Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works

Intrusions and Dial-Up Disconnection

  • Please log in to reply



    New Member

  • Member
  • Pip
  • 1 posts
For the last 2 months I have had problems with my dial-up connection in that my system gets scanned and I get disconnected.

I run XP Sp2 with the latest updates, webroot, AVG antivirus all with latest update. My problems started while i had Outpost Firewall Professional installed. I will get connected, surf a while (sometimes for up to 4 hours, at other times for a half hour) when suddenly I get disconnected. As soon as I reconnect Outpost gives me alerts that portscans are being done. This will carry on for hours. 95% of these scans is within the same IP address range 155.239 - - (the same as mine). I complained about this to my Service Provider with little effect. Since i complained the situation has worsened. Where i only got disconnected once(before the scans started) I now get disconnected even while the scans are in progress.

I have formatted my hard drive several times, reinstalled my OS etc. disabled unneccesary services (hardening) changed to Zone alarm firewall for more control, but the problem is stil there. With zone alarm I noticed that:
- immediately after connection intrusions are blocked;
- most of the intrusions are from the same IP address range as stated above;
- 95% are rated as medium, concerns the TCP protocol
- I get the occasional UDP and ICMP Echo Request(ping)
- High Risks of packets send (NETBIOS Session)
- Just about every 4 digit port (e.g. 1814) are used by the preps
- Some entries shows the program being used as Generic Host Process for Win32 Services

I still get disconnected. When this happens I immediately inspect the log files but cant pick up anything unusual.

Once, before i got disconnected a window suddenly popped up informing me that an incomming call wants access (or something to that effects) there was a progress bar for a few seconds and i had the option to accept or decline. Before i could react I got disconnected and the window dissapeared.

Since then I got disconnected again while I was working, but the mentioned window did not show up.

Can anyone please advice me what to do or what is happening here. This is driving me crazy and is costing me a lot of money.

Attached Files

  • 0


Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP