Return Styles: Pseud0ch, Terminal, Valhalla, NES, Geocities, Blue Moon. Entire thread

OH NOES I'M BEING HACKED

Name: Anonymous 2006-05-15 21:36

Ok I don't know whether I'm being hacked or not.  I don't know what's happening at all.  All I know is that my Routers security log has been showing an IP address in the 10.X.X.X range continually bombarding me and being blocked by its "DoS protection."  I'd post the log but I don't want to get in trouble for distributing others IP addresses.  Anyway, the security log has shown that the address has attempted to connect to my router multiple times a second.  Now, the main problem I see in this is that the 10.X.X.X range is reserved for private networks.  My home network is comprized of between 4 and 8 computers (I lose count) all of which have internal IP addresses in the 192.168.X.X range.  My router and modem IP addresses fall into the same range.  Since 10.X.X.X are reserved for internal use only, how in the world can I be seeing such an address assaulting my router when I don't even have a portion of my network set up to use said range?  The only possibility is that some other network that I am mysteriously connected to has a computer that is attempting to connect. 
Now, my father connects to work using a VPN, but even when his work computer (the only computer that uses a VPN) is not turned on, the assaults continue.  As a matter of fact the only times it seems to occur is when MY computer is on, and the only thing I do that I can imagine relating to this is torrent.  I cannot see, however, how torrenting could somehow show me the internal address of a computer not on my network.  I don't even know if using a VPN allows you to see internal addresses of computers not on your network.  All in all I'm totally flustered.  This has been going on for months, and it seems to be taking a toll on our router, in that it needs to be continuously power cycled (though this may be related to my 16-hour-a-day torrenting).
If any more information is required, I will gladly supply, as I am willing to do near anything to solve this problem.

Name: Anonymous 2006-05-16 17:52

time for honeypotting

do one of two things
 - take an existing machine, backup everything on it, lockdown/delete anything of value, and disconnect it from your network
 or
 - go to a pawn shop or somewhere, and see if you can get an ancient pentium II or something (perferably with a nic, obviously), and install an os on it.

when you get this machine ready, fix it's ip to 10.39.112.1.  then plug your cable modem into it (without the router) and see what the hell this external spoofer is trying to do.

get winpcap or something that can capture the incoming traffic so you can study it.

Newer Posts
Don't change these.
Name: Email:
Entire Thread Thread List