Firewall Attacked !

Forums › Spark New Zealand (including Skinny and BigPipe) › Firewall Attacked !

n00dy

482 posts

Ultimate Geek
+1 received by user: 3

Lifetime subscriber

#97563 16-Feb-2012 21:31

I recently switched to a static ip and I have noticed for the 1st time that my firewall is being attacked, Never has a an attack previously ( well not that the moden reported "Blocked attack"
ip address are
125.46.54.220Not available006View attack details95.9.221.34Not available100View attack details178.15.3.130Not available001View attack details84.109.176.58
Any ideas

keewee01

1743 posts

Uber Geek
+1 received by user: 204

Trusted

#582577 16-Feb-2012 21:40

Your comment suggests that you weren't having the previous modem report attacks (or that you weren't watching for them), so how do you know that they weren't happening previously? Is it that you have just noticed for the first time and that they may have always been happening?

I don't think you are comparing apples with apples.

Pretty sure you haven't seen any change in activity.

When I use to be on a cable modem and running Smoothwall I would always be seeing attacks of various kinds. It's just the norm when you actually looks at the logs and stats.

sbiddle

30853 posts

Uber Geek
+1 received by user: 9996

Retired Mod

Trusted

Biddle Corp

Lifetime subscriber

#582581 16-Feb-2012 21:54

I've got numerous boxes that get hundreds of hacking attempts per day. My firewall and home has port scanning and hacking attempts on a daily basis, and my IP PBX at home blocks bots trying to exploit insecure SIP connections at least once every other day.

Welcome to the internet.

n00dy

482 posts

Ultimate Geek
+1 received by user: 3

Lifetime subscriber

#582604 16-Feb-2012 22:36

keewee01:
Your comment suggests that you weren't having the previous modem report attacks (or that you weren't watching for them), so how do you know that they weren't happening previously? Is it that you have just noticed for the first time and that they may have always been happening?

Never noticed on my previous modem logs however the new modem had a section that highlights attacks

I dont know if they were happening previously but I was working on the assumption that as I previously had a dynamic IP that changed reguarly it was less likely to recieve attacks however now I have a static IP that attempts to access may have increased as the IP never changes

xpd

Geek of Coastguard
14118 posts

Uber Geek
+1 received by user: 4580

Retired Mod

ID Verified

Trusted

Lifetime subscriber

#582683 17-Feb-2012 09:15

Its the internet... almost every IP out there probably gets "attacked" - however a lot of firewalls report scans as attacks as well, so without seeing full details on that "attack", you probably have nothing to worry about.

XPD / Gavin

LinkTree

Zeon

3926 posts

Uber Geek
+1 received by user: 759

Trusted

#582684 17-Feb-2012 09:18

Very common place - this is the internet after all. Our firewall blocks tens of thousands every hour so nothing special here.

Speedtest 2019-10-14

gjm

810 posts

Ultimate Geek
+1 received by user: 122

#582702 17-Feb-2012 09:45

plug an unpatched windows machine into a direct internet connection and see how long it lasts. IP ranges are always being scanned for exploits, just comes with the net unfortunately.

Do surveys for Beer money (referral link) - Octopus Group

Link for buying beer (not affiliated, just like beer) - Good George

Quic Broadband

Move to New Zealand's best fibre broadband service (affiliate link). Free setup code: R587125ERQ6VE. Note that to use Quic Broadband you must be comfortable with configuring your own router.

xpd

Geek of Coastguard
14118 posts

Uber Geek
+1 received by user: 4580

Retired Mod

ID Verified

Trusted

Lifetime subscriber

#582705 17-Feb-2012 09:52

gjm: plug an unpatched windows machine into a direct internet connection and see how long it lasts. IP ranges are always being scanned for exploits, just comes with the net unfortunately.

Did this for 2 days with a Win98 box....not a thing happened. Was quite surprised. :)

XPD / Gavin

LinkTree

gjm

810 posts

Ultimate Geek
+1 received by user: 122

#582711 17-Feb-2012 10:12

is that security by obsolescence?

Do surveys for Beer money (referral link) - Octopus Group

Link for buying beer (not affiliated, just like beer) - Good George