Dedicated attack against my PC Network?

[Flashie]

I (on the worst degree ever of unfortunately) am forced to share my network with my brother. I only use it for business; gaming and VoD streaming. Gaming being the main.
Now my brother - is showing these logs to the person who owns and is paying for the network - and its making them consider to remove my access... Id like to know what it is - how to get rid of it and why it is only doing it to my local-ip and not his.

 

He is telling them "IDS" is standing for "Intrusion Detection System" that is scanning only my computers ports and making it sound catastrophic.

Please view the router log below and tell me what you think. Thanks - IP's have been blurred for security purposes (But be assured the target IP after all "IDS" reports is my PC's private IP).

 

 

[Paytend01]

Is your brother being a jerk on purpose? Because dick move if so

[Flashie]

Just now, Paytend01 said:

Is your brother being a jerk on purpose? Because dick move if so

Its just who he is. I've given up on trying to fix him as the problem so i might just as well as isolate him from the other issue here. Pretty much just want to find out why his PC isnt showing up under that IDS thing and why mine is

[Paytend01]

1 minute ago, Flashie said:

Its just who he is. I've given up on trying to fix him as the problem so i might just as well as isolate him from the other issue here. Pretty much just want to find out why his PC isnt showing up under that IDS thing and why mine is

Have you tried to separate your networks? Thats what we did at my house, my uncle and I game alot so he gets mad when i download abunch of stuff. 

[fjdhdhcyfhf]

its prob your brother doing the scans

[Flashie]

Just now, Paytend01 said:

Have you tried to separate your networks? Thats what we did at my house, my uncle and I game alot so he gets mad when i download abunch of stuff. 

In the process of doing so but moneys always a problem. Busy working (literally and figuratively) on it and have it as my main option. But again for most likely the following few months im still stuck with him and i'd like to put his IP on this IDS thing for a change so it can make him look catastrophic and not me

 

[Paytend01]

Just now, Flashie said:

In the process of doing so but moneys always a problem. Busy working (literally and figuratively) on it and have it as my main option. But again for most likely the following few months im still stuck with him and i'd like to put his IP on this IDS thing for a change so it can make him look catastrophic and not me

 

Do you know where its coming from at all? or what it is?

[Flashie]

Just now, Paytend01 said:

Do you know where its coming from at all? or what it is?

I did overhear him say to someone else that its someone thats pinging my IP or scanning my IP's ports

[Paytend01]

1 minute ago, Flashie said:

In the process of doing so but moneys always a problem. Busy working (literally and figuratively) on it and have it as my main option. But again for most likely the following few months im still stuck with him and i'd like to put his IP on this IDS thing for a change so it can make him look catastrophic and not me

 

Pretty sure its this

 

 

[Paytend01]

5 minutes ago, SCHISCHKA said:

its prob your brother doing the scans

I was thinking that as well, but are people really that mean to eachother? like especially family if he is trying to deny him access

[fjdhdhcyfhf]

Can fake where the port scan originates from, and it could come from anywhere. Do some packet recording with wireshark

[Flashie]

7 minutes ago, SCHISCHKA said:

its prob your brother doing the scans

How can i do a scan back to his IP?
 

[Paytend01]

Like to be honest it seems fine, they cant really do much to you i dont think. If he is the one paying for it maybe. If you both split it then i doubt it

[vorticalbox]

1 minute ago, Paytend01 said:

I was thinking that as well, but are people really that mean to eachother? like especially family if he is trying to deny him access

port scanning is (mostly) harmless I'm not sure there is any law against it.

[Paytend01]

Just now, vorticalbox said:

port scanning is (mostly) harmless I'm not sure there is any law against it.

I meant how he is trying to get him off of the internet with it. 

[Flashie]

1 minute ago, vorticalbox said:

port scanning is (mostly) harmless I'm not sure there is any law against it.

If thats indeed whats happening in this case how do i stop him from scanning my IP's ports that its appearing in the router logs, or how do i scan his IP's ports so that it does :P?
 

[Flashie]

1 minute ago, Paytend01 said:

I meant how he is trying to get him off of the internet with it. 

Or atleast make me look like the bad guy - with ^ that being the hoped for outcome

[Droidbot]

Just now, Flashie said:

I did overhear him say to someone else that its someone thats pinging my IP or scanning my IP's ports

To me it looks like it's getting pissed over you opening a new port on your system - this is normal. 

 

what router are you using?

[Flashie]

Just now, Droidbot said:

To me it looks like it's getting pissed over you opening a new port on your system - this is normal. 

 

what router are you using?

Technicolor TG589VN v3 - Very old and literally makes screetching noises; But i havnt done any port forwarding from my PC to the router yet - but if im not mistaken i cant be the only one opening ports on my system - because then his system would also show up on the logs

[vorticalbox]

1 minute ago, Flashie said:

If thats indeed whats happening in this case how do i stop him from scanning my IP's ports that its appearing in the router logs, or how do i scan his IP's ports so that it does :P?
 

To be honest it could easily be someone just scanning massive IP ranges to see what they can find.

 

I used to do it to find web servers. You put in a range and scan port 80,8080 found so weird blogs that way lol

[Flashie]

6 minutes ago, Paytend01 said:

I meant how he is trying to get him off of the internet with it. 

 

3 minutes ago, vorticalbox said:

To be honest it could easily be someone just scanning massive IP ranges to see what they can find.

 

I used to do it to find web servers. You put in a range and scan port 80,8080 found so weird blogs that way lol

Thanks for the help guys. I guess i'll just look the other way and ignore him next time he brings it up. 
As you can see from this thread - im a pre-noob when it comes to networking. What would you say would be the best way or most efficient way for me to learn or improve on my networking knowledge? Im currently working on my CompTIA A+ then on to my Network+ and the dream is to get my CCNA One day x)

[Paytend01]

2 minutes ago, Flashie said:

 

Thanks for the help guys. I guess i'll just look the other way and ignore him next time he brings it up. 
As you can see from this thread - im a pre-noob when it comes to networking. What would you say would be the best way or most efficient way for me to learn or improve on my networking knowledge? Im currently working on my CompTIA A+ then on to my Network+ and the dream is to get my CCNA One day x)

Im not great at this whole networking thing either. Im also studying for my certifications. But good luck man

[vorticalbox]

2 minutes ago, Flashie said:

 

Thanks for the help guys. I guess i'll just look the other way and ignore him next time he brings it up. 
As you can see from this thread - im a pre-noob when it comes to networking. What would you say would be the best way or most efficient way for me to learn or improve on my networking knowledge? Im currently working on my CompTIA A+ then on to my Network+ and the dream is to get my CCNA One day x)

Your router detected the scan, as it should, and made an alarm. Just keep an eye on the logs for any other unusual logs.

[fjdhdhcyfhf]

14 minutes ago, Flashie said:

How can i do a scan back to his IP?
 

record your own packets. http://www.howtogeek.com/104278/how-to-use-wireshark-to-capture-filter-and-inspect-packets/

 

[Mornincupofhate]

This isn't an attack. It's just a port scan, and it's harmless, unless you're actually running some vulnerable devices.

 

Snort protects against port scans.

If you're too broke for snort, just deny all traffic from the IP inside the router (assuming it has a blacklist).