Page 1 of 2 12 LastLast
Results 1 to 15 of 23
  1. #1
    Addict
    Points: 181,216, Level: 100
    Level completed: 0%, Points required for next Level: 0
    Overall activity: 6.0%
    Achievements:
    SocialVeteranCreated Album pictures50000 Experience Points

    Join Date
    Oct 2007
    Location
    Marshalltown
    Posts
    9,959
    Points
    181,216
    Level
    100
    Thumbs Up
    Received: 125
    Given: 122

    Networking expert question

    I was just looking at my router's activity log and there's a bunch of entries that look like what's below. Any idea what this is? I'm not even sure what device this ip is coming from because it doesn't show up in clients list. Could be my Wii or DishNetwork box. The destination IP is in Mexico

    (12/16/09 07:52:18) Source:192.168.1.76, Destination:187.23.110.215, Name:”e¤”Ty°•k8P
    (12/16/09 07:52:20) Source:192.168.1.76, Destination:187.23.110.215, Name:”e¤”Ty°•k8P



  2. #2
    Legend
    Points: 168,248, Level: 100
    Level completed: 0%, Points required for next Level: 0
    Overall activity: 23.0%
    Achievements:
    SocialVeteran50000 Experience Points
    The_Architect's Avatar
    Join Date
    Apr 2006
    Location
    Focus Town
    Posts
    11,538
    Points
    168,248
    Level
    100
    Thumbs Up
    Received: 308
    Given: 1,193

    Re: Networking expert question

    internet porn


    While on live TV, Ford used a vulgar term to describe a private part of the female anatomy, adding that he was “happily married” and “got more than enough to eat at home.”

  3. #3
    Hall-Of-Famer
    Points: 56,432, Level: 73
    Level completed: 59%, Points required for next Level: 618
    Overall activity: 19.0%
    Achievements:
    Veteran50000 Experience Points
    pulse's Avatar
    Join Date
    Mar 2006
    Posts
    4,660
    Points
    56,432
    Level
    73
    Thumbs Up
    Received: 51
    Given: 52

    Re: Networking expert question

    Porn.



  4. #4
    Addict
    Points: 181,216, Level: 100
    Level completed: 0%, Points required for next Level: 0
    Overall activity: 6.0%
    Achievements:
    SocialVeteranCreated Album pictures50000 Experience Points

    Join Date
    Oct 2007
    Location
    Marshalltown
    Posts
    9,959
    Points
    181,216
    Level
    100
    Thumbs Up
    Received: 125
    Given: 122

    Re: Networking expert question

    Quote Originally Posted by The_Architect View Post
    internet porn
    Normally I'd accept that answer but I think I've determined that ip address is my work computer and it does not see porn.



  5. #5
    Legend
    Points: 386,972, Level: 100
    Level completed: 0%, Points required for next Level: 0
    Overall activity: 20.0%
    Achievements:
    SocialRecommendation Second ClassVeteran50000 Experience Points
    bos's Avatar
    Join Date
    Apr 2006
    Posts
    23,797
    Points
    386,972
    Level
    100
    Thumbs Up
    Received: 558
    Given: 389

    Re: Networking expert question

    I show brazil. Not sure what that would be. Have any spyware? Dishnetwork would not be pointing there.


    http://www.utrace.de/ip-adresse/187.23.110.215

    Shows some out in the middle of nowhere place in Blemneau, Brazil. Creepy.


    Last edited by bos; 12-16-2009 at 02:38 PM.

  6. #6
    Addict
    Points: 181,216, Level: 100
    Level completed: 0%, Points required for next Level: 0
    Overall activity: 6.0%
    Achievements:
    SocialVeteranCreated Album pictures50000 Experience Points

    Join Date
    Oct 2007
    Location
    Marshalltown
    Posts
    9,959
    Points
    181,216
    Level
    100
    Thumbs Up
    Received: 125
    Given: 122

    Re: Networking expert question

    Quote Originally Posted by bostinelosd View Post
    I show brazil. Not sure what that would be. Have any spyware? Dishnetwork would not be pointing there.
    I'm pretty careful about what I install on my computers so don't think I have any spyware. Also, found a bunch of those entries pointing to Japan too.



  7. #7
    Legend
    Points: 386,972, Level: 100
    Level completed: 0%, Points required for next Level: 0
    Overall activity: 20.0%
    Achievements:
    SocialRecommendation Second ClassVeteran50000 Experience Points
    bos's Avatar
    Join Date
    Apr 2006
    Posts
    23,797
    Points
    386,972
    Level
    100
    Thumbs Up
    Received: 558
    Given: 389

    Re: Networking expert question

    Quote Originally Posted by 1100011CS View Post
    I'm pretty careful about what I install on my computers so don't think I have any spyware. Also, found a bunch of those entries pointing to Japan too.

    They can get in even when careful. Grab a copy of spybot, or security essentials and do a quick scan. Cant hurt. Those locations are very fishy. Even if things were getting routed around, they will never dip out of the country like in most cases.



  8. #8
    Hall-Of-Famer
    Points: 56,432, Level: 73
    Level completed: 59%, Points required for next Level: 618
    Overall activity: 19.0%
    Achievements:
    Veteran50000 Experience Points
    pulse's Avatar
    Join Date
    Mar 2006
    Posts
    4,660
    Points
    56,432
    Level
    73
    Thumbs Up
    Received: 51
    Given: 52

    Re: Networking expert question

    Asian and Brazilian... hmm..



  9. #9
    Speechless
    Points: 649,140, Level: 100
    Level completed: 0%, Points required for next Level: 0
    Overall activity: 42.0%
    Achievements:
    50000 Experience PointsVeteranOverdrive
    3TrueFans's Avatar
    Join Date
    Sep 2009
    Location
    Ames
    Posts
    24,079
    Points
    649,140
    Level
    100
    Thumbs Up
    Received: 1,685
    Given: 170

    Re: Networking expert question

    Quote Originally Posted by bostinelosd View Post
    I show brazil. Not sure what that would be. Have any spyware? Dishnetwork would not be pointing there.


    187.23.110.215 - IP-Adresse - utrace - IP-Adressen und Domainnamen lokalisieren

    Shows some out in the middle of nowhere place in Blemneau, Brazil. Creepy.
    Maybe he's been watching reruns of Carnivale on HBO.



  10. #10
    Legend
    Points: 386,972, Level: 100
    Level completed: 0%, Points required for next Level: 0
    Overall activity: 20.0%
    Achievements:
    SocialRecommendation Second ClassVeteran50000 Experience Points
    bos's Avatar
    Join Date
    Apr 2006
    Posts
    23,797
    Points
    386,972
    Level
    100
    Thumbs Up
    Received: 558
    Given: 389

    Re: Networking expert question

    Quote Originally Posted by 3TrueFans View Post
    Maybe he's been watching reruns of Carnivale on HBO.

    Dont even get me started on that show. How dare they end it when it started getting good.



  11. #11
    Addict
    Points: 80,837, Level: 88
    Level completed: 39%, Points required for next Level: 1,113
    Overall activity: 4.0%
    Achievements:
    Veteran50000 Experience Points
    jumbopackage's Avatar
    Join Date
    Sep 2007
    Posts
    5,470
    Points
    80,837
    Level
    88
    Thumbs Up
    Received: 21
    Given: 9

    Re: Networking expert question

    Some ISP in Brazil. Who knows what it is. Not enough detail from that packet capture to tell.

    I'd start by figuring out what machine has 192.168.1.76. If you can't figure it out easily, sometimes it helps to figure out what the MAC address is and then run it through something like this: MAC Address Decoder by Stefan Frei which will tell you at least who made the NIC, which often gives you an idea of what device it's in.

    Easy way to get the mac address is to open a command window and do a ping to that address, and then do an arp -a which should give you the MAC address.

    Wouldn't be surprised if it's legit traffic for a WII or something. Also wouldn't be surprised if you've got spyware.



  12. #12
    Speechless
    Points: 406,143, Level: 100
    Level completed: 0%, Points required for next Level: 0
    Overall activity: 13.0%
    Achievements:
    SocialVeteran50000 Experience Points
    alarson's Avatar
    Join Date
    Mar 2006
    Location
    West Des Moines, IA
    Posts
    21,156
    Points
    406,143
    Level
    100
    Thumbs Up
    Received: 326
    Given: 135

    Re: Networking expert question

    Quote Originally Posted by bostinelosd View Post
    Dont even get me started on that show. How dare they end it when it started getting good.
    I know! That show was amazing right when it died.



  13. #13
    Recruit
    Points: 5,568, Level: 22
    Level completed: 4%, Points required for next Level: 482
    Overall activity: 0%
    Achievements:
    Veteran5000 Experience Points

    Join Date
    Nov 2009
    Posts
    82
    Points
    5,568
    Level
    22
    Thumbs Up
    Received: 7
    Given: 5

    Re: Networking expert question

    Quote Originally Posted by jumbopackage View Post
    I'd start by figuring out what machine has 192.168.1.76. If you can't figure it out easily, sometimes it helps to figure out what the MAC address is and then run it through something like this: MAC Address Decoder by Stefan Frei which will tell you at least who made the NIC, which often gives you an idea of what device it's in.

    Easy way to get the mac address is to open a command window and do a ping to that address, and then do an arp -a which should give you the MAC address.
    Another way to figure out which machine 192.168.1.76 is, from a computer on your network:
    > ping -a 192.168.1.76

    SysInternals has a program called TcpView that shows a realtime list of all programs making network connections and to what addresses. You could try running that on the machine hitting Brazil/Japan to help get an idea of when it occurs and what program is doing it.

    Also, do you use torrents?



  14. #14
    Addict
    Points: 181,216, Level: 100
    Level completed: 0%, Points required for next Level: 0
    Overall activity: 6.0%
    Achievements:
    SocialVeteranCreated Album pictures50000 Experience Points

    Join Date
    Oct 2007
    Location
    Marshalltown
    Posts
    9,959
    Points
    181,216
    Level
    100
    Thumbs Up
    Received: 125
    Given: 122

    Re: Networking expert question

    Definitely not spyware. I'm guessing it's our remote management stuff. I know we offshored our help desk but thought it was to India. Maybe it's Brazil?

    The torrent suggestion would explain the ip's coming out of my other PC.



  15. #15
    Starter
    Points: 21,978, Level: 45
    Level completed: 37%, Points required for next Level: 572
    Overall activity: 0%
    Achievements:
    Veteran10000 Experience Points
    HawkFanISUalum's Avatar
    Join Date
    May 2009
    Location
    Iowa City, IA
    Posts
    789
    Points
    21,978
    Level
    45
    Thumbs Up
    Received: 1
    Given: 1

    Re: Networking expert question

    Does it give you any other information about the type of traffic (HTTP, FTP, etc.) or at least provide port numbers?



Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  
  • TV: FOX
  • Iowa State vs. Baylor
  • September 27, 2014
  • 07:20 PM