The Notebook Review forums were hosted by TechTarget, who shut down them down on January 31, 2022. This static read-only archive was pulled by NBR forum users between January 20 and January 31, 2022, in an effort to make sure that the valuable technical information that had been posted on the forums is preserved. For current discussions, many NBR forum users moved over to NotebookTalk.net after the shutdown.
Problems? See this thread at archive.org.

    random (blocked) incoming connection attempts from neighbours

    Discussion in 'Networking and Wireless' started by entropy.cz, Feb 24, 2009.

  1. entropy.cz

    entropy.cz Notebook Evangelist

    Reputations:
    110
    Messages:
    386
    Likes Received:
    0
    Trophy Points:
    30
    so, i'm a bit confused by this:
    i've switched to a new ISP few weeks ago, so did a bunch of my neighbours. now i can see random attempts for incoming communication blocked in my firewall (all on UDP, port 137 or 138), and as it's not just one neighbour but several randomly now and then, i can recongize them by IP (last IP part is the apartment number).

    i suppose that it's some "normal" network behavior, not someone trying to hack me. :rolleyes: anyway: maybe i didn't use correct keywords, so that i didn't google out the explanation. what could these connection attempts mean?
     
  2. Big Mike

    Big Mike Notebook Deity

    Reputations:
    57
    Messages:
    956
    Likes Received:
    1
    Trophy Points:
    31
    UDP 137 and 138 are related to netbios network share naming crap. I suspect what you're seeing is neighbors with a single PC attached directly to their cable modem who have network discovery running. The PC thinks its WAN IP is its local area and is browsing around all the clients in its IP subnet range (all clients with the same first 3 octets) to see if there's any network resources available. I wouldn't be concerned with it.
     
  3. entropy.cz

    entropy.cz Notebook Evangelist

    Reputations:
    110
    Messages:
    386
    Likes Received:
    0
    Trophy Points:
    30
    thanks for the clarification. i wasn't really worried, rather curious (something like "what the hell does the guy from across the hall think that he'd find in here?" :D ). i've found only some general info related to these ports usage, so, thanks a lot for the details!
     
  4. flattius_maximus

    flattius_maximus Notebook Geek

    Reputations:
    10
    Messages:
    92
    Likes Received:
    0
    Trophy Points:
    15
    If your wireless router is using the default address that came on the device then odds are that most neighbors(who are not nerds) have no idea what any of that means and their routers are default too. That means that when they search for networks that your connection may be better than the one in their apartment/home and therefor they try to connect.

    Could be another mobile device connection atrtempt as well. i.e. blackberr, iphone, etc...
     
  5. entropy.cz

    entropy.cz Notebook Evangelist

    Reputations:
    110
    Messages:
    386
    Likes Received:
    0
    Trophy Points:
    30
    flattius_maximus: this is misunderstanding, it's not wifi, it's just many people in a big house connecting via the same ISP, and you can recognize each apartment by the fourth number in IP. :) technically, we're most probably connecting via one big hub (or something, it's locked in the box where all wires end :D ... but something like that). so, the explanation by Big Mike sounds like the most probable description of what happens.