Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.


Forums › One NZ (including Farmside) › Suspected DoS attacks on Ihug (my bad, they are not anything special)
Goosey

3016 posts

Uber Geek
+1 received by user: 871

Subscriber

#104143 15-Jun-2012 20:20
Send private message


Just installed a new netgear n300 wireless adsl router and noticed the following addresses in the log.
All DoS attacks.

69.147.244.210:80
69.171.229.70:80
184.87.18.110:443
69.171.229.74:80
79.143.179.103:80
64.31.9.170:80
69.147.244.210:80

Anyone know what I can do about it?

(apart from reboot the modem)

Create new topic
freitasm
BDFL - Memuneh
80652 posts

Uber Geek
+1 received by user: 41045

Administrator
ID Verified
Trusted
Geekzone
Lifetime subscriber

  #641597 15-Jun-2012 20:25
Send private message

Are these just scanning the ports? If that's the case it's not necessarily an "attack" and nothing you can do really.

Are all trying to connect to the same port? If that's the case then perhaps the IP address was previously used by a torrent user and other peers are still scanning it?

Restart the modem doesn't stop an attack, or scanning, since it doesn't do anything to the other party...




Referral links: Quic Broadband (free setup code: R587125ERQ6VE) | Samsung | AliExpress | Wise | Sharesies 

 

Support Geekzone by subscribing (browse ads-free), or making a one-off or recurring donation through PressPatron.

 



johnr
19282 posts

Uber Geek
+1 received by user: 2526
Inactive user


  #641600 15-Jun-2012 20:27
Send private message

That is not a DoS attack lol

SCM

SCM
459 posts

Ultimate Geek
+1 received by user: 48


  #641601 15-Jun-2012 20:28
Send private message

69.171.229.70 and 69.171.229.74 seem to be Facebook..




 Click to see full size

 

 



Goosey

3016 posts

Uber Geek
+1 received by user: 871

Subscriber

  #641602 15-Jun-2012 20:29
Send private message

Seems to be random source IP's however ports 80 and 443 in common. 


[DoS attack: ACK Scan] from source: 17.149.36.120:443

Goosey

3016 posts

Uber Geek
+1 received by user: 871

Subscriber

  #641604 15-Jun-2012 20:30
Send private message

johnr: That is not a DoS attack lol


Maybey my router is just reporting it that way. 
I havent suffered 'DoS' symptoms. 


sbiddle
30853 posts

Uber Geek
+1 received by user: 9996

Retired Mod
Trusted
Biddle Corp
Lifetime subscriber

  #641605 15-Jun-2012 20:31
Send private message

Gooseybhai: Seems to be random source IP's however ports 80 and 443 in common. 


[DoS attack: ACK Scan] from source: 17.149.36.120:443


Welcome to the internet.

I've got public machines that see thousands of unique IP's and tens of thousands of attempts on SSH, FTP and web ports on a daily basis.


 
 
 
 

Shop on-line at New World now for your groceries (affiliate link).
freitasm
BDFL - Memuneh
80652 posts

Uber Geek
+1 received by user: 41045

Administrator
ID Verified
Trusted
Geekzone
Lifetime subscriber

  #641606 15-Jun-2012 20:31
Send private message

That IP address is from apple.com... I think your modem is being overzealous on what it considers an "attack".




Referral links: Quic Broadband (free setup code: R587125ERQ6VE) | Samsung | AliExpress | Wise | Sharesies 

 

Support Geekzone by subscribing (browse ads-free), or making a one-off or recurring donation through PressPatron.

 

Goosey

3016 posts

Uber Geek
+1 received by user: 871

Subscriber

  #641611 15-Jun-2012 20:41
Send private message

freitasm: That IP address is from apple.com... I think your modem is being overzealous on what it considers an "attack".


Yeh figured that.... new router, my first upgrade in 5 years....nice having a live log. 
now I know its not worth reading into it. 

Thanks
GOOSE


Create new topic








Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.


Updates »

Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.








RSS feeds
Main feed
Forums feed
Copyright
©2002-2026 Geekzone®
Site features
Geekzone BI dashboard
Geekzone Badges
Geekzone Status Page

 

Site Information
Subscribe to Geekzone
Privacy Statement
Forum Usage Guidelines (FUG)
Advertising
Trademark and copyright