Is it a hack attempt?

Reply

Join Date: Sep 2005
Posts: 5
Reputation: linpagla is an unknown quantity at this point 
Solved Threads: 0
linpagla linpagla is offline Offline
Newbie Poster

Is it a hack attempt?

 
0
  #1
Apr 5th, 2009
Hi,
Since last few days, I've been noticing that my bandwidth is being used somewhat more than usual for the same sort of browsing habits. Thus, I installed a program called 'ShowTraffic' and found a some entries similar to:
Src IP....................Src Port....Dest IP..................Dest Port
124.125.208.95.......1900.........239.255.255.250.....1900

None of these 2 IPs are mine. However the Src IP here, is very similar to mine (only the last number 95 differs from mine). This could mean another user nearby.
I don't use wireless. And I've to login with user/pswd every-time to connect (so its not really a 24x7 on connection).

Does the above info point to some sort of hack attempt by some neighbor of mine?
Last edited by linpagla; Apr 5th, 2009 at 2:36 pm. Reason: reformating
Reply With Quote Quick reply to this message  
Join Date: Aug 2007
Posts: 189
Reputation: martin5211 is an unknown quantity at this point 
Solved Threads: 14
martin5211 martin5211 is offline Offline
Junior Poster

Re: Is it a hack attempt?

 
0
  #2
Apr 16th, 2009
Could be from MSN Messenger, uPnP, try to close all programs and watch if the traffic changes. Hack attempts in proximity with neighbors happens usually with wireless communications. Also, try to scan your computer for spyware/malware (Spybot or Anti-Malware does).
Reply With Quote Quick reply to this message  
Join Date: Aug 2003
Posts: 372
Reputation: TheOgre is a jewel in the rough TheOgre is a jewel in the rough TheOgre is a jewel in the rough 
Solved Threads: 6
TheOgre's Avatar
TheOgre TheOgre is offline Offline
Posting Whiz

Re: Is it a hack attempt?

 
0
  #3
Apr 21st, 2009
It might be uPNP, as described here:

http://www.linuxsa.org.au/mailing-li...2-11/1134.html

Grab a copy of Wireshark (unless you're familiar with tcpdump and have a *nix machine) and check out your local traffic.
If you spend more on coffee than on IT security, you will be hacked.
What's more, you deserve to be hacked.
-- former White House cybersecurity czar Richard Clarke
Reply With Quote Quick reply to this message  
Join Date: Aug 2003
Posts: 372
Reputation: TheOgre is a jewel in the rough TheOgre is a jewel in the rough TheOgre is a jewel in the rough 
Solved Threads: 6
TheOgre's Avatar
TheOgre TheOgre is offline Offline
Posting Whiz

Re: Is it a hack attempt?

 
0
  #4
Apr 21st, 2009
You can also get some info on the IP owner here:
https://ws.arin.net/whois/?queryinput=239.255.255.250
If you spend more on coffee than on IT security, you will be hacked.
What's more, you deserve to be hacked.
-- former White House cybersecurity czar Richard Clarke
Reply With Quote Quick reply to this message  
Join Date: Aug 2003
Posts: 372
Reputation: TheOgre is a jewel in the rough TheOgre is a jewel in the rough TheOgre is a jewel in the rough 
Solved Threads: 6
TheOgre's Avatar
TheOgre TheOgre is offline Offline
Posting Whiz

Re: Is it a hack attempt?

 
0
  #5
Apr 21st, 2009
Just did a quick search and found this, which might help you:

http://www.nthelp.com/upnpscrewup.htm

http://support.microsoft.com/kb/317843/en-us
If you spend more on coffee than on IT security, you will be hacked.
What's more, you deserve to be hacked.
-- former White House cybersecurity czar Richard Clarke
Reply With Quote Quick reply to this message  
Reply

This thread is more than three months old.
Perhaps start a new thread instead?
Message:



Similar Threads
Other Threads in the Network Security Forum
Thread Tools Search this Thread



About Us | Contact Us | Advertise | DaniWeb | Acceptable Use Policy | RSS Feed

©2003 - 2009 DaniWeb® LLC