Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.

Forums › Vodafone New Zealand, TelstraClear and ihug › Suspected DoS attacks on Ihug (my bad, they are not anything special)


633 posts

Ultimate Geek

Subscriber
Topic # 104143 15-Jun-2012 20:20 Send private message


Just installed a new netgear n300 wireless adsl router and noticed the following addresses in the log.
All DoS attacks.

69.147.244.210:80
69.171.229.70:80
184.87.18.110:443
69.171.229.74:80
79.143.179.103:80
64.31.9.170:80
69.147.244.210:80

Anyone know what I can do about it?

(apart from reboot the modem)

Create new topic
BDFL
43755 posts

Uber Geek

Administrator
Trusted
Geekzone
Subscriber
  Reply # 641597 15-Jun-2012 20:25 Send private message

Are these just scanning the ports? If that's the case it's not necessarily an "attack" and nothing you can do really.

Are all trying to connect to the same port? If that's the case then perhaps the IP address was previously used by a torrent user and other peers are still scanning it?

Restart the modem doesn't stop an attack, or scanning, since it doesn't do anything to the other party...





Mauricio Freitas (Geekzone Admin, Devil's Advocate, my blog, technology disclosure, my tweets, Web Performance Optimization) 

Geekzone Price comparison | Amazon Kindle order page | How to get the best out of Geekzone | New Zealand IT Jobs | Geekzone News | Jinglebugs 

13314 posts

Uber Geek

Trusted
Vodafone NZ
Subscriber
  Reply # 641600 15-Jun-2012 20:27 Send private message

That is not a DoS attack lol




Systems Engineer Vodafone NZ

http://forum.vodafone.co.nz

SCM

295 posts

Ultimate Geek

Subscriber
  Reply # 641601 15-Jun-2012 20:28 Send private message

69.171.229.70 and 69.171.229.74 seem to be Facebook..



633 posts

Ultimate Geek

Subscriber
  Reply # 641602 15-Jun-2012 20:29 Send private message

Seems to be random source IP's however ports 80 and 443 in common. 


[DoS attack: ACK Scan] from source: 17.149.36.120:443



633 posts

Ultimate Geek

Subscriber
  Reply # 641604 15-Jun-2012 20:30 Send private message

johnr: That is not a DoS attack lol


Maybey my router is just reporting it that way. 
I havent suffered 'DoS' symptoms. 


16714 posts

Uber Geek

Moderator
Trusted
Biddle Corp
Subscriber
  Reply # 641605 15-Jun-2012 20:31 Send private message

Gooseybhai: Seems to be random source IP's however ports 80 and 443 in common. 


[DoS attack: ACK Scan] from source: 17.149.36.120:443


Welcome to the internet.

I've got public machines that see thousands of unique IP's and tens of thousands of attempts on SSH, FTP and web ports on a daily basis.





*Need help configuring your Linksys ATA or IP Phones for New Zealand? Check my blog post

BDFL
43755 posts

Uber Geek

Administrator
Trusted
Geekzone
Subscriber
  Reply # 641606 15-Jun-2012 20:31 Send private message

That IP address is from apple.com... I think your modem is being overzealous on what it considers an "attack".





Mauricio Freitas (Geekzone Admin, Devil's Advocate, my blog, technology disclosure, my tweets, Web Performance Optimization) 

Geekzone Price comparison | Amazon Kindle order page | How to get the best out of Geekzone | New Zealand IT Jobs | Geekzone News | Jinglebugs 



633 posts

Ultimate Geek

Subscriber
  Reply # 641611 15-Jun-2012 20:41 Send private message

freitasm: That IP address is from apple.com... I think your modem is being overzealous on what it considers an "attack".


Yeh figured that.... new router, my first upgrade in 5 years....nice having a live log. 
now I know its not worth reading into it. 

Thanks
GOOSE


Create new topic



Twitter »
Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when new jobs are posted to our jobs board:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:




News »
Gen-i and SAP partner in mobile business
Posted 23-May-2013 09:23

Ericsson to close down telecom cable manufacturing
Posted 23-May-2013 08:46

FaceToFace Communications and StarLeaf bring unique cloud-based videoconferencing to Australia and New Zealand
Posted 22-May-2013 09:12

IBM Watson finds a new job: customer services
Posted 22-May-2013 08:37

Microsoft unveils Xbox One
Posted 22-May-2013 08:11

InternetNZ and AUT University form strategic partnership
Posted 21-May-2013 09:29


Trending now »
Hot discussions in our forums right now:

Fecked up religious people strike again :-(
Created by Mark, last reply by nicnzl on 23-May-2013 16:41 (42 replies)
Pages... 2 3

Xbox One
Created by DjShadow, last reply by JimmyH on 23-May-2013 21:32 (56 replies)
Pages... 2 3 4

Entire house HTPC concept
Created by InfiniteLoop, last reply by kiwijunglist on 23-May-2013 23:15 (25 replies)
Pages... 2

Cannabis is illegal yet we have really strong 'legal highs' ?
Created by qwerty7, last reply by freitasm on 23-May-2013 23:20 (74 replies)
Pages... 3 4 5

A new project coming to Geekzone
Created by freitasm, last reply by hamish225 on 23-May-2013 19:14 (278 replies)
Pages... 17 18 19

Truenet Article - VoIP in New Zealand ----- Based on what Mr Butt ???
Created by maverick, last reply by maverick on 23-May-2013 14:28 (17 replies)
Pages... 2

HTC One (2013) owners' discussion
Created by Dingbatt, last reply by bradstewart on 23-May-2013 18:47 (1544 replies)
Pages... 101 102 103

"igov" online passport renewals
Created by Linuxluver, last reply by profrink on 22-May-2013 22:22 (29 replies)
Pages... 2


Geekzone Jobs »
Most recent NZ jobs in technology:

Systems Analyst - mix BA, design & infrastructure
Posted 23-May-2013 22:28

Network Engineer - Urgent Requirement
Posted 23-May-2013 22:28

Senior Java developer - Contract Role
Posted 23-May-2013 22:28

Enterprise Architect
Posted 23-May-2013 22:28

Computer Programmer
Posted 23-May-2013 21:28

Software Developer - Queenstown
Posted 23-May-2013 19:28

Network Performance Engineer
Posted 23-May-2013 19:28


Geekzone Live »
Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.

Updates »
Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.