INTERACT FORUM

Please login or register.

Login with username, password and session length
Advanced search  
Pages: [1]   Go Down

Author Topic: Odd Internet Activity  (Read 2112 times)

AJSchmidt

  • Recent member
  • *
  • Posts: 18
Odd Internet Activity
« on: January 08, 2015, 02:48:28 pm »

The Activity Log Overview (Services & Plug-ins, Media Network) shows Active Interfaces: 192.168.1.20 (my PC), and a mysterious 25.144.127.184

The Activity Log entries show at 1-minute intervals an "interface" from an external IP address is generating a series of M-SEARCH and NOTIFY entries for port 1900 (UPnP).  That address "source" is 25.144.127.184 which is identified by http://www.ip-address.org/lookup as:  Organization: DINSA, Ministry of Defence, London, United Kingdom.  I am in the U.S.A and am not knowingly associated with DINSA, other than what MC is reporting. 

Is this a bug, or a normal internal feature of MC, or is my system really being probed by DINSA from London, England?





Logged

JimH

  • Administrator
  • Citizen of the Universe
  • *****
  • Posts: 71471
  • Where did I put my teeth?
Re: Odd Internet Activity
« Reply #1 on: January 08, 2015, 03:01:34 pm »

No idea.  Sorry.
Logged

~OHM~

  • Citizen of the Universe
  • *****
  • Posts: 1825
  • "I Don't Play The Music The Music Plays Me"
Re: Odd Internet Activity
« Reply #2 on: January 08, 2015, 03:51:19 pm »

wireless cell phones, I pads, internet ready TVs
Logged
“I've Reached A Turning Point In My Life. I Now Realize I Have More Yesterdays Then Tomorrows”

kstuart

  • Citizen of the Universe
  • *****
  • Posts: 1955
  • Upgraded to MC22 Master using preorder discount
Re: Odd Internet Activity
« Reply #3 on: January 08, 2015, 03:56:00 pm »

Maybe the memory leak is caused by Space Aliens, and they are being opposed by the UK Ministry of Defence ?

Ashfall

  • World Citizen
  • ***
  • Posts: 181
Logged

AJSchmidt

  • Recent member
  • *
  • Posts: 18

Today I unplugged my computer (Win8.0) from the network and found that the unidentified interface in MC v20.0.52 continued to generate the M-SEARCH and NOTIFY activities on port 1900, meaning that it's coming from inside the computer system. 

I then installed MC onto an older Win7 machine, disconnected from the network and found that MC had a similar unidentified interface on that system at IP address 25.124.88.107 which was listed by http://www.ip-address.org as the same (Organization: DINSA, Ministry of Defence), United Kingdom.  Okay, so after checking behind a few mirrors, framed wall art and telephone sets, I decided that these spooky IPAs could be a feature of my antivirus security system just keeping a lookout for trouble.  If that's the case, it's all good.

Logged

CountryBumkin

  • Citizen of the Universe
  • *****
  • Posts: 3352
Re: Odd Internet Activity
« Reply #6 on: January 09, 2015, 02:02:44 pm »

So what anti-virus program are you using? I don't see anything like that on my system.
Logged

~OHM~

  • Citizen of the Universe
  • *****
  • Posts: 1825
  • "I Don't Play The Music The Music Plays Me"
Re: Odd Internet Activity
« Reply #7 on: January 09, 2015, 02:40:00 pm »

I just gotta say that I don't get people and Anit-Virus software, I have had computers since before windows 95 (can't remember what was called back then 3.1 maybe) and have never never seen the need for this type of software. Don't get me wrong I'm no prude. Knowing what to click and what not to click or to terminate windows immediately goes a long way. Yes I have had problems with maleware but nothing compared to the problems I read here and elseware when using Anti-Virus software.....just had to say this and meant no disrespect!
Logged
“I've Reached A Turning Point In My Life. I Now Realize I Have More Yesterdays Then Tomorrows”

bob

  • Administrator
  • Citizen of the Universe
  • *****
  • Posts: 13526

Today I unplugged my computer (Win8.0) from the network and found that the unidentified interface in MC v20.0.52 continued to generate the M-SEARCH and NOTIFY activities on port 1900, meaning that it's coming from inside the computer system. 

I then installed MC onto an older Win7 machine, disconnected from the network and found that MC had a similar unidentified interface on that system at IP address 25.124.88.107 which was listed by http://www.ip-address.org as the same (Organization: DINSA, Ministry of Defence), United Kingdom.  Okay, so after checking behind a few mirrors, framed wall art and telephone sets, I decided that these spooky IPAs could be a feature of my antivirus security system just keeping a lookout for trouble.  If that's the case, it's all good.
Are you running virtualbox or vmare or some vpn software? I'm wondering what this "unidentified" interface is?
Logged

Ashfall

  • World Citizen
  • ***
  • Posts: 181
Re: Odd Internet Activity
« Reply #9 on: January 09, 2015, 04:28:00 pm »

239.255.255.250:1900 is UPNP broadcasts.  Normally you will only see internal IP addresses searching (for other UPNP services) and notifying (advertising UPNP services).

I think your router is forwarding UPNP broadcasts from the Internet to your internal network, and whoever owns 25.144.127.184 is running UPNP searches over the Internet to find open devices such as webcams.

Check your router for UPNP and disable it.  Also check port forwarding, static routes, DMZ Server, etc.
Logged
Pages: [1]   Go Up