Thank you for being a valued part of the CNET community. As of December 1, 2020, the forums are in read-only format. In early 2021, CNET Forums will no longer be available. We are grateful for the participation and advice you have provided to one another over the years.

Thanks,

CNET Support

Alert

I am being attacked, need solution.

Sep 1, 2012 11:31PM PDT

Here is the suspicious activity that is going on.

PeerGuardian shows my PC is sending packets to IP addresses, unrelated to any known software on my PC, on sequential ports.

Router security logs are showing [DoS Attack: IP Spoofing] from source: 192.168.1.1 (<== My routers IP in the LAN) this is also on sequential ports.

Yahoo Mail has notified me that someone else has accessed my email account from Japan and Spain.


Conclusion:
Now it seems obvious to me that the IP addresses that my PC is sending the information to are fake, as well as the IPs that yahoo detected as accessing my email address. Therefore, it would appear that I am being attacked by someone and I want to know how I can stop it. As of typing this I finished a virus scan with COMODO Internet Security a few hours ago and it found nothing. I have also run Spybot Search & Destroy and it came up clean as well.

Discussion is locked

- Collapse -
Why Peer Guardian? Any torrent software installed?
Sep 1, 2012 11:39PM PDT

I've seen this issue when folk have torrent software installed and that attack is from the media protection company you have read about. The fix was simple. Uninstall the torrent software and wait for the attack to end.
Bob

- Collapse -
Doubt
Sep 2, 2012 5:04PM PDT

I do have torrent software but its not active when these attacks are occuring, so how could it be the source of the issue? Or are you saying that i'm being attacked because of PeerGuardian. Either way i'm not quite sure your advice was an attempt to help but, more of a crusade against P2P.

If I do remove this software how do you suggest that I monitor my LAN to be sure it's still not happening?

- Collapse -
Not a crusade. Just laying it out so we can discuss it.
Sep 3, 2012 1:34AM PDT

I use torrent software to download a current Linux distro because it's very fast so it's clear I am not crusading against P2P.

However the issue is pretty simple. If you happened to download a movie and they sniffed you out that "Media Protection" company has servers that try to interfere with your connection and try to corrupt the download.

Again, this is all well discussed and it stops after awhile once you stop the torrent software. That probably includes Peer Guardian.

-> Once in a while a member gets upset about this sort of discussion and thinks there is some crusade going on. Not from me, but you do see a crusade from those other companies.
Bob

- Collapse -
Re: attack
Sep 2, 2012 5:13PM PDT

If you're being attacked from outside, there's nothing you can do, except using a firewall so they can't come in. Disconnecting the modem also is quite effective, but limits your functionality somewhat.

It the attack comes from your own LAN/PC there is some software there doing it. If you can't find it, I would do a clean install of the OS on all devices. That surely gets rid of it.

Kees