Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.

Forums › Vodafone New Zealand, TelstraClear and ihug › Suspected DoS attacks on Ihug (my bad, they are not anything special)


659 posts

Ultimate Geek

Subscriber
Topic # 104143 15-Jun-2012 20:20 Send private message


Just installed a new netgear n300 wireless adsl router and noticed the following addresses in the log.
All DoS attacks.

69.147.244.210:80
69.171.229.70:80
184.87.18.110:443
69.171.229.74:80
79.143.179.103:80
64.31.9.170:80
69.147.244.210:80

Anyone know what I can do about it?

(apart from reboot the modem)

Create new topic
BDFL
44244 posts

Uber Geek

Administrator
Trusted
Geekzone
Subscriber
  Reply # 641597 15-Jun-2012 20:25 Send private message

Are these just scanning the ports? If that's the case it's not necessarily an "attack" and nothing you can do really.

Are all trying to connect to the same port? If that's the case then perhaps the IP address was previously used by a torrent user and other peers are still scanning it?

Restart the modem doesn't stop an attack, or scanning, since it doesn't do anything to the other party...





Mauricio Freitas (Geekzone Admin, Devil's Advocate, my blog, technology disclosure, my tweets, Web Performance Optimization) 

Geekzone Price comparison | Amazon Kindle order page | How to get the best out of Geekzone | New Zealand IT Jobs | Geekzone News | Jinglebugs 

13481 posts

Uber Geek

Trusted
Vodafone NZ
Subscriber
  Reply # 641600 15-Jun-2012 20:27 Send private message

That is not a DoS attack lol




Systems Engineer Vodafone NZ

https://community.vodafone.co.nz/

SCM

Kiwi Rebel
308 posts

Ultimate Geek

Subscriber
  Reply # 641601 15-Jun-2012 20:28 Send private message

69.171.229.70 and 69.171.229.74 seem to be Facebook..



659 posts

Ultimate Geek

Subscriber
  Reply # 641602 15-Jun-2012 20:29 Send private message

Seems to be random source IP's however ports 80 and 443 in common. 


[DoS attack: ACK Scan] from source: 17.149.36.120:443



659 posts

Ultimate Geek

Subscriber
  Reply # 641604 15-Jun-2012 20:30 Send private message

johnr: That is not a DoS attack lol


Maybey my router is just reporting it that way. 
I havent suffered 'DoS' symptoms. 


16854 posts

Uber Geek

Moderator
Trusted
Biddle Corp
Subscriber
  Reply # 641605 15-Jun-2012 20:31 Send private message

Gooseybhai: Seems to be random source IP's however ports 80 and 443 in common. 


[DoS attack: ACK Scan] from source: 17.149.36.120:443


Welcome to the internet.

I've got public machines that see thousands of unique IP's and tens of thousands of attempts on SSH, FTP and web ports on a daily basis.





*Need help configuring your Linksys ATA or IP Phones for New Zealand? Check my blog post

BDFL
44244 posts

Uber Geek

Administrator
Trusted
Geekzone
Subscriber
  Reply # 641606 15-Jun-2012 20:31 Send private message

That IP address is from apple.com... I think your modem is being overzealous on what it considers an "attack".





Mauricio Freitas (Geekzone Admin, Devil's Advocate, my blog, technology disclosure, my tweets, Web Performance Optimization) 

Geekzone Price comparison | Amazon Kindle order page | How to get the best out of Geekzone | New Zealand IT Jobs | Geekzone News | Jinglebugs 



659 posts

Ultimate Geek

Subscriber
  Reply # 641611 15-Jun-2012 20:41 Send private message

freitasm: That IP address is from apple.com... I think your modem is being overzealous on what it considers an "attack".


Yeh figured that.... new router, my first upgrade in 5 years....nice having a live log. 
now I know its not worth reading into it. 

Thanks
GOOSE


Create new topic





Twitter »
Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when new jobs are posted to our jobs board:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:




News »
Investor Rowan Simpson backs Timely
Posted 19-Jun-2013 14:36

Orcon Genius Go app set home lines free
Posted 19-Jun-2013 14:26

New Slingshot "Global Mode" gives access to world of content
Posted 19-Jun-2013 13:00

Symantec 2013 Global SMB IT Confidence Index shows top ANZ challenge is keeping up with IT trends
Posted 19-Jun-2013 12:37

Major update to Adobe Creative Cloud now available
Posted 19-Jun-2013 12:15

Geeksphere TV: Episode 23.1
Posted 19-Jun-2013 11:45


Trending now »
Hot discussions in our forums right now:

Sky outbid for EPL rights (Premier League Pass discussion)
Created by JonnyCam, last reply by Benoire on 19-Jun-2013 23:03 (234 replies)
Pages... 14 15 16

Slingshot Global Mode announced
Created by freitasm, last reply by driller2000 on 19-Jun-2013 23:38 (47 replies)
Pages... 2 3 4

Orcon Genius Go discussion
Created by freitasm, last reply by ptinson on 19-Jun-2013 21:22 (46 replies)
Pages... 2 3 4

Condenser Dryer: anyone has one?
Created by joker97, last reply by graemew on 18-Jun-2013 21:08 (31 replies)
Pages... 2 3

I am been sued - HELP!
Created by BaaaaD, last reply by sbiddle on 20-Jun-2013 06:21 (60 replies)
Pages... 2 3 4

Slow YouTube Response
Created by SneakerPimps, last reply by mercutio on 18-Jun-2013 21:34 (23 replies)
Pages... 2

Suggestions for good Windows FTP client please?
Created by freitasm, last reply by myfullflavour on 19-Jun-2013 23:27 (22 replies)
Pages... 2

Anyone else watching paint dry?
Created by gnfb, last reply by DravidDavid on 19-Jun-2013 19:53 (40 replies)
Pages... 2 3


Geekzone Jobs »
Most recent NZ jobs in technology:

Website needed
Posted 19-Jun-2013 22:38

Solution Architect - Pre-Sales element!
Posted 19-Jun-2013 22:38

Senior Business Analyst
Posted 19-Jun-2013 19:38

Java Developer
Posted 19-Jun-2013 19:38

RF Tester
Posted 19-Jun-2013 19:38

Motivated Systems Administrator
Posted 19-Jun-2013 19:38

Senior ASP.Net Developer
Posted 19-Jun-2013 19:38


Geekzone Live »
Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.

Updates »
Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.