.190],[192.168.8.251],
[8.8.8.8,200.35.174.126,200.35.174.127]}
Connection:dns:[127.0.0.1]=>[8.8.8.8,200.35.174.126,200.35.174.127]
from 200.35.174.126
from 200.35.174.127
from 200.35.174.126
from 200.35.174.127
o,2625726,-d,0101EE3A617B9D1A,-n,-
resolv.conf
resolv.conf
[INFO] Done
from 200.35.174.126
from 200.35.174.127
protected mode next
resolv.conf
resolv.conf
[INFO] Done
o,2625726,-d,0101EE3A617B9D1A,-n,-
resolv.conf
resolv.conf
[INFO] Done
from 200.35.174.126
from 200.35.174.127
protected mode next
resolv.conf
resolv.conf
[INFO] Done
protected mode next
from 200.35.174.126
from 200.35.174.127
Connection,e,[192.168.8.190],[192.168.8.251],
[8.8.8.8,200.35.174.126,200.35.174.127]}
Connection,e,[192.168.8.190],[192.168.8.251],[127.0.0.1]}
Connection:dns:[8.8.8.8,200.35.174.126,200.35.174.127]=>[127.0.0.1]
Controller","dns":
[]}
from 200.35.174.126
from 200.35.174.127
from 200.35.174.126
from 200.35.174.127
Controller","dns":
[]}
Controller","dns":
[]}
Controller","dns":
[]}
Controller","dns":
[]}
Controller","dns":
[]}
from 200.35.174.126
from 200.35.174.127
from 200.35.174.126
from 200.35.174.127
Controller","dns":
[]}
from 200.35.174.126
from 200.35.174.127
Controller","dns":
[]}
Controller","dns":
[]}
Controller","dns":
[]}
from 200.35.174.126
from 200.35.174.127
from 200.35.174.126
from 200.35.174.127
Controller","dns":
[]}
Controller","dns":
[]}
from 200.35.174.126
from 200.35.174.127
Controller","dns":
[]}
Controller","dns":
[]}
Controller","dns":
[]}
from 200.35.174.126
from 200.35.174.127
from 200.35.174.126
from 200.35.174.127
Controller","dns":
[]}
from 200.35.174.126
from 200.35.174.127
1","state":2,"vaOriginId":"","bundleId":"1405146","state6":1,"vaOriginId6":"","bund
leId6":"","originTypeName":"roaming","dns64Detected":false,"activeFlags":
{"sc":"0","se":"0","cac":"0","cec":"0","ce":"false","cc":"false"}}}
Controller","dns":
[]}
Controller","dns":
[]}
":900,"writeLogs":true},"bundleId":1405146,"bundleId6":0,"customerNetworkProbeName"
:"","disableWithACVpnFullTunnel":false,"displayName":"153INPLANTCG","dnsTimeoutOver
rideSeconds":0,"downloadInterval":113,"downloadPath":"https://disthost.umbrella.com
/roaming/upgrade/win/production/","enableDns6":true,"enableIdentity":true,"failClos
edOption":0,"ignoreVA":false,"ipFilteringEnabled":true,"ipKillSwitch":0,"ipSyncHost
":"ipl.opendns.com","logLevel":"debug","manifestUrl":"https://disthost.umbrella.com
/roaming/upgrade/win/production/manifest.json","networkDisable":false,"noAutoSuffix
":false,"noNXDOMAIN":false,"policy":"NormalUser-Global-Policy01","policy6":"Unknown
2020-08-25 09:11:02 [2108] [DEBUG] < 27> wrote
addr.arpa","*.local"],"networkDisable":false,"statLogging":"enabled","bundleId":"14
05146","ipSyncHost":"ipl.opendns.com","syncHost":"sync.hydra.opendns.com","enableDn
s6":true,"enableDns4":true,"ipFilteringEnabled":true,"ipKillSwitch":0,"beaconConfig
":
latest.json
2020-08-25 09:11:02 [2108] [INFO ] < 26> IP Protection: enabling ip blocking
2020-08-25 09:11:02 [2108] [DEBUG] < 25> IP BLOCKING: applying filtering rules for
46679 entries...
2020-08-25 09:11:02 [2108] [DEBUG] < 42> IP Protection: Trying
DownloadTunnelListsV3...
2020-08-25 09:11:02 [2108] [DEBUG] < 42> IP list v1 transport: using web proxy for
POST
2020-08-25 09:11:02 [2108] [INFO ] < 26> IP Protection: initiating Umbrella
connection
2020-08-25 09:11:02 [2108] [DEBUG] < 26> IP Protection: starting connection
watchdog
connection
watchdog
2020-08-25 09:11:03 [2108] [INFO ] < 42> IP Protection: ipl.opendns.com seems to
map to qhost-07df46488c1378904.quadra.p1.use1.opendns.com-
2020-08-25 09:11:03 [2108] [DEBUG] < 42> IP tunnel downloader v3: downloading ip-
tunnel-v2 from
https://ipl.opendns.com/v3/org/2625726/device/0101EE3A617B9D1A/bundle/1405146/ip-
tunnel-v2
POST
2020-08-25 09:11:03 [2108] [DEBUG] < 42> IP tunnel downloader v3: download
succeeded for ip-tunnel-v2
2020-08-25 09:11:03 [2108] [DEBUG] < 42> Got NotModified for etag:
16648da8000bd957fc28cf04c73c0f60770269ce
2020-08-25 09:11:03 [2108] [INFO ] < 42> IP Protection: updated ip tunnel lists
from ipl.opendns.com (<unknown>)
2020-08-25 09:11:03 [2108] [DEBUG] < 42> IP Protection: DownloadTunnelListsV3
returning true
2020-08-25 09:11:03 [2108] [DEBUG] < 26> IP Protection: applying IP lists
from 200.35.174.126
from 200.35.174.127
2020-08-25 09:11:14 [2108] [INFO ] < 25> IP BLOCKING: attempting VPN connection to
ipf.opendns.com as 0101EE3A617B9D1A (connection id 1) on threadid 2544...
2020-08-25 09:11:14 [2108] [ERROR] < 25> IP BLOCKING: attempting to dial while
already connected
2020-08-25 09:11:14 [2108] [INFO ] < 26> IP Protection: connection already in
progress
2020-08-25 09:11:14 [2108] [DEBUG] < 25> IP BLOCKING: greylist before cidr
compression: 2 entries, after cidr compression: 2 entries
2020-08-25 09:11:14 [2108] [DEBUG] < 25> IP BLOCKING: blacklist before cidr
2020-08-25 09:11:14 [2108] [INFO ] < 12> IP BLOCKING: RasDialFunc2 callback.
threadid 4612; id 1; State: 0; Error: 0x0 (0)
2020-08-25 09:11:14 [2108] [DEBUG] < 26> IP Protection: connection state changed to
RASCS_OpenPort
46679 entries...
RASCS_PortOpened
Controller","dns":
[]}
RASCS_ConnectDevice
RASCS_DeviceConnected
RASCS_AllDevicesConnected
RASCS_Authenticate
from 200.35.174.126
from 200.35.174.127
rules for 3 entries
RASCS_AuthNotify
2020-08-25 09:11:23 [2108] [ERROR] < 12> IP BLOCKING: RasDialFunc2: error: 809 (No
se pudo establecer la conexi�n de red entre el equipo y el servidor VPN porque el
servidor remoto no responde. Puede ser debido a que uno de los dispositivos de red
(como firewalls, NAT, enrutadores, etc.) entre el equipo y el servidor remoto no
est� configurado para permitir conexiones VPN. P�ngase en contacto con el
administrador o su proveedor de servicios para determinar el dispositivo que pueda
ser la causa del problema.)
2020-08-25 09:11:23 [2108] [ERROR] < 26> IP Protection: error connecting to
ipf.opendns.com in state 6; err 809-0: No se pudo establecer la conexi�n de red
entre el equipo y el servidor VPN porque el servidor remoto no responde. Puede ser
debido a que uno de los dispositivos de red (como firewalls, NAT, enrutadores,
etc.) entre el equipo y el servidor remoto no est� configurado para permitir
conexiones VPN. P�ngase en contacto con el administrador o su proveedor de
servicios para determinar el dispositivo que pueda ser la causa del problema.
connection
2020-08-25 09:11:23 [2108] [INFO ] < 25> IP BLOCKING: disconnecting connection id 1
2020-08-25 09:11:23 [2108] [INFO ] < 25> IP BLOCKING: hangup error code: 668
2020-08-25 09:11:23 [2108] [INFO ] < 25> IP BLOCKING: waiting for disconnect to
finish (max 3 seconds)...
2020-08-25 09:11:23 [2108] [INFO ] < 25> IP BLOCKING: disconnect complete
2020-08-25 09:11:23 [2108] [INFO ] < 26> IP Protection: will re-attempt connection
in 10000 milliseconds
2020-08-25 09:11:32 [2108] [DEBUG] < 26> IP Protection: connection state is
RASCS_Disconnected; stopping connection watchdog
connection
watchdog
RASCS_OpenPort
RASCS_PortOpened
RASCS_ConnectDevice
RASCS_Authenticate
from 200.35.174.126
from 200.35.174.127
RASCS_AuthNotify
connection
Controller","dns":
[]}
from 200.35.174.126
from 200.35.174.127
connection
watchdog
RASCS_OpenPort
RASCS_PortOpened
RASCS_ConnectDevice
RASCS_Authenticate
RASCS_AuthNotify
connection
from 200.35.174.126
from 200.35.174.127
Controller","dns":
[]}
Controller","dns":
[]}
from 200.35.174.126
from 200.35.174.127
connection
watchdog
RASCS_OpenPort
RASCS_PortOpened
RASCS_ConnectDevice
RASCS_Authenticate
RASCS_AuthNotify
connection
Controller","dns":
[]}
from 200.35.174.126
from 200.35.174.127
from 200.35.174.126
from 200.35.174.127
Controller","dns":
[]}
Controller","dns":
[]}
from 200.35.174.126
from 200.35.174.127
from 200.35.174.126
from 200.35.174.127
Controller","dns":
[]}
from 200.35.174.126
from 200.35.174.127
connection
watchdog
RASCS_OpenPort
RASCS_PortOpened
RASCS_ConnectDevice
RASCS_Authenticate
from 200.35.174.126
from 200.35.174.127
RASCS_AuthNotify
connection
Controller","dns":
[]}
from 200.35.174.126
from 200.35.174.127
from 200.35.174.126
from 200.35.174.127
Controller","dns":
[]}
Controller","dns":
[]}
from 200.35.174.126
from 200.35.174.127
Controller","dns":
[]}
from 200.35.174.126
from 200.35.174.127
from 200.35.174.126
from 200.35.174.127
Controller","dns":
[]}
from 200.35.174.126
from 200.35.174.127
from 200.35.174.126
from 200.35.174.127
connection
watchdog
RASCS_OpenPort
RASCS_PortOpened
RASCS_ConnectDevice
RASCS_Authenticate
Controller","dns":
[]}
Controller","dns":
[]}
RASCS_AuthNotify
connection
from 200.35.174.126
from 200.35.174.127
from 200.35.174.126
from 200.35.174.127
Controller","dns":
[]}
from 200.35.174.126
from 200.35.174.127
from 200.35.174.126
from 200.35.174.127
Controller","dns":
[]}
from 200.35.174.126
from 200.35.174.127
Controller","dns":
[]}
from 200.35.174.126
from 200.35.174.127
Connection,e,[192.168.8.190],[192.168.8.251],[127.0.0.1]}
Connection,e,[192.168.8.190],[192.168.8.251],
[8.8.8.8,200.35.174.126,200.35.174.127]}
Connection:dns:[127.0.0.1]=>[8.8.8.8,200.35.174.126,200.35.174.127]
from 200.35.174.126
from 200.35.174.127
o,2625726,-d,0101EE3A617B9D1A,-n,-
resolv.conf
resolv.conf
[INFO] Done
protected mode next
resolv.conf
resolv.conf
[INFO] Done
protected mode next
from 200.35.174.126
from 200.35.174.127
Connection,e,[192.168.8.190],[192.168.8.251],
[8.8.8.8,200.35.174.126,200.35.174.127]}
Connection,e,[192.168.8.190],[192.168.8.251],[127.0.0.1]}
Connection:dns:[8.8.8.8,200.35.174.126,200.35.174.127]=>[127.0.0.1]
Controller","dns":
[]}
from 200.35.174.126
from 200.35.174.127
POST
Controller","dns":
[]}
Controller","dns":
[]}
map to qhost-0d98f97c812607300.quadra.p1.use1.opendns.com-
tunnel-v2 from
tunnel-v2
POST
from 200.35.174.126
from 200.35.174.127
2020-08-25 09:26:22 [2108] [DEBUG] < 41> IP tunnel downloader v3: ipblock data
verified, (3ba5a17778118ab5e1ee7488dde944def3124a11)
2020-08-25 09:26:22 [2108] [DEBUG] < 41> IP tunnel downloader v3: downloaded ip-
tunnel-v2 data validated; checksum: 3ba5a17778118ab5e1ee7488dde944def3124a11
2020-08-25 09:26:22 [2108] [DEBUG] < 41> _etagValue:
3ba5a17778118ab5e1ee7488dde944def3124a11
2020-08-25 09:26:22 [2108] [DEBUG] < 41> _lastModifiedValue: Tue, 25 Aug 2020
15:22:35 GMT
2020-08-25 09:26:22 [2108] [DEBUG] < 41> serverId: qhost-
0d49d523603751486.quadra.p1.use1.opendns.com-
from ipl.opendns.com (qhost-0d49d523603751486.quadra.p1.use1.opendns.com-)
returning true
46681 entries...
Controller","dns":
[]}
from 200.35.174.126
from 200.35.174.127
from 200.35.174.126
from 200.35.174.127
connection
watchdog
RASCS_OpenPort
RASCS_PortOpened
RASCS_ConnectDevice
RASCS_Authenticate
RASCS_AuthNotify
connection
Controller","dns":
[]}
Controller","dns":
[]}
from 200.35.174.126
from 200.35.174.127
from 200.35.174.126
from 200.35.174.127
Controller","dns":
[]}
Controller","dns":
[]}
from 200.35.174.126
from 200.35.174.127
from 200.35.174.126
from 200.35.174.127
2020-08-25 09:29:32 [2108] [WARN ] < 23> Dns Protection IPv4 State Machine: we have
detected potential interference with A and/or AAAA DNS queries; there may be some
software on the system that is causing problems
2020-08-25 09:29:32 [2108] [WARN ] < 23> Dns Protection IPv4 State Machine: DNS
protection for this protocol stack will be temporarily suspended
Connection,e,[192.168.8.190],[192.168.8.251],[127.0.0.1]}
Connection,e,[192.168.8.190],[192.168.8.251],
[8.8.8.8,200.35.174.126,200.35.174.127]}
Connection:dns:[127.0.0.1]=>[8.8.8.8,200.35.174.126,200.35.174.127]
from 200.35.174.126
from 200.35.174.127
protected mode next
from 200.35.174.126
from 200.35.174.127
protected mode next
from 200.35.174.126
from 200.35.174.127
2020-08-25 09:31:06 [2108] [WARN ] < 23> Dns Protection IPv4 State Machine: we have
detected potential interference with A and/or AAAA DNS queries; there may be some
software on the system that is causing problems
2020-08-25 09:31:06 [2108] [WARN ] < 23> Dns Protection IPv4 State Machine: DNS
protection for this protocol stack will be temporarily suspended
from 200.35.174.126
from 200.35.174.127
protected mode next
protected mode next
from 200.35.174.126
from 200.35.174.127
changed: [FailOpen] => [Protected]
Connection,e,[192.168.8.190],[192.168.8.251],
[8.8.8.8,200.35.174.126,200.35.174.127]}
Connection,e,[192.168.8.190],[192.168.8.251],[127.0.0.1]}
Connection:dns:[8.8.8.8,200.35.174.126,200.35.174.127]=>[127.0.0.1]
Controller","dns":
[]}
from 200.35.174.126
from 200.35.174.127
Controller","dns":
[]}
Controller","dns":
[]}
Controller","dns":
[]}
from 200.35.174.126
from 200.35.174.127
from 200.35.174.126
from 200.35.174.127
Controller","dns":
[]}
from 200.35.174.126
from 200.35.174.127
Controller","dns":
[]}
from 200.35.174.126
from 200.35.174.127
from 200.35.174.126
from 200.35.174.127
connection
watchdog
RASCS_OpenPort
RASCS_PortOpened
RASCS_ConnectDevice
RASCS_Authenticate
RASCS_AuthNotify
connection
Controller","dns":
[]}
from 200.35.174.126
from 200.35.174.127
from 200.35.174.126
from 200.35.174.127
Controller","dns":
[]}
Controller","dns":
[]}
from 200.35.174.126
from 200.35.174.127
Controller","dns":
[]}
from 200.35.174.126
from 200.35.174.127
from 200.35.174.126
from 200.35.174.127
Controller","dns":
[]}
from 200.35.174.126
from 200.35.174.127
Controller","dns":
[]}
2020-08-25 09:40:04 [2108] [DEBUG] < 27> wrote
":
latest.json
from 200.35.174.126
from 200.35.174.127
from 200.35.174.126
from 200.35.174.127
Controller","dns":
[]}
Controller","dns":
[]}
from 200.35.174.126
from 200.35.174.127
POST
map to qhost-05be48d27e0d6edb9.quadra.p1.use1.opendns.com-
tunnel-v2 from
tunnel-v2
POST
returning true
46681 entries...
Controller","dns":
[]}
Controller","dns":
[]}
Controller","dns":
[]}
Controller","dns":
[]}
rules for 3 entries
from 200.35.174.126
from 200.35.174.127
from 200.35.174.126
from 200.35.174.127
Controller","dns":
[]}
Controller","dns":
[]}
from 200.35.174.126
from 200.35.174.127
Controller","dns":
[]}
from 200.35.174.126
from 200.35.174.127
from 200.35.174.126
from 200.35.174.127
Controller","dns":
[]}
from 200.35.174.126
from 200.35.174.127
Controller","dns":
[]}
Controller","dns":
[]}
from 200.35.174.126
from 200.35.174.127
from 200.35.174.126
from 200.35.174.127
Controller","dns":
[]}
from 200.35.174.126
from 200.35.174.127
connection
watchdog
RASCS_OpenPort
RASCS_PortOpened
RASCS_ConnectDevice
RASCS_Authenticate
Controller","dns":
[]}
from 200.35.174.126
from 200.35.174.127
RASCS_AuthNotify
connection
from 200.35.174.126
from 200.35.174.127
Controller","dns":
[]}
from 200.35.174.126
from 200.35.174.127
Controller","dns":
[]}
from 200.35.174.126
from 200.35.174.127
from 200.35.174.126
from 200.35.174.127
Controller","dns":
[]}
from 200.35.174.126
from 200.35.174.127
from 200.35.174.126
from 200.35.174.127
Controller","dns":
[]}
Controller","dns":
[]}
from 200.35.174.126
from 200.35.174.127
Controller","dns":
[]}
from 200.35.174.126
from 200.35.174.127
from 200.35.174.126
from 200.35.174.127
from 200.35.174.126
from 200.35.174.127
Controller","dns":
[]}
from 200.35.174.126
from 200.35.174.127
from 200.35.174.126
from 200.35.174.127
Controller","dns":
[]}
Controller","dns":
[]}
from 200.35.174.126
from 200.35.174.127
Controller","dns":
[]}
from 200.35.174.126
from 200.35.174.127
from 200.35.174.126
from 200.35.174.127
Controller","dns":
[]}
Controller","dns":
[]}
Controller","dns":
[]}
from 200.35.174.126
from 200.35.174.127
from 200.35.174.126
from 200.35.174.127
POST
Controller","dns":
[]}
Controller","dns":
[]}
map to qhost-04fc9f99e9dd7ffc6.quadra.p1.use1.opendns.com-
tunnel-v2 from
tunnel-v2
POST
returning true
3 entries...
rules for 3 entries
from 200.35.174.126
from 200.35.174.127
Controller","dns":
[]}
from 200.35.174.126
from 200.35.174.127
Controller","dns":
[]}
from 200.35.174.126
from 200.35.174.127
from 200.35.174.126
from 200.35.174.127
from 200.35.174.126
from 200.35.174.127
Controller","dns":
[]}
from 200.35.174.126
from 200.35.174.127
Controller","dns":
[]}
Controller","dns":
[]}
from 200.35.174.126
from 200.35.174.127
from 200.35.174.126
from 200.35.174.127
connection
watchdog
RASCS_OpenPort
RASCS_PortOpened
RASCS_ConnectDevice
RASCS_Authenticate
RASCS_AuthNotify
connection
Controller","dns":
[]}
from 200.35.174.126
from 200.35.174.127
from 200.35.174.126
from 200.35.174.127
Controller","dns":
[]}
from 200.35.174.126
from 200.35.174.127
Controller","dns":
[]}
Controller","dns":
[]}
from 200.35.174.126
from 200.35.174.127
from 200.35.174.126
from 200.35.174.127
Controller","dns":
[]}
from 200.35.174.126
from 200.35.174.127
from 200.35.174.126
from 200.35.174.127
Controller","dns":
[]}
from 200.35.174.126
from 200.35.174.127
Controller","dns":
[]}
from 200.35.174.126
from 200.35.174.127
from 200.35.174.126
from 200.35.174.127
Controller","dns":
[]}
Controller","dns":
[]}
from 200.35.174.126
from 200.35.174.127
from 200.35.174.126
from 200.35.174.127
Controller","dns":
[]}
from 200.35.174.126
from 200.35.174.127
Controller","dns":
[]}
2020-08-25 10:08:05 [2108] [DEBUG] < 27> wrote
":
latest.json
VA/Network probe network change occurred during probe; ignoring probe results...
from 200.35.174.126
from 200.35.174.127
Controller","dns":
[]}
from 200.35.174.126
from 200.35.174.127
from 200.35.174.126
from 200.35.174.127
Controller","dns":
[]}
from 200.35.174.126
from 200.35.174.127
Controller","dns":
[]}
from 200.35.174.126
from 200.35.174.127
from 200.35.174.126
from 200.35.174.127
POST
map to qhost-07c622856eea4457e.quadra.p1.use1.opendns.com-
tunnel-v2 from
tunnel-v2
POST
2020-08-25 10:11:04 [2108] [DEBUG] < 18> IP tunnel downloader v3: ipblock data
verified, (33c1159bf23c41269e15ed1979d069fb7ad19f34)
2020-08-25 10:11:04 [2108] [DEBUG] < 18> IP tunnel downloader v3: downloaded ip-
tunnel-v2 data validated; checksum: 33c1159bf23c41269e15ed1979d069fb7ad19f34
2020-08-25 10:11:04 [2108] [DEBUG] < 18> _etagValue:
33c1159bf23c41269e15ed1979d069fb7ad19f34
2020-08-25 10:11:04 [2108] [DEBUG] < 18> _lastModifiedValue: Tue, 25 Aug 2020
16:06:16 GMT
2020-08-25 10:11:04 [2108] [DEBUG] < 18> serverId: qhost-
04fc9f99e9dd7ffc6.quadra.p1.use1.opendns.com-
from ipl.opendns.com (qhost-04fc9f99e9dd7ffc6.quadra.p1.use1.opendns.com-)
returning true
46682 entries...
Controller","dns":
[]}
from 200.35.174.126
from 200.35.174.127
Controller","dns":
[]}
Controller","dns":
[]}
from 200.35.174.126
from 200.35.174.127
from 200.35.174.126
from 200.35.174.127
Controller","dns":
[]}
Controller","dns":
[]}
Controller","dns":
[]}
from 200.35.174.126
from 200.35.174.127
Controller","dns":
[]}
from 200.35.174.126
from 200.35.174.127
from 200.35.174.126
from 200.35.174.127
Controller","dns":
[]}
from 200.35.174.126
from 200.35.174.127
from 200.35.174.126
from 200.35.174.127
Controller","dns":
[]}
from 200.35.174.126
from 200.35.174.127
Controller","dns":
[]}
Controller","dns":
[]}
from 200.35.174.126
from 200.35.174.127
from 200.35.174.126
from 200.35.174.127
connection
watchdog
RASCS_OpenPort
RASCS_PortOpened
RASCS_ConnectDevice
RASCS_Authenticate
RASCS_AuthNotify
connection
Controller","dns":
[]}
from 200.35.174.126
from 200.35.174.127
from 200.35.174.126
from 200.35.174.127
Controller","dns":
[]}
from 200.35.174.126
from 200.35.174.127
Controller","dns":
[]}
from 200.35.174.126
from 200.35.174.127
from 200.35.174.126
from 200.35.174.127
Controller","dns":
[]}
Controller","dns":
[]}
from 200.35.174.126
from 200.35.174.127
Controller","dns":
[]}
Controller","dns":
[]}
from 200.35.174.126
from 200.35.174.127
from 200.35.174.126
from 200.35.174.127
Controller","dns":
[]}
from 200.35.174.126
from 200.35.174.127
Controller","dns":
[]}
from 200.35.174.126
from 200.35.174.127
from 200.35.174.126
from 200.35.174.127
Controller","dns":
[]}
Controller","dns":
[]}
from 200.35.174.126
from 200.35.174.127
from 200.35.174.126
from 200.35.174.127
Controller","dns":
[]}
Controller","dns":
[]}
from 200.35.174.126
from 200.35.174.127
Controller","dns":
[]}
from 200.35.174.126
from 200.35.174.127
from 200.35.174.126
from 200.35.174.127
POST
Controller","dns":
[]}
map to qhost-0d49d523603751486.quadra.p1.use1.opendns.com-
tunnel-v2 from
tunnel-v2
POST
33c1159bf23c41269e15ed1979d069fb7ad19f34
returning true
46682 entries...
from 200.35.174.126
from 200.35.174.127
rules for 3 entries
Controller","dns":
[]}
from 200.35.174.126
from 200.35.174.127
from 200.35.174.126
from 200.35.174.127
Controller","dns":
[]}
from 200.35.174.126
from 200.35.174.127
Controller","dns":
[]}
Controller","dns":
[]}
Controller","dns":
[]}
from 200.35.174.126
from 200.35.174.127
from 200.35.174.126
from 200.35.174.127
from 200.35.174.126
from 200.35.174.127
Controller","dns":
[]}
Controller","dns":
[]}
from 200.35.174.126
from 200.35.174.127
from 200.35.174.126
from 200.35.174.127
Controller","dns":
[]}
from 200.35.174.126
from 200.35.174.127
Controller","dns":
[]}
Controller","dns":
[]}
Controller","dns":
[]}
from 200.35.174.126
from 200.35.174.127
from 200.35.174.126
from 200.35.174.127
Controller","dns":
[]}
from 200.35.174.126
from 200.35.174.127
from 200.35.174.126
from 200.35.174.127
Controller","dns":
[]}
from 200.35.174.126
from 200.35.174.127

153 Inplantcg

Hochgeladen von

Dokumentinformationen

Originaltitel

Copyright

Verfügbare Formate

Dieses Dokument teilen

Dokument teilen oder einbetten

Freigabeoptionen

Stufen Sie dieses Dokument als nützlich ein?

Sind diese Inhalte unangemessen?

Copyright:

Verfügbare Formate

153 Inplantcg

Hochgeladen von

Copyright:

Verfügbare Formate

command line args:

[C:\Program Files (x86)\OpenDNS\Umbrella Roaming

Results for: Version Info

"C:\Program Files (x86)\OpenDNS\Umbrella Roaming Client\UmbrellaDiagnostic.exe"

Nombre de host: 153INPLANTCG

Configuraci¢n de Perfil de dominio:

Configuraci¢n de Perfil privado:

Configuraci¢n de Perfil p£blico:

25/08/2020 09:25 a.m. <DIR> .

16/06/2020 09:48 a.m. <DIR> .

>#!éY#0ê' # è>##ëT# íT##êo

áY #êÏ #å¦ #ÞT #áY##‘T

No proxy settings found when looking up https://api.opendns.com/v3/ as INPLANT

{"nicDetails":[{"addressFamily":2,"description":"Realtek PCIe GBE Family

Das könnte Ihnen auch gefallen

153 Inplantcg

Hochgeladen von

Dokumentinformationen

Originaltitel

Copyright

Verfügbare Formate

Dieses Dokument teilen

Dokument teilen oder einbetten

Freigabeoptionen

Stufen Sie dieses Dokument als nützlich ein?

Sind diese Inhalte unangemessen?

Copyright:

Verfügbare Formate

153 Inplantcg

Hochgeladen von

Copyright:

Verfügbare Formate

command line args:

[C:\Program Files (x86)\OpenDNS\Umbrella Roaming

Results for: Version Info

"C:\Program Files (x86)\OpenDNS\Umbrella Roaming Client\UmbrellaDiagnostic.exe"

Nombre de host: 153INPLANTCG

Configuraci¢n de Perfil de dominio:

Configuraci¢n de Perfil privado:

Configuraci¢n de Perfil p£blico:

25/08/2020 09:25 a.m. <DIR> .

16/06/2020 09:48 a.m. <DIR> .

>#!éY#0ê' # è>##ëT# íT##êo

áY #êÏ #å¦ #ÞT #áY##‘T

No proxy settings found when looking up https://api.opendns.com/v3/ as INPLANT

{"nicDetails":[{"addressFamily":2,"description":"Realtek PCIe GBE Family

Das könnte Ihnen auch gefallen

>#!éY#0ê' # è>##ëT# íT##êo