Page 1 of 2 12 LastLast
Results 1 to 15 of 23
  1. #1
    Legend
    Points: 148,471, Level: 100
    Level completed: 0%, Points required for next Level: 0
    Overall activity: 13.0%
    Achievements:
    SocialVeteranCreated Album pictures50000 Experience Points

    Join Date
    Oct 2007
    Location
    Marshalltown
    Posts
    10,687
    Points
    148,471
    Level
    100
    Thumbs Up
    Received: 460
    Given: 319

    Networking expert question

    I was just looking at my router's activity log and there's a bunch of entries that look like what's below. Any idea what this is? I'm not even sure what device this ip is coming from because it doesn't show up in clients list. Could be my Wii or DishNetwork box. The destination IP is in Mexico

    (12/16/09 07:52:18) Source:192.168.1.76, Destination:187.23.110.215, Name:eTyk8P
    (12/16/09 07:52:20) Source:192.168.1.76, Destination:187.23.110.215, Name:eTyk8P



  2. #2
    Legend
    Points: 176,100, Level: 100
    Level completed: 0%, Points required for next Level: 0
    Overall activity: 5.0%
    Achievements:
    SocialVeteran50000 Experience Points
    The_Architect's Avatar
    Join Date
    Apr 2006
    Location
    Focus Town
    Posts
    12,262
    Points
    176,100
    Level
    100
    Thumbs Up
    Received: 719
    Given: 3,022

    Re: Networking expert question

    internet porn


    Kansas wears Adidas.

  3. #3
    Addict
    Points: 59,206, Level: 75
    Level completed: 44%, Points required for next Level: 844
    Overall activity: 2.0%
    Achievements:
    Veteran50000 Experience Points
    pulse's Avatar
    Join Date
    Mar 2006
    Posts
    5,194
    Points
    59,206
    Level
    75
    Thumbs Up
    Received: 194
    Given: 132

    Re: Networking expert question

    Porn.



  4. #4
    Legend
    Points: 148,471, Level: 100
    Level completed: 0%, Points required for next Level: 0
    Overall activity: 13.0%
    Achievements:
    SocialVeteranCreated Album pictures50000 Experience Points

    Join Date
    Oct 2007
    Location
    Marshalltown
    Posts
    10,687
    Points
    148,471
    Level
    100
    Thumbs Up
    Received: 460
    Given: 319

    Re: Networking expert question

    Quote Originally Posted by The_Architect View Post
    internet porn
    Normally I'd accept that answer but I think I've determined that ip address is my work computer and it does not see porn.



  5. #5
    Legend
    Points: 397,819, Level: 100
    Level completed: 0%, Points required for next Level: 0
    Overall activity: 14.0%
    Achievements:
    SocialRecommendation Second ClassVeteran50000 Experience Points
    bos's Avatar
    Join Date
    Apr 2006
    Posts
    24,747
    Points
    397,819
    Level
    100
    Thumbs Up
    Received: 1,702
    Given: 1,242

    Re: Networking expert question

    I show brazil. Not sure what that would be. Have any spyware? Dishnetwork would not be pointing there.


    http://www.utrace.de/ip-adresse/187.23.110.215

    Shows some out in the middle of nowhere place in Blemneau, Brazil. Creepy.


    Last edited by bos; 12-16-2009 at 02:38 PM.

  6. #6
    Legend
    Points: 148,471, Level: 100
    Level completed: 0%, Points required for next Level: 0
    Overall activity: 13.0%
    Achievements:
    SocialVeteranCreated Album pictures50000 Experience Points

    Join Date
    Oct 2007
    Location
    Marshalltown
    Posts
    10,687
    Points
    148,471
    Level
    100
    Thumbs Up
    Received: 460
    Given: 319

    Re: Networking expert question

    Quote Originally Posted by bostinelosd View Post
    I show brazil. Not sure what that would be. Have any spyware? Dishnetwork would not be pointing there.
    I'm pretty careful about what I install on my computers so don't think I have any spyware. Also, found a bunch of those entries pointing to Japan too.



  7. #7
    Legend
    Points: 397,819, Level: 100
    Level completed: 0%, Points required for next Level: 0
    Overall activity: 14.0%
    Achievements:
    SocialRecommendation Second ClassVeteran50000 Experience Points
    bos's Avatar
    Join Date
    Apr 2006
    Posts
    24,747
    Points
    397,819
    Level
    100
    Thumbs Up
    Received: 1,702
    Given: 1,242

    Re: Networking expert question

    Quote Originally Posted by 1100011CS View Post
    I'm pretty careful about what I install on my computers so don't think I have any spyware. Also, found a bunch of those entries pointing to Japan too.

    They can get in even when careful. Grab a copy of spybot, or security essentials and do a quick scan. Cant hurt. Those locations are very fishy. Even if things were getting routed around, they will never dip out of the country like in most cases.



  8. #8
    Addict
    Points: 59,206, Level: 75
    Level completed: 44%, Points required for next Level: 844
    Overall activity: 2.0%
    Achievements:
    Veteran50000 Experience Points
    pulse's Avatar
    Join Date
    Mar 2006
    Posts
    5,194
    Points
    59,206
    Level
    75
    Thumbs Up
    Received: 194
    Given: 132

    Re: Networking expert question

    Asian and Brazilian... hmm..



  9. #9
    Speechless
    Points: 673,071, Level: 100
    Level completed: 0%, Points required for next Level: 0
    Overall activity: 45.0%
    Achievements:
    50000 Experience PointsVeteranOverdrive
    3TrueFans's Avatar
    Join Date
    Sep 2009
    Location
    Ames
    Posts
    27,360
    Points
    673,071
    Level
    100
    Thumbs Up
    Received: 4,864
    Given: 543

    Re: Networking expert question

    Quote Originally Posted by bostinelosd View Post
    I show brazil. Not sure what that would be. Have any spyware? Dishnetwork would not be pointing there.


    187.23.110.215 - IP-Adresse - utrace - IP-Adressen und Domainnamen lokalisieren

    Shows some out in the middle of nowhere place in Blemneau, Brazil. Creepy.
    Maybe he's been watching reruns of Carnivale on HBO.



  10. #10
    Legend
    Points: 397,819, Level: 100
    Level completed: 0%, Points required for next Level: 0
    Overall activity: 14.0%
    Achievements:
    SocialRecommendation Second ClassVeteran50000 Experience Points
    bos's Avatar
    Join Date
    Apr 2006
    Posts
    24,747
    Points
    397,819
    Level
    100
    Thumbs Up
    Received: 1,702
    Given: 1,242

    Re: Networking expert question

    Quote Originally Posted by 3TrueFans View Post
    Maybe he's been watching reruns of Carnivale on HBO.

    Dont even get me started on that show. How dare they end it when it started getting good.



  11. #11
    Addict
    Points: 63,822, Level: 78
    Level completed: 36%, Points required for next Level: 1,028
    Overall activity: 1.0%
    Achievements:
    Veteran50000 Experience Points
    jumbopackage's Avatar
    Join Date
    Sep 2007
    Posts
    5,482
    Points
    63,822
    Level
    78
    Thumbs Up
    Received: 22
    Given: 10

    Re: Networking expert question

    Some ISP in Brazil. Who knows what it is. Not enough detail from that packet capture to tell.

    I'd start by figuring out what machine has 192.168.1.76. If you can't figure it out easily, sometimes it helps to figure out what the MAC address is and then run it through something like this: MAC Address Decoder by Stefan Frei which will tell you at least who made the NIC, which often gives you an idea of what device it's in.

    Easy way to get the mac address is to open a command window and do a ping to that address, and then do an arp -a which should give you the MAC address.

    Wouldn't be surprised if it's legit traffic for a WII or something. Also wouldn't be surprised if you've got spyware.



  12. #12
    Speechless
    Points: 432,954, Level: 100
    Level completed: 0%, Points required for next Level: 0
    Overall activity: 10.0%
    Achievements:
    SocialVeteran50000 Experience Points
    alarson's Avatar
    Join Date
    Mar 2006
    Location
    West Des Moines, IA
    Posts
    22,909
    Points
    432,954
    Level
    100
    Thumbs Up
    Received: 1,768
    Given: 1,045

    Re: Networking expert question

    Quote Originally Posted by bostinelosd View Post
    Dont even get me started on that show. How dare they end it when it started getting good.
    I know! That show was amazing right when it died.


    Quote Originally Posted by ChrisMWilliams View Post
    If you guys come by Bondurant tonight, I'll **** all over every one of your dogs. I'm not the Mayor but I've been drinking a crap ton of water today and have plenty of water in the old radiator.

  13. #13
    Recruit
    Points: 6,404, Level: 23
    Level completed: 71%, Points required for next Level: 146
    Overall activity: 0%
    Achievements:
    Veteran5000 Experience Points

    Join Date
    Nov 2009
    Posts
    89
    Points
    6,404
    Level
    23
    Thumbs Up
    Received: 9
    Given: 6

    Re: Networking expert question

    Quote Originally Posted by jumbopackage View Post
    I'd start by figuring out what machine has 192.168.1.76. If you can't figure it out easily, sometimes it helps to figure out what the MAC address is and then run it through something like this: MAC Address Decoder by Stefan Frei which will tell you at least who made the NIC, which often gives you an idea of what device it's in.

    Easy way to get the mac address is to open a command window and do a ping to that address, and then do an arp -a which should give you the MAC address.
    Another way to figure out which machine 192.168.1.76 is, from a computer on your network:
    > ping -a 192.168.1.76

    SysInternals has a program called TcpView that shows a realtime list of all programs making network connections and to what addresses. You could try running that on the machine hitting Brazil/Japan to help get an idea of when it occurs and what program is doing it.

    Also, do you use torrents?



  14. #14
    Legend
    Points: 148,471, Level: 100
    Level completed: 0%, Points required for next Level: 0
    Overall activity: 13.0%
    Achievements:
    SocialVeteranCreated Album pictures50000 Experience Points

    Join Date
    Oct 2007
    Location
    Marshalltown
    Posts
    10,687
    Points
    148,471
    Level
    100
    Thumbs Up
    Received: 460
    Given: 319

    Re: Networking expert question

    Definitely not spyware. I'm guessing it's our remote management stuff. I know we offshored our help desk but thought it was to India. Maybe it's Brazil?

    The torrent suggestion would explain the ip's coming out of my other PC.



  15. #15
    Starter
    Points: 22,321, Level: 45
    Level completed: 75%, Points required for next Level: 229
    Overall activity: 0%
    Achievements:
    Veteran10000 Experience Points
    HawkFanISUalum's Avatar
    Join Date
    May 2009
    Location
    Iowa City, IA
    Posts
    789
    Points
    22,321
    Level
    45
    Thumbs Up
    Received: 1
    Given: 1

    Re: Networking expert question

    Does it give you any other information about the type of traffic (HTTP, FTP, etc.) or at least provide port numbers?



Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  
  • TV: Cyclones.TV
  • FOOTBALL: Iowa State vs. UNI
  • September 5, 2015
  • 07:00 PM