Is someone connected to my internet

[shadygirl420]

My computer has been lagging alot recently. I have 20.0, so I should be getting pretty good speeds. I downloaded a program called, NBMonitor but im not sure what the results are saying, here is what I got...

svchost.exe:1420 192.168.0.101:65218 192.168.0.1:53 UDP 192.168.0.1 0 B (0) 150 B (1) 150 B (1) 19:08:36 05/25/2009
svchost.exe:1420 192.168.0.101:50615 192.168.0.1:53 UDP 192.168.0.1 0 B (0) 134 B (1) 134 B (1) 19:08:07 05/25/2009
:4988 192.168.0.101:63606 239.255.255.250:1900 UDP 239.255.255.250 842 B (2) 0 B (0) 842 B (2) 19:07:16 05/25/2009
:4988 192.168.0.101:63605 239.255.255.250:1900 UDP 239.255.255.250 814 B (2) 0 B (0) 814 B (2) 19:07:15 05/25/2009
:4988 192.168.0.101:63604 239.255.255.250:1900 UDP 239.255.255.250 810 B (2) 0 B (0) 810 B (2) 19:07:15 05/25/2009
:4988 192.168.0.101:63603 239.255.255.250:1900 UDP 239.255.255.250 2.13 KB (6) 0 B (0) 2.13 KB (6) 19:07:15 05/25/2009
svchost.exe:1420 192.168.0.101:53382 192.168.0.1:53 UDP 192.168.0.1 0 B (0) 368 B (1) 368 B (1) 19:04:50 05/25/2009
svchost.exe:1420 192.168.0.101:59653 192.168.0.1:53 UDP 192.168.0.1 0 B (0) 234 B (2) 234 B (2) 19:04:40 05/25/2009
svchost.exe:1420 192.168.0.101:56867 192.168.0.1:53 UDP 192.168.0.1 0 B (0) 223 B (1) 223 B (1) 19:04:39 05/25/2009
svchost.exe:1420 192.168.0.101:52713 192.168.0.1:53 UDP 192.168.0.1 0 B (0) 316 B (1) 316 B (1) 19:04:34 05/25/2009
svchost.exe:1420 192.168.0.101:53886 192.168.0.1:53 UDP 192.168.0.1 0 B (0) 375 B (1) 375 B (1) 19:04:30 05/25/2009
svchost.exe:1420 192.168.0.101:51469 224.0.0.252:5355 UDP 224.0.0.252 100 B (2) 0 B (0) 100 B (2) 19:02:12 05/25/2009
svchost.exe:1420 192.168.0.101:57372 192.168.0.1:53 UDP 192.168.0.1 0 B (0) 134 B (1) 134 B (1) 19:02:06 05/25/2009
svchost.exe:1420 192.168.0.101:62077 192.168.0.1:53 UDP 192.168.0.1 0 B (0) 493 B (1) 493 B (1) 19:00:32 05/25/2009
svchost.exe:1420 192.168.0.101:58001 192.168.0.1:53 UDP 192.168.0.1 0 B (0) 126 B (1) 126 B (1) 18:59:24 05/25/2009
svchost.exe:1420 192.168.0.101:55086 192.168.0.1:53 UDP 192.168.0.1 0 B (0) 126 B (1) 126 B (1) 18:59:24 05/25/2009
svchost.exe:1420 192.168.0.101:58216 192.168.0.1:53 UDP 192.168.0.1 0 B (0) 406 B (1) 406 B (1) 18:56:21 05/25/2009
svchost.exe:1420 192.168.0.101:52529 192.168.0.1:53 UDP 192.168.0.1 0 B (0) 403 B (1) 403 B (1) 18:56:20 05/25/2009
svchost.exe:1420 192.168.0.101:61228 192.168.0.1:53 UDP 192.168.0.1 0 B (0) 529 B (1) 529 B (1) 18:56:08 05/25/2009
svchost.exe:1420 192.168.0.101:51862 192.168.0.1:53 UDP 192.168.0.1 0 B (0) 476 B (1) 476 B (1) 18:55:36 05/25/2009
svchost.exe:1420 192.168.0.101:61754 192.168.0.1:53 UDP 192.168.0.1 0 B (0) 482 B (1) 482 B (1) 18:54:57 05/25/2009
svchost.exe:1420 192.168.0.101:52471 192.168.0.1:53 UDP 192.168.0.1 0 B (0) 459 B (1) 459 B (1) 18:54:42 05/25/2009
svchost.exe:1420 192.168.0.101:60794 192.168.0.1:53 UDP 192.168.0.1 0 B (0) 332 B (1) 332 B (1) 18:54:41 05/25/2009
svchost.exe:1420 192.168.0.101:61125 192.168.0.1:53 UDP 192.168.0.1 0 B (0) 530 B (1) 530 B (1) 18:54:41 05/25/2009
svchost.exe:1420 192.168.0.101:60362 192.168.0.1:53 UDP 192.168.0.1 0 B (0) 530 B (1) 530 B (1) 18:54:41 05/25/2009
svchost.exe:1420 192.168.0.101:51910 192.168.0.1:53 UDP 192.168.0.1 0 B (0) 530 B (1) 530 B (1) 18:54:41 05/25/2009
svchost.exe:1420 192.168.0.101:55273 192.168.0.1:53 UDP 192.168.0.1 0 B (0) 157 B (1) 157 B (1) 18:54:39 05/25/2009
svchost.exe:1420 192.168.0.101:62996 192.168.0.1:53 UDP 192.168.0.1 0 B (0) 464 B (1) 464 B (1) 18:54:36 05/25/2009
svchost.exe:1420 192.168.0.101:61257 192.168.0.1:53 UDP 192.168.0.1 0 B (0) 529 B (1) 529 B (1) 18:54:28 05/25/2009
:4988 192.168.0.101:56872 239.255.255.250:1900 UDP 239.255.255.250 842 B (2) 0 B (0) 842 B (2) 18:52:45 05/25/2009
:4988 192.168.0.101:56871 239.255.255.250:1900 UDP 239.255.255.250 814 B (2) 0 B (0) 814 B (2) 18:52:44 05/25/2009
:4988 192.168.0.101:56870 239.255.255.250:1900 UDP 239.255.255.250 810 B (2) 0 B (0) 810 B (2) 18:52:44 05/25/2009
:4988 192.168.0.101:56869 239.255.255.250:1900 UDP 239.255.255.250 2.13 KB (6) 0 B (0) 2.13 KB (6) 18:52:44 05/25/2009
svchost.exe:1420 192.168.0.101:55655 192.168.0.1:53 UDP 192.168.0.1 0 B (0) 152 B (1) 152 B (1) 18:52:43 05/25/2009
svchost.exe:1420 192.168.0.101:62463 192.168.0.1:53 UDP 192.168.0.1 0 B (0) 129 B (1) 129 B (1) 18:52:21 05/25/2009
svchost.exe:1420 192.168.0.101:64076 192.168.0.1:53 UDP 192.168.0.1 0 B (0) 137 B (1) 137 B (1) 18:52:21 05/25/2009
svchost.exe:1420 192.168.0.101:63074 192.168.0.1:53 UDP 192.168.0.1 0 B (0) 137 B (1) 137 B (1) 18:52:21 05/25/2009
svchost.exe:1420 192.168.0.101:59023 192.168.0.1:53 UDP 192.168.0.1 0 B (0) 131 B (1) 131 B (1) 18:52:21 05/25/2009
svchost.exe:1420 192.168.0.101:50597 192.168.0.1:53 UDP 192.168.0.1 0 B (0) 135 B (1) 135 B (1) 18:52:21 05/25/2009
svchost.exe:1420 192.168.0.101:52892 192.168.0.1:53 UDP 192.168.0.1 0 B (0) 137 B (1) 137 B (1) 18:52:21 05/25/2009
svchost.exe:1420 192.168.0.101:54235 192.168.0.1:53 UDP 192.168.0.1 0 B (0) 138 B (1) 138 B (1) 18:52:21 05/25/2009
svchost.exe:1420 192.168.0.101:50924 192.168.0.1:53 UDP 192.168.0.1 0 B (0) 171 B (1) 171 B (1) 18:52:10 05/25/2009
svchost.exe:1420 192.168.0.101:59955 192.168.0.1:53 UDP 192.168.0.1 0 B (0) 451 B (1) 451 B (1) 18:52:09 05/25/2009
svchost.exe:1420 192.168.0.101:51129 192.168.0.1:53 UDP 192.168.0.1 0 B (0) 206 B (1) 206 B (1) 18:52:07 05/25/2009
svchost.exe:1420 192.168.0.101:57388 192.168.0.1:53 UDP 192.168.0.1 0 B (0) 166 B (1) 166 B (1) 18:44:04 05/25/2009
:4988 192.168.0.101:57611 239.255.255.250:1900 UDP 239.255.255.250 842 B (2) 0 B (0) 842 B (2) 18:38:14 05/25/2009
:4988 192.168.0.101:57610 239.255.255.250:1900 UDP 239.255.255.250 814 B (2) 0 B (0) 814 B (2) 18:38:13 05/25/2009
:4988 192.168.0.101:57609 239.255.255.250:1900 UDP 239.255.255.250

Can anyone read that and tell me if anyone else is using my internet connection?

 

[Atomic Rooster]

It's all Greek to me. I'm sure there's someone here that can make sense of that.

Have you run a spyware scan lately?

 

[setishock]

The 192.168.0.101 is your IP for your computer assigned by the DHCP in the router.
The 192.168.0.1 is the service IP you use to access the programming in your router. This needs to be changed no two ways about it. Plus add a complex password for the admin access to your router. Write it down and tape it to the bottom of your router.
As for the high end ports being used, in my personal experience those are used by hackers when trying to gain access to defenceless computers. What I mean there is when users don't have a firewall.
They're also used for gaming, and among others, internet security cameras.

But where you'd look to get the skinny on the traffic is to look in the router logs. Post that and let's go from there.

 

[shadygirl420]

not sure if this is what your talking about but this is what i get when i go to logs. its a lot longer but i cant fit it all


Existing Connections:

[7:42:17 PM] Started Recording
[7:42:17 PM] New : localhost <27015/49158>(Established)
[7:42:17 PM] New : localhost <41952/58298>(Established)
[7:42:17 PM] New : localhost <49158/27015>(Established)
[7:42:18 PM] New : localhost <58298/41952>(Established)
[7:42:18 PM] New : localhost <58695/58696>(Established)
[7:42:18 PM] New : localhost <58696/58695>(Established)
[7:42:18 PM] New : localhost <58697/58698>(Established)
[7:42:18 PM] New : localhost <58698/58697>(Established)
[7:42:18 PM] New : 65.212.121.23 <59396/80> (Close wait)
[7:42:26 PM] New : 209.237.150.20 <59456/80> (Time wait)
[7:43:31 PM] Closed: 65.212.121.23 <59396/80>
[7:43:31 PM] Connection Duration: 1 min 13 sec
[7:43:39 PM] New : 209.85.225.103 <59458/80> (Established)
[7:43:40 PM] New : 74.125.95.100 <59459/80> (Established)
[7:43:40 PM] New : 209.85.225.103 <59460/80> (Established)
[7:43:48 PM] New : 74.125.95.102 <59461/80> (Established)
[7:43:48 PM] New : 216.224.119.242 <59462/80> (Established)
[7:43:48 PM] New : 216.224.119.242 <59463/80> (Established)
[7:43:48 PM] New : 216.224.119.242 <59464/80> (Established)
[7:43:48 PM] New : 209.85.225.165 <59465/80> (Established)
[7:43:48 PM] New : 209.85.225.154 <59467/80> (Established)
[7:43:48 PM] New : 209.85.225.154 <59468/80> (Established)
[7:43:48 PM] New : 209.85.225.154 <59469/80> (Established)

 

[vampist]

Damn google has a lot of Ip's. Anyway.

Do as what seti said. Those connections you posted are all websites except your localhost.
Weather.com, Google.com, webapps.myregisteredsite.com

 

[Russel1]

If I suspect someone on my local net I usually start with an IP scan of the local network. AngryIP Scanner works well, you could scan the local subnet: 192.168.0.1 to 192.168.255 and see what comes up.

 

[user12]

that program is just telling you what your own computer is doing

svchost.exe:192.168.0.101:65218 192.168.0.1:53 UDP 192.168.0.1

svchost.exe has UDP traffic leaving your compute via port 65218 - headed to your gateway.

like russel says you need to go grab a IP scanner and do a scan from 192.168.0.2 - 192.168.0.254
if you see more then what is supposed to be there((looks like your ip is .101)) then someone else is on your network.

 

[J03]

Nothing looks too suspicious to me. Log into your router, and see who else is connected. You could do what everyone else is saying about IP Range scanners, but your routers control panel should tell you who's connected.

 

[zachary99]

__ Try this

kick people off my wireless router:

1: First open internet.
2: Then type in my browser( 192.168.1.1 ) Then hit enter.
3: Thehn Linksys Router page should come up.
4: Then go to the Tab Status.
5: Then click the other Tab Local Network.
6: Then click the DHCP Tabe butten.
7: Then click the peoples Ip Address.
8: Then hit delete.




Then there gone

 

[iPat]

Why don't you just add security?