Is it safe to use Dialog HSDPA?

Posted by shaakunthala on Mon, 12/22/2008 - 15:40

I am a subscriber of Dialog HSDPA, which provides NAT enabled service with dynamic private IP addresses given to the subscribers. Subscribers who connect to the Internet through Dialog HSDPA actually share the same subnet. (it is not all the subscribers but part of them for a particular subnet for a particular period of time) The problem is that hosts are visible to each other, allowing them to connect each other using any available port. When I saw this for the very first time, I thought "wow! this is nice" because I can share my files with remote people by just making a shared folder in my hard drive, but now it has come to a situation where this is no longer nice because it helps spread malware as I have experienced last night.

While surfing the Internet yesterday, suddenly my virus scanner showed a warning popup. It was an attack targeting LSASS.EXE (Windows local security authority subsystem) from an IP address within the same subnet. At that time my IP was 10.182.7.30 and the attack was from 10.182.7.83 at TCP port 445 which is the default port for Microsoft Active Directory Service. LSASS.EXE is the process that handles the system's authorizations, Windows sessions, usernames and passwords. So I guess that the attacker was trying to gain administrative previleges on my computer by simply fooling the LSASS. However, thanks to avast! antivirus, no evil has happened to my computer.

I do not know whether the situation is the same with the other service providers such as Mobitel. But what I recommend is to use a reliable firewall if you work with this type of services.

Thank you for reading.

෴සමීර ශාකුන්තල | Sameera Shaakunthala෴

0
It attacks again and again

OK, here is a screenshot. Another attack, from another IP address.
attack from 10.187.1.107:445

.:Shaakunthala :.

Posted by shaakunthala on Mon, 12/22/2008 - 16:27
dialog HSDPA

can u plz tell how did you find that IP s in the subnet can access each other.how can we identify other IP s in the subnet.can it be done using command prompt.

Posted by samantha on Sun, 05/10/2009 - 13:41
Identify Subnets

Actually it was not me. One of my friends, Pahan told me that we can access others computers of the same network. So I just wanted to try it out. If you know the other party's IP address (on the same subnet), you can easily do share files and more.

I don't know the answers for your 2nd and 3rd questions.

.:Shaakunthala :.

Posted by shaakunthala on Sun, 05/10/2009 - 17:36
dialog HSDPA

thanks,I m also using Dialog HSDPA and I did nt know about this till now.was not yet subjected to any attack but i l keep my eyes open.post If anything new comes up.thanx again.

Samantha

Posted by samantha on Mon, 05/11/2009 - 09:23
USE ONLY LAYERED

USE ONLY LAYERED FIREWALLS,,,,ANY ONE CAN HAC IF U HAVE VALUABLE INFO,,,,,,

Posted by concepdesigner on Sun, 05/31/2009 - 00:48
NON OF SRILANAN NET SAFE

NON OF SRILANAN NET SAFE TRUST ME WE CAN FIND ANY INFO ANY TIME....NON OF THEM USE SAFE POTOCALLS..

Posted by concepdesigner on Sun, 05/31/2009 - 00:46
USE FAKE IP SOFT

IF PEOPLE E RANDOM IP CHANGING SOFT NO 1 CAN HACK....BELIEVE ME IF ANY ONE HACK ME ILL AY HIM 1M RS/=

Posted by concepdesigner on Sun, 05/31/2009 - 00:51