943,772 Members | Top Members by Rank

Hardware and Software > Networking > Is it a hack attempt?
Ad: Download FREE Network Management Software from Spiceworks
  • Networking Discussion Thread
  • Unsolved
  • Views: 716
  • Networking RSS
Permalink
Apr 5th, 2009
0

Is it a hack attempt?

Expand Post »
Hi,
Since last few days, I've been noticing that my bandwidth is being used somewhat more than usual for the same sort of browsing habits. Thus, I installed a program called 'ShowTraffic' and found a some entries similar to:
Src IP....................Src Port....Dest IP..................Dest Port
124.125.208.95.......1900.........239.255.255.250.....1900

None of these 2 IPs are mine. However the Src IP here, is very similar to mine (only the last number 95 differs from mine). This could mean another user nearby.
I don't use wireless. And I've to login with user/pswd every-time to connect (so its not really a 24x7 on connection).

Does the above info point to some sort of hack attempt by some neighbor of mine?
Last edited by linpagla; Apr 5th, 2009 at 2:36 pm. Reason: reformating
Similar Threads
Reputation Points: 10
Solved Threads: 0
Newbie Poster
linpagla is offline Offline
8 posts
since Sep 2005
Permalink
Apr 16th, 2009
0

Re: Is it a hack attempt?

Could be from MSN Messenger, uPnP, try to close all programs and watch if the traffic changes. Hack attempts in proximity with neighbors happens usually with wireless communications. Also, try to scan your computer for spyware/malware (Spybot or Anti-Malware does).
Reputation Points: 52
Solved Threads: 23
Posting Whiz in Training
martin5211 is offline Offline
271 posts
since Aug 2007
Permalink
Apr 21st, 2009
0

Re: Is it a hack attempt?

It might be uPNP, as described here:

http://www.linuxsa.org.au/mailing-li...2-11/1134.html

Grab a copy of Wireshark (unless you're familiar with tcpdump and have a *nix machine) and check out your local traffic.
Reputation Points: 128
Solved Threads: 8
Posting Whiz
TheOgre is offline Offline
390 posts
since Aug 2003
Permalink
Apr 21st, 2009
0

Re: Is it a hack attempt?

You can also get some info on the IP owner here:
https://ws.arin.net/whois/?queryinput=239.255.255.250
Reputation Points: 128
Solved Threads: 8
Posting Whiz
TheOgre is offline Offline
390 posts
since Aug 2003
Permalink
Apr 21st, 2009
0

Re: Is it a hack attempt?

Just did a quick search and found this, which might help you:

http://www.nthelp.com/upnpscrewup.htm

http://support.microsoft.com/kb/317843/en-us
Reputation Points: 128
Solved Threads: 8
Posting Whiz
TheOgre is offline Offline
390 posts
since Aug 2003

This thread is more than three months old

No one has posted to this discussion for at least three months. Please let old threads die and do not reply to them unless you feel you have something new and valuable to contribute that absolutely must be added to make the discussion complete. Otherwise, please start a new thread in this forum instead.
Message:
Previous Thread in Networking Forum Timeline: IP address
Next Thread in Networking Forum Timeline: Public Network Access





About Us | Contact Us | Advertise | Acceptable Use Policy
Forum Index | Build Custom RSS Feed


Follow us on Twitter


© 2011 DaniWeb® LLC