Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.


adslgeek

50 posts

Geek


#51074 27-Nov-2009 00:56
Send private message

As we head into School holidays, might be a good idea to check out your DSL router security:

Especially if you are using:

Linksys (x30 models)
Netgear (x10 models)

As well as about 15 other models of cable and DSL modems, as there is a new type of virus that focusses in on attacking your DSL router rather than the PC.

Meaning that the router can then do and control all sorts of nasty things to you.

For more info:
http://www.adslgeek.com/blog/?p=3225


Some dude was seeing the following, and it is only going to get worse as we go into School holidays:



Quote:
2009/11/25 11:30:24 Trojan Scan <TCP> Source IP:202.180.64.10 Port:53 Dest IP: Port:1243 
2009/11/25 11:30:24 Trojan Scan <TCP> Source IP:202.180.64.11 Port:53 Dest IP: Port:1243 
2009/11/25 11:30:29 Trojan Scan <TCP> Source IP:202.180.64.10 Port:53 Dest IP: Port:1243 
2009/11/25 11:30:29 Trojan Scan <TCP> Source IP:202.180.64.11 Port:53 Dest IP: Port:1243 
2009/11/25 12:55:04 Trojan Scan <TCP> Source IP:202.180.64.10 Port:53 Dest IP: Port:1999 
2009/11/25 12:55:04 Trojan Scan <TCP> Source IP:202.180.64.11 Port:53 Dest IP: Port:1999 
2009/11/25 12:55:09 Trojan Scan <TCP> Source IP:202.180.64.10 Port:53 Dest IP: Port:1999 
2009/11/25 12:55:09 Trojan Scan <TCP> Source IP:202.180.64.11 Port:53 Dest IP: Port:1999 
2009/11/26 06:52:11 Trojan Scan <TCP> Source IP:202.89.36.226 Port:80 Dest IP: Port:1243 
2009/11/26 06:52:14 Trojan Scan <TCP> Source IP:202.89.36.226 Port:80 Dest IP: Port:1243 
2009/11/26 06:52:17 Trojan Scan <TCP> Source IP:202.89.36.226 Port:80 Dest IP: Port:1243 
2009/11/26 06:52:20 Trojan Scan <TCP> Source IP:202.89.36.226 Port:80 Dest IP: Port:1243 
2009/11/26 06:52:26 Trojan Scan <TCP> Source IP:202.89.36.226 Port:80 Dest IP: Port:1243 
2009/11/26 06:52:38 Trojan Scan <TCP> Source IP:202.89.36.226 Port:80 Dest IP: Port:1243 
2009/11/26 12:09:42 Trojan Scan <TCP> Source IP:119.224.143.10 Port:80 Dest IP: Port:1999 
2009/11/26 12:09:45 Trojan Scan <TCP> Source IP:119.224.143.10 Port:80 Dest IP: Port:1999 
2009/11/26 12:09:46 Trojan Scan <TCP> Source IP:119.224.143.10 Port:80 Dest IP: Port:1999 
2009/11/26 12:09:51 Trojan Scan <TCP> Source IP:119.224.143.10 Port:80 Dest IP: Port:1999 
2009/11/26 12:09:52 Trojan Scan <TCP> Source IP:119.224.143.10 Port:80 Dest IP: Port:1999 
2009/11/26 12:10:02 Trojan Scan <TCP> Source IP:119.224.143.10 Port:80 Dest IP: Port:1999 
2009/11/26 12:10:23 Trojan Scan <TCP> Source IP:119.224.143.10 Port:80 Dest IP: Port:1999 
2009/11/26 12:11:07 Trojan Scan <TCP> Source IP:119.224.143.10 Port:80 Dest IP: Port:1999



Create new topic
Detruire
1296 posts

Uber Geek


  #276722 27-Nov-2009 01:44
Send private message

Might be worth noting that those IPs all seem to be in use by the ISPs themselves (rather than being allocated to DSL/dialup/etc customers).

202.89.36.226 => authent2.tranzpeer.net
119.224.143.10 => Akamai cache (that I'm currently downloading from)

However, I do find this one rather amusing:
202.89.36.226 (and, yes, it does seem to have the correct RDNS entry.)




rm *


Create new topic





News »

Huawei launches IdeaHub Pro in New Zealand
Posted 27-Oct-2020 16:41


Southland-based IT specialist providing virtual services worldwide
Posted 27-Oct-2020 15:55


NASA discovers water on sunlit surface of Moon
Posted 27-Oct-2020 08:30


Huawei introduces new features to Petal Search, Maps and Docs
Posted 26-Oct-2020 18:05


Nokia selected by NASA to build first ever cellular network on the Moon
Posted 21-Oct-2020 08:34


Nanoleaf enhances lighting line with launch of Triangles and Mini Triangles
Posted 17-Oct-2020 20:18


Synology unveils DS16211+
Posted 17-Oct-2020 20:12


Ingram Micro introduces FootfallCam to New Zealand channel
Posted 17-Oct-2020 20:06


Dropbox adopts Virtual First working policy
Posted 17-Oct-2020 19:47


OPPO announces Reno4 Series 5G line-up in NZ
Posted 16-Oct-2020 08:52


Microsoft Highway to a Hundred expands to Asia Pacific
Posted 14-Oct-2020 09:34


Spark turns on 5G in Auckland
Posted 14-Oct-2020 09:29


AMD Launches AMD Ryzen 5000 Series Desktop Processors
Posted 9-Oct-2020 10:13


Teletrac Navman launches integrated multi-camera solution for transport and logistics industry
Posted 8-Oct-2020 10:57


Farmside hits 10,000 RBI customers
Posted 7-Oct-2020 15:32



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.


Support Geekzone »

Our community of supporters help make Geekzone possible. Click the button below to join them.

Support Geezone on PressPatron



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.