Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.



934 posts

Ultimate Geek
+1 received by user: 29

Subscriber

Topic # 104143 15-Jun-2012 20:20 Send private message


Just installed a new netgear n300 wireless adsl router and noticed the following addresses in the log.
All DoS attacks.

69.147.244.210:80
69.171.229.70:80
184.87.18.110:443
69.171.229.74:80
79.143.179.103:80
64.31.9.170:80
69.147.244.210:80

Anyone know what I can do about it?

(apart from reboot the modem)

Create new topic
BDFL
47987 posts

Uber Geek
+1 received by user: 3557

Administrator
Trusted
Geekzone
Subscriber

  Reply # 641597 15-Jun-2012 20:25 Send private message

Are these just scanning the ports? If that's the case it's not necessarily an "attack" and nothing you can do really.

Are all trying to connect to the same port? If that's the case then perhaps the IP address was previously used by a torrent user and other peers are still scanning it?

Restart the modem doesn't stop an attack, or scanning, since it doesn't do anything to the other party...




15563 posts

Uber Geek
+1 received by user: 829

Trusted
Vodafone NZ
Subscriber

  Reply # 641600 15-Jun-2012 20:27 Send private message

That is not a DoS attack lol




SCM

Kiwi Rebel
376 posts

Ultimate Geek
+1 received by user: 28

Subscriber

  Reply # 641601 15-Jun-2012 20:28 Send private message

69.171.229.70 and 69.171.229.74 seem to be Facebook..



934 posts

Ultimate Geek
+1 received by user: 29

Subscriber

  Reply # 641602 15-Jun-2012 20:29 Send private message

Seems to be random source IP's however ports 80 and 443 in common. 


[DoS attack: ACK Scan] from source: 17.149.36.120:443



934 posts

Ultimate Geek
+1 received by user: 29

Subscriber

  Reply # 641604 15-Jun-2012 20:30 Send private message

johnr: That is not a DoS attack lol


Maybey my router is just reporting it that way. 
I havent suffered 'DoS' symptoms. 


18571 posts

Uber Geek
+1 received by user: 736

Moderator
Trusted
Biddle Corp
Subscriber

  Reply # 641605 15-Jun-2012 20:31 Send private message

Gooseybhai: Seems to be random source IP's however ports 80 and 443 in common. 


[DoS attack: ACK Scan] from source: 17.149.36.120:443


Welcome to the internet.

I've got public machines that see thousands of unique IP's and tens of thousands of attempts on SSH, FTP and web ports on a daily basis.


BDFL
47987 posts

Uber Geek
+1 received by user: 3557

Administrator
Trusted
Geekzone
Subscriber

  Reply # 641606 15-Jun-2012 20:31 Send private message

That IP address is from apple.com... I think your modem is being overzealous on what it considers an "attack".






934 posts

Ultimate Geek
+1 received by user: 29

Subscriber

  Reply # 641611 15-Jun-2012 20:41 Send private message

freitasm: That IP address is from apple.com... I think your modem is being overzealous on what it considers an "attack".


Yeh figured that.... new router, my first upgrade in 5 years....nice having a live log. 
now I know its not worth reading into it. 

Thanks
GOOSE


Create new topic








Twitter »
Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when new jobs are posted to our jobs board:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:




News »

Trending now »
Hot discussions in our forums right now:

Telecom introduces unlimited broadband data plan
Created by freitasm, last reply by NonprayingMantis on 23-Apr-2014 23:13 (93 replies)
Pages... 5 6 7


Stonedine
Created by Lizard1977, last reply by surfisup1000 on 23-Apr-2014 21:27 (58 replies)
Pages... 2 3 4


Telecom has started metering their TiVo customers' broadband usage (WITHOUT PRENOTIFICATION)
Created by Peteriv, last reply by mxpress on 23-Apr-2014 14:22 (69 replies)
Pages... 3 4 5


Forms of government for New Zealand
Created by charsleysa, last reply by KiwiNZ on 23-Apr-2014 20:57 (169 replies)
Pages... 10 11 12


Parallel imported product
Created by Wills1, last reply by joker97 on 23-Apr-2014 21:01 (53 replies)
Pages... 2 3 4


MH370 - Call for Search & Rescue Help
Created by DS248, last reply by joker97 on 23-Apr-2014 22:37 (737 replies)
Pages... 48 49 50


Labour MP Shane Jones to step down
Created by jeffnz, last reply by jeffnz on 23-Apr-2014 20:41 (32 replies)
Pages... 2 3


Upcoming Freeview Restack AUCKLAND
Created by Brunzy, last reply by richms on 23-Apr-2014 21:05 (13 replies)


Geekzone Live »
Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.

Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.