Console - Stealth Mode - Other person's name and PC connected - Hack?

Question

Level 1

0 points

Console - Stealth Mode - Other person's name and PC connected - Hack?

Hi Everybody,

I've posted some questions regarding hacks because I think my MBP is being hacked. If you look at my past posts I've done everything you have suggested to "lock down" my computer. I have found arp - a and netstat and mac scan and little snitch to help. What are your thoughst on static ip? That's a whole other thread...my question on console is below. Thanks guys.

Now I look at my console, and search "stealh" under Files - app firewall log- from time to time to see what's up.

Well, I see this- I've replaced the person's name - with "dude name" haha but maybe I shouldn't so he can be exposed....

essentaily I see a person's name and this computer as opposed to This-Computer - which is what mine is called. I'm on ETHERNET.

Does this mean he somehow connected to my router from Time Warner to get to try and connect via stealth mode? I have changed my default pw on my router. Shouldn't I just always see This-Computer - as this is what my comuter is named in my system preferences. Thanks for your help.

Jun 14 14:51:47 this-computer Firewall[80]: Stealth Mode connection attempt to UDP 192.168.1.72:62036 from 192.168.1.254:53

Jun 14 15:05:11 this-computer Firewall[80]: Stealth Mode connection attempt to UDP 192.168.1.72:64737 from 192.168.1.254:53

Jun 14 15:16:06dudename-pcFirewall[79]: Stealth Mode connection attempt to UDP 192.168.1.72:55156 from 192.168.1.254:53

Jun 14 15:16:12dudename-pcFirewall[79]: Stealth Mode connection attempt to UDP 192.168.1.72:55194 from 192.168.1.254:53

Jun 14 15:16:12dudename-pcFirewall[79]: Stealth Mode connection attempt to UDP 192.168.1.72:51937 from 192.168.1.254:53

Jun 14 15:16:39dudename-pcFirewall[79]: Stealth Mode connection attempt to UDP 192.168.1.72:60601 from 192.168.1.254:53

Jun 14 15:25:09dudename-pcFirewall[79]: Stealth Mode connection attempt to UDP 192.168.1.72:62267 from 192.168.1.254:53

Jun 14 15:25:32dudename-pcFirewall[79]: Stealth Mode connection attempt to UDP 192.168.1.72:60872 from 192.168.1.254:53

Jun 14 15:32:51dudename-pcFirewall[79]: Stealth Mode connection attempt to UDP 192.168.1.72:58314 from 192.168.1.254:53

Jun 14 17:09:06 this-computer Firewall[77]: Stealth Mode connection attempt to UDP 192.168.0.10:68 from 192.168.0.1:67

Jun 14 18:14:57 This-Computer Firewall[77]: Stealth Mode connection attempt to UDP 192.168.0.10:64329 from

James.

MacBook Pro, Mac OS X (10.6.8)

Posted on Jun 21, 2012 5:54 PM

Reply

Answer 1

jameso1111 Author

Level 1

0 points

Jun 21, 2012 8:42 PM in response to jameso1111

Just to make it clear his name is dudename-pc - it's a first and last name then -pc. I'm on a MAC!

Reply

Answer 2

Jun 21, 2012 10:02 PM in response to jameso1111

Stealth Mode means your computer is blocking the messages from the other computer without responding.

Reply

Answer 3

jameso1111 Author

Level 1

0 points

Jun 21, 2012 11:15 PM in response to Jeffrey Jones2

Cool, thanks. How could this personsname-pc even try to attempt to connect? i am on an ethernet cable not wifi and arp -a shows only me connected.

Jun 14 15:15:29

through

Jun 14 15:38:24

I get many stealth mode connection attempts from this personsname-pc and this-computer. should I type their name here?

I'm very concerned. also my comupter is called This-Computer not this-computer. Thanks guys for any help.

Reply

Answer 4

X423424X

Level 6

14,265 points

Jun 22, 2012 12:23 AM in response to jameso1111

See the following related thread for some additional info:

"Stealth Mode Connection Attempt" . . . . Should I be worried?

Reply

Answer 5

jameso1111 Author

Level 1

0 points

Jun 22, 2012 1:26 AM in response to X423424X

Thanks. I learned that Port 53 is DNS. And someone is trying to connect to ports 600000 and 500000 ranges...on June 14th.

My concern here is why a person's name has tried to connect to my computer via my ethernet connection. I have Time Warner, and changed the password. Unfortunatley, the router does not have a log of connections, like the one my landlord had.

Does anyone have an idea of this, or do you think I should take this to an IT person, Genius Bar, or police? I ran sudo lsof -i | grep LISTEN and see that there is listening at "root" - in additon to my name there is listening. Not sure if it would help you guys if I posted this. Thanks for any help. I googled the persons name and among other people, there is one person with this name that is a private investigator which of course is quite honestly making me very worried. James.

Reply

Answer 6

X423424X

Level 6

14,265 points

Jun 22, 2012 1:41 AM in response to jameso1111

You got your firewall on. Your router presumably has its own firewall. And I assume you use WPA2. So you're safe. Nobody's getting "in". The world can probe from the outside all they want. Who cares. That's what these protections are for.

Reply

Answer 7

jameso1111 Author

Level 1

0 points

Jun 22, 2012 2:02 AM in response to X423424X

Thank you. I simply use a new password to log into my Netgear smart wizard. i use Ethernet so I was not aware of making a WPA2 password but I'll look into that.😊 James.

Reply