Page 1 of 2 12 LastLast
Results 1 to 15 of 23
  1. #1
    Legend
    Points: 145,571, Level: 100
    Level completed: 0%, Points required for next Level: 0
    Overall activity: 20.0%
    Achievements:
    SocialVeteranCreated Album pictures50000 Experience Points

    Join Date
    Oct 2007
    Location
    Marshalltown
    Posts
    10,470
    Points
    145,571
    Level
    100
    Thumbs Up
    Received: 378
    Given: 264

    Networking expert question

    I was just looking at my router's activity log and there's a bunch of entries that look like what's below. Any idea what this is? I'm not even sure what device this ip is coming from because it doesn't show up in clients list. Could be my Wii or DishNetwork box. The destination IP is in Mexico

    (12/16/09 07:52:18) Source:192.168.1.76, Destination:187.23.110.215, Name:eTyk8P
    (12/16/09 07:52:20) Source:192.168.1.76, Destination:187.23.110.215, Name:eTyk8P



  2. #2
    Legend
    Points: 172,569, Level: 100
    Level completed: 0%, Points required for next Level: 0
    Overall activity: 14.0%
    Achievements:
    SocialVeteran50000 Experience Points
    The_Architect's Avatar
    Join Date
    Apr 2006
    Location
    Focus Town
    Posts
    12,143
    Points
    172,569
    Level
    100
    Thumbs Up
    Received: 637
    Given: 2,712

    Re: Networking expert question

    internet porn


    Kansas wears Adidas.

  3. #3
    Addict
    Points: 58,539, Level: 74
    Level completed: 99%, Points required for next Level: 11
    Overall activity: 3.0%
    Achievements:
    Veteran50000 Experience Points
    pulse's Avatar
    Join Date
    Mar 2006
    Posts
    5,129
    Points
    58,539
    Level
    74
    Thumbs Up
    Received: 180
    Given: 116

    Re: Networking expert question

    Porn.



  4. #4
    Legend
    Points: 145,571, Level: 100
    Level completed: 0%, Points required for next Level: 0
    Overall activity: 20.0%
    Achievements:
    SocialVeteranCreated Album pictures50000 Experience Points

    Join Date
    Oct 2007
    Location
    Marshalltown
    Posts
    10,470
    Points
    145,571
    Level
    100
    Thumbs Up
    Received: 378
    Given: 264

    Re: Networking expert question

    Quote Originally Posted by The_Architect View Post
    internet porn
    Normally I'd accept that answer but I think I've determined that ip address is my work computer and it does not see porn.



  5. #5
    Legend
    Points: 393,247, Level: 100
    Level completed: 0%, Points required for next Level: 0
    Overall activity: 19.0%
    Achievements:
    SocialRecommendation Second ClassVeteran50000 Experience Points
    bos's Avatar
    Join Date
    Apr 2006
    Posts
    24,192
    Points
    393,247
    Level
    100
    Thumbs Up
    Received: 929
    Given: 799

    Re: Networking expert question

    I show brazil. Not sure what that would be. Have any spyware? Dishnetwork would not be pointing there.


    http://www.utrace.de/ip-adresse/187.23.110.215

    Shows some out in the middle of nowhere place in Blemneau, Brazil. Creepy.


    Last edited by bos; 12-16-2009 at 02:38 PM.

  6. #6
    Legend
    Points: 145,571, Level: 100
    Level completed: 0%, Points required for next Level: 0
    Overall activity: 20.0%
    Achievements:
    SocialVeteranCreated Album pictures50000 Experience Points

    Join Date
    Oct 2007
    Location
    Marshalltown
    Posts
    10,470
    Points
    145,571
    Level
    100
    Thumbs Up
    Received: 378
    Given: 264

    Re: Networking expert question

    Quote Originally Posted by bostinelosd View Post
    I show brazil. Not sure what that would be. Have any spyware? Dishnetwork would not be pointing there.
    I'm pretty careful about what I install on my computers so don't think I have any spyware. Also, found a bunch of those entries pointing to Japan too.



  7. #7
    Legend
    Points: 393,247, Level: 100
    Level completed: 0%, Points required for next Level: 0
    Overall activity: 19.0%
    Achievements:
    SocialRecommendation Second ClassVeteran50000 Experience Points
    bos's Avatar
    Join Date
    Apr 2006
    Posts
    24,192
    Points
    393,247
    Level
    100
    Thumbs Up
    Received: 929
    Given: 799

    Re: Networking expert question

    Quote Originally Posted by 1100011CS View Post
    I'm pretty careful about what I install on my computers so don't think I have any spyware. Also, found a bunch of those entries pointing to Japan too.

    They can get in even when careful. Grab a copy of spybot, or security essentials and do a quick scan. Cant hurt. Those locations are very fishy. Even if things were getting routed around, they will never dip out of the country like in most cases.



  8. #8
    Addict
    Points: 58,539, Level: 74
    Level completed: 99%, Points required for next Level: 11
    Overall activity: 3.0%
    Achievements:
    Veteran50000 Experience Points
    pulse's Avatar
    Join Date
    Mar 2006
    Posts
    5,129
    Points
    58,539
    Level
    74
    Thumbs Up
    Received: 180
    Given: 116

    Re: Networking expert question

    Asian and Brazilian... hmm..



  9. #9
    Speechless
    Points: 660,544, Level: 100
    Level completed: 0%, Points required for next Level: 0
    Overall activity: 42.0%
    Achievements:
    50000 Experience PointsVeteranOverdrive
    3TrueFans's Avatar
    Join Date
    Sep 2009
    Location
    Ames
    Posts
    26,107
    Points
    660,544
    Level
    100
    Thumbs Up
    Received: 3,674
    Given: 390

    Re: Networking expert question

    Quote Originally Posted by bostinelosd View Post
    I show brazil. Not sure what that would be. Have any spyware? Dishnetwork would not be pointing there.


    187.23.110.215 - IP-Adresse - utrace - IP-Adressen und Domainnamen lokalisieren

    Shows some out in the middle of nowhere place in Blemneau, Brazil. Creepy.
    Maybe he's been watching reruns of Carnivale on HBO.



  10. #10
    Legend
    Points: 393,247, Level: 100
    Level completed: 0%, Points required for next Level: 0
    Overall activity: 19.0%
    Achievements:
    SocialRecommendation Second ClassVeteran50000 Experience Points
    bos's Avatar
    Join Date
    Apr 2006
    Posts
    24,192
    Points
    393,247
    Level
    100
    Thumbs Up
    Received: 929
    Given: 799

    Re: Networking expert question

    Quote Originally Posted by 3TrueFans View Post
    Maybe he's been watching reruns of Carnivale on HBO.

    Dont even get me started on that show. How dare they end it when it started getting good.



  11. #11
    Addict
    Points: 63,458, Level: 78
    Level completed: 13%, Points required for next Level: 1,392
    Overall activity: 0%
    Achievements:
    Veteran50000 Experience Points
    jumbopackage's Avatar
    Join Date
    Sep 2007
    Posts
    5,476
    Points
    63,458
    Level
    78
    Thumbs Up
    Received: 21
    Given: 10

    Re: Networking expert question

    Some ISP in Brazil. Who knows what it is. Not enough detail from that packet capture to tell.

    I'd start by figuring out what machine has 192.168.1.76. If you can't figure it out easily, sometimes it helps to figure out what the MAC address is and then run it through something like this: MAC Address Decoder by Stefan Frei which will tell you at least who made the NIC, which often gives you an idea of what device it's in.

    Easy way to get the mac address is to open a command window and do a ping to that address, and then do an arp -a which should give you the MAC address.

    Wouldn't be surprised if it's legit traffic for a WII or something. Also wouldn't be surprised if you've got spyware.



  12. #12
    Speechless
    Points: 428,330, Level: 100
    Level completed: 0%, Points required for next Level: 0
    Overall activity: 14.0%
    Achievements:
    SocialVeteran50000 Experience Points
    alarson's Avatar
    Join Date
    Mar 2006
    Location
    West Des Moines, IA
    Posts
    22,386
    Points
    428,330
    Level
    100
    Thumbs Up
    Received: 1,314
    Given: 657

    Re: Networking expert question

    Quote Originally Posted by bostinelosd View Post
    Dont even get me started on that show. How dare they end it when it started getting good.
    I know! That show was amazing right when it died.



  13. #13
    Recruit
    Points: 5,886, Level: 22
    Level completed: 68%, Points required for next Level: 164
    Overall activity: 4.0%
    Achievements:
    Veteran5000 Experience Points

    Join Date
    Nov 2009
    Posts
    87
    Points
    5,886
    Level
    22
    Thumbs Up
    Received: 7
    Given: 6

    Re: Networking expert question

    Quote Originally Posted by jumbopackage View Post
    I'd start by figuring out what machine has 192.168.1.76. If you can't figure it out easily, sometimes it helps to figure out what the MAC address is and then run it through something like this: MAC Address Decoder by Stefan Frei which will tell you at least who made the NIC, which often gives you an idea of what device it's in.

    Easy way to get the mac address is to open a command window and do a ping to that address, and then do an arp -a which should give you the MAC address.
    Another way to figure out which machine 192.168.1.76 is, from a computer on your network:
    > ping -a 192.168.1.76

    SysInternals has a program called TcpView that shows a realtime list of all programs making network connections and to what addresses. You could try running that on the machine hitting Brazil/Japan to help get an idea of when it occurs and what program is doing it.

    Also, do you use torrents?



  14. #14
    Legend
    Points: 145,571, Level: 100
    Level completed: 0%, Points required for next Level: 0
    Overall activity: 20.0%
    Achievements:
    SocialVeteranCreated Album pictures50000 Experience Points

    Join Date
    Oct 2007
    Location
    Marshalltown
    Posts
    10,470
    Points
    145,571
    Level
    100
    Thumbs Up
    Received: 378
    Given: 264

    Re: Networking expert question

    Definitely not spyware. I'm guessing it's our remote management stuff. I know we offshored our help desk but thought it was to India. Maybe it's Brazil?

    The torrent suggestion would explain the ip's coming out of my other PC.



  15. #15
    Starter
    Points: 22,321, Level: 45
    Level completed: 75%, Points required for next Level: 229
    Overall activity: 0%
    Achievements:
    Veteran10000 Experience Points
    HawkFanISUalum's Avatar
    Join Date
    May 2009
    Location
    Iowa City, IA
    Posts
    789
    Points
    22,321
    Level
    45
    Thumbs Up
    Received: 1
    Given: 1

    Re: Networking expert question

    Does it give you any other information about the type of traffic (HTTP, FTP, etc.) or at least provide port numbers?



Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  
  • TV: TBD
  • FOOTBALL: Iowa State vs. UNI
  • August 29, 2015
  • 06:00 PM