Find a Hacker suspicious

I captured suspicious upnp traffic on my computer with wireshark. A Linux hacker is turning my computer into a network service provider for him. This is the general description about upnp.

http://www.upnp-hacks.org/upnp.html

This hacker is located in China, GuangDong. The hacker software is installed by a online flash game client. To remove the threat, I blocked the port used by the upnp.