Suspected DoS attacks on Ihug (my bad, they are not anything special)

Forums › One New Zealand (including Vodafone, WxC, Farmside) › Suspected DoS attacks on Ihug (my bad, they are not anything special)

Goosey

2839 posts

Uber Geek

Subscriber

#104143 15-Jun-2012 20:20

Just installed a new netgear n300 wireless adsl router and noticed the following addresses in the log.
All DoS attacks.

69.147.244.210:80
69.171.229.70:80
184.87.18.110:443
69.171.229.74:80
79.143.179.103:80
64.31.9.170:80
69.147.244.210:80

Anyone know what I can do about it?

(apart from reboot the modem)

freitasm

BDFL - Memuneh
79324 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#641597 15-Jun-2012 20:25

Are these just scanning the ports? If that's the case it's not necessarily an "attack" and nothing you can do really.

Are all trying to connect to the same port? If that's the case then perhaps the IP address was previously used by a torrent user and other peers are still scanning it?

Restart the modem doesn't stop an attack, or scanning, since it doesn't do anything to the other party...

johnr

19282 posts

Uber Geek
Inactive user

#641600 15-Jun-2012 20:27

That is not a DoS attack lol

SCM

459 posts

Ultimate Geek

#641601 15-Jun-2012 20:28

69.171.229.70 and 69.171.229.74 seem to be Facebook..

Goosey

2839 posts

Uber Geek

Subscriber

#641602 15-Jun-2012 20:29

Seems to be random source IP's however ports 80 and 443 in common.

[DoS attack: ACK Scan] from source: 17.149.36.120:443

Goosey

2839 posts

Uber Geek

Subscriber

#641604 15-Jun-2012 20:30

johnr: That is not a DoS attack lol

Maybey my router is just reporting it that way.
I havent suffered 'DoS' symptoms.

sbiddle

30853 posts

Uber Geek

Retired Mod

Trusted

Biddle Corp

Lifetime subscriber

#641605 15-Jun-2012 20:31

Gooseybhai: Seems to be random source IP's however ports 80 and 443 in common.

[DoS attack: ACK Scan] from source: 17.149.36.120:443

Welcome to the internet.

I've got public machines that see thousands of unique IP's and tens of thousands of attempts on SSH, FTP and web ports on a daily basis.