Help - Search - Members - Calendar
Full Version: Two IP's being blocked in my client when i have no connections
B.I.S.S. Forums > Internet Security Forum > Internet Security Discussion
dingo737
I hope I'm in the right spot for this post/topic.

First I will start with the circumstances then go on with what's happening.

I use uTorrent1.6.1 and use the Level1 List with Blocklist manager for protection.

What's been happening that seems a bit fishy is I have no active torrents or such connections in my client however I'm getting the following IP's blocked every 30sec's and wasn't sure if someone might tell me if there is something on my machine that may be causing a connection through my client that I'm not aware of.

the ip's are: 209.133.122.181
209.66.117.79

the whois info says this mediasentry but I'm not sure why these connections are trying to be made when I have no active torrents and with my limited experience I have no active connections. My utorrent client is open that's it.

Please if someone here might shed some light on my confusion here it would be quite greatly appreciated and if I should worry. Thanks all and keep up the excelent cause here.

Peace
rzvvts
QUOTE (dingo737 @ May 5 2008, 04:01 PM) *
I hope I'm in the right spot for this post/topic.

First I will start with the circumstances then go on with what's happening.

I use uTorrent1.6.1 and use the Level1 List with Blocklist manager for protection.

What's been happening that seems a bit fishy is I have no active torrents or such connections in my client however I'm getting the following IP's blocked every 30sec's and wasn't sure if someone might tell me if there is something on my machine that may be causing a connection through my client that I'm not aware of.

the ip's are: 209.133.122.181
209.66.117.79

the whois info says this mediasentry but I'm not sure why these connections are trying to be made when I have no active torrents and with my limited experience I have no active connections. My utorrent client is open that's it.

Please if someone here might shed some light on my confusion here it would be quite greatly appreciated and if I should worry. Thanks all and keep up the excelent cause here.

Peace

Step 1. Use TCPView to see what process is behind those connection attempts
Step 2. Check back umnik.gif
dingo737
yea sry i just clean installed as it was making me a bit nervous my utorrent client blocking ip's when no transfers were active. I did download that and will be interested to use it but I think what it is, is when ipfilter.dat is being used through the utorrent client it may block connections even not asociated with torrent transfers but don't quote me on that. Thanks for the link man. smile.gif

Oh yea since i reinstalled I havn't seen that ip yet but I'm thinking it may have been one asociated with my convertx prog but it was quite wierd how it started on the weekend nothing had been newly installed I don't know am getting everything back-up in this setup with my eye open for that behavior and ipaddr's will give a post when/if it starts happening again as to what is causing it.


I am a bit curious though might you know if the ipfilter.dat being used through the utorrent client would that block ip's from my windows browser, ie ver.7, and log such blocked browsing ip's through the utorrent logger with other blocked torrent ip's?
shadow666
QUOTE (dingo737 @ May 5 2008, 02:01 PM) *
What's been happening that seems a bit fishy is I have no active torrents or such connections in my client however I'm getting the following IP's blocked every 30sec's and wasn't sure if someone might tell me if there is something on my machine that may be causing a connection through my client that I'm not aware of.


that looks like ghost packets nothing really to worry about thats normal behaviour.
rzvvts
QUOTE
I am a bit curious though might you know if the ipfilter.dat being used through the utorrent client would that block ip's from my windows browser, ie ver.7, and log such blocked browsing ip's through the utorrent logger with other blocked torrent ip's?

Nah, what it does is drop connection requests and refrain from making any to IPs on the filter , strictly as far as the app using it (ie utorrent) is concerned. What you need is smth like ProtoWall or PeerGuardian2. Well, the latter actually as you can selectively switch http filtering on and off. The downside is normal web browsing is seriously impaired since the blocklists cover quite a large chunk of all available IPs (like 2 3rds). You may consider using it with only the adware/spyware lists enabled. And yes,it also has logging capabilities.
dingo737
Well i do appreciate the responses even though i became quickly weary of my net security and did a clean reinstall which prolly was not nessacary.

I am still curious in respects the blocking behavior I've found yea it seems the connection is only blocked for the client with ipfilter.dat implemented through utorrent client yet at the same time I find addresses from my browsing traffic being blocked/logged in the utorrent client. I guess I never fig'rd my browsing connections were reflectant through my torr client. Is all quite interesting though yea I've gotten back to protowall and as you put it "2/3rds of all ip's blocked" gives lil input on if someone is deliberately targeting your ip addr. or inhabitanting your sys. for reasons asociated with this anti-p2p campaign. Particularly where I noted above my torrent traffic does not seem to be the only traffic being logged as blocked in my client. It is good to know these ip's are being blocked from accessing my p2p activity, don't get me wrong I love the tech./app's from this domain and respect the effort sincerely. On that note I will end with thanks all.

,Peace
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2012 Invision Power Services, Inc.