OTENET & Επιθεσεις

[TifoziF1]

6 συνολικά στην κατεγγελια για τις επιθέσεις, μου 'ρθε με email :

[Volrath]

Σήμερα είχα και γω ιστοριούλα υποθέτω

Router log

05/23/2012 15:38:07 **SYN Flood** 24.84.80.166, 57535->> MY IP, 62915 (from PPPoE1 Inbound)

05/23/2012 15:38:07 **SYN Flood** 174.103.166.41, 14329->> MY IP, 62915 (from PPPoE1 Inbound)

05/23/2012 15:38:07 **SYN Flood** 98.14.122.99, 63835->> MY IP, 62915 (from PPPoE1 Inbound)

05/23/2012 15:38:06 **SYN Flood** 84.249.241.241, 51542->> MY IP, 62915 (from PPPoE1 Inbound)

05/23/2012 15:38:06 **SYN Flood** 89.152.83.152, 32880->> MY IP, 62915 (from PPPoE1 Inbound)

05/23/2012 15:38:06 **SYN Flood** 86.146.41.212, 53302->> MY IP, 62915 (from PPPoE1 Inbound)

05/23/2012 15:38:06 **SYN Flood** 91.180.43.244, 52012->> MY IP, 62915 (from PPPoE1 Inbound)

05/23/2012 15:38:06 **SYN Flood** 89.9.195.55, 60580->> MY IP, 62915 (from PPPoE1 Inbound)

05/23/2012 15:38:06 **SYN Flood** 85.229.35.125, 52124->> MY IP, 62915 (from PPPoE1 Inbound)

05/23/2012 15:38:05 **SYN Flood** 87.93.83.246, 58022->> MY IP, 62915 (from PPPoE1 Inbound)

05/23/2012 15:38:05 **SYN Flood** 192.168.2.4, 52303->> 82.103.140.40, 443 (from PPPoE1 Outbound)

05/23/2012 15:38:05 **SYN Flood** 87.218.116.207, 3905->> MY IP, 62915 (from PPPoE1 Inbound)

05/23/2012 15:38:05 **SYN Flood** 157.157.150.25, 62538->> MY IP, 62915 (from PPPoE1 Inbound)

05/23/2012 15:38:04 **SYN Flood** 174.3.216.10, 56954->> MY IP, 62915 (from PPPoE1 Inbound)

05/23/2012 15:38:04 **SYN Flood** 124.150.46.248, 11392->> MY IP, 62915 (from PPPoE1 Inbound)

05/23/2012 15:38:04 **SYN Flood** 78.0.10.247, 55525->> MY IP, 62915 (from PPPoE1 Inbound)

05/23/2012 15:38:04 **SYN Flood** 192.168.2.4, 52301->> 199.19.80.10, 80 (from PPPoE1 Outbound)

05/23/2012 15:38:03 **SYN Flood** 2.80.242.66, 50771->> MY IP, 62915 (from PPPoE1 Inbound)

05/23/2012 15:38:03 **SYN Flood** 81.159.201.15, 49943->> MY IP, 62915 (from PPPoE1 Inbound)

05/23/2012 15:38:03 192.168.2.4 login success

05/23/2012 15:38:03 **SYN Flood** 81.166.104.106, 54858->> MY IP, 62915 (from PPPoE1 Inbound)

05/23/2012 15:38:03 **SYN Flood** 85.241.172.247, 53259->> MY IP, 62915 (from PPPoE1 Inbound)

05/23/2012 15:38:03 **SYN Flood** 108.161.125.120, 63836->> MY IP, 62915 (from PPPoE1 Inbound)

05/23/2012 15:38:03 **SYN Flood** 82.143.248.115, 64632->> MY IP, 62915 (from PPPoE1 Inbound)

05/23/2012 15:38:03 **SYN Flood** 189.71.253.22, 5710->> MY IP, 62915 (from PPPoE1 Inbound)

05/23/2012 15:38:02 User from 192.168.2.4 timed out

05/23/2012 15:38:02 **SYN Flood** 98.150.254.200, 56305->> MY IP, 62915 (from PPPoE1 Inbound)

05/23/2012 15:38:02 **SYN Flood** 78.84.173.65, 55241->> MY IP, 62915 (from PPPoE1 Inbound)

05/23/2012 15:38:02 **SYN Flood** 31.45.107.118, 58022->> MY IP, 62915 (from PPPoE1 Inbound)

05/23/2012 15:38:02 **SYN Flood** 83.233.44.133, 51724->> MY IP, 62915 (from PPPoE1 Inbound)

05/23/2012 15:38:01 **SYN Flood** 14.202.64.30, 35516->> MY IP, 62915 (from PPPoE1 Inbound)

05/23/2012 15:38:01 **SYN Flood** 84.20.247.6, 51307->> MY IP, 62915 (from PPPoE1 Inbound)

05/23/2012 15:38:00 **SYN Flood** 89.181.218.65, 58365->> MY IP, 62915 (from PPPoE1 Inbound)

05/23/2012 15:38:00 **SYN Flood** 193.89.188.138, 39211->> MY IP, 62915 (from PPPoE1 Inbound)

05/23/2012 15:38:00 **SYN Flood** 187.113.163.56, 26385->> MY IP, 62915 (from PPPoE1 Inbound)

05/23/2012 15:38:00 **SYN Flood** 174.24.137.159, 4710->> MY IP, 62915 (from PPPoE1 Inbound)

05/23/2012 15:37:59 **SYN Flood** 109.231.3.61, 31495->> MY IP, 62915 (from PPPoE1 Inbound)

05/23/2012 15:37:59 **SYN Flood** 90.191.218.57, 59838->> MY IP, 62915 (from PPPoE1 Inbound)

05/23/2012 15:37:59 **SYN Flood** 85.241.172.247, 53205->> MY IP, 62915 (from PPPoE1 Inbound)

05/23/2012 15:37:59 **SYN Flood** 116.193.134.106, 3313->> MY IP, 62915 (from PPPoE1 Inbound)

05/23/2012 15:37:59 **SYN Flood** 192.168.2.4, 52303->> 82.103.140.40, 443 (from PPPoE1 Outbound)

05/23/2012 15:37:59 **SYN Flood** 89.137.254.152, 57838->> MY IP, 62915 (from PPPoE1 Inbound)

05/23/2012 15:37:59 **SYN Flood** 78.101.144.156, 59502->> MY IP, 62915 (from PPPoE1 Inbound)

05/23/2012 15:37:59 **SYN Flood** 46.249.164.214, 15723->> MY IP, 62915 (from PPPoE1 Inbound)

05/23/2012 15:37:59 **SYN Flood** 83.165.42.71, 50018->> MY IP, 62915 (from PPPoE1 Inbound)

05/23/2012 15:37:58 **SYN Flood** 211.26.30.167, 57965->> MY IP, 62915 (from PPPoE1 Inbound)

05/23/2012 15:37:58 **SYN Flood** 84.248.228.208, 59544->> MY IP, 62915 (from PPPoE1 Inbound)

05/23/2012 15:37:58 **SYN Flood** 192.168.2.4, 52301->> 199.19.80.10, 80 (from PPPoE1 Outbound)

05/23/2012 15:37:58 **SYN Flood** 50.72.73.198, 62055->> MY IP, 62915 (from PPPoE1 Inbound)

05/23/2012 15:37:58 **SYN Flood** 50.46.218.98, 51868->> MY IP, 62915 (from PPPoE1 Inbound)

05/23/2012 15:37:57 **SYN Flood** 108.71.213.139, 63192->> MY IP, 62915 (from PPPoE1 Inbound)

05/23/2012 15:37:57 **SYN Flood** 85.241.172.247, 53161->> MY IP, 62915 (from PPPoE1 Inbound)

05/23/2012 15:37:57 **SYN Flood** 89.212.224.203, 54926->> MY IP, 62915 (from PPPoE1 Inbound)

05/23/2012 15:37:57 **SYN Flood** 176.241.40.182, 64437->> MY IP, 62915 (from PPPoE1 Inbound)

05/23/2012 15:37:57 **SYN Flood** 71.172.80.223, 62300->> MY IP, 62915 (from PPPoE1 Inbound)

05/23/2012 15:37:57 **SYN Flood** 190.195.206.140, 32791->> MY IP, 62915 (from PPPoE1 Inbound)

05/23/2012 15:37:57 **SYN Flood** 85.220.76.31, 63287->> MY IP, 62915 (from PPPoE1 Inbound)

05/23/2012 15:37:57 **SYN Flood** 90.191.120.114, 61988->> MY IP, 62915 (from PPPoE1 Inbound)

05/23/2012 15:37:57 **SYN Flood** 77.77.28.232, 2288->> MY IP, 62915 (from PPPoE1 Inbound)

05/23/2012 15:37:56 **SYN Flood** 99.149.28.200, 4900->> MY IP, 62915 (from PPPoE1 Inbound)

05/23/2012 15:37:56 **SYN Flood** 192.168.2.4, 52303->> 82.103.140.40, 443 (from PPPoE1 Outbound)

05/23/2012 15:37:56 **SYN Flood** 216.24.205.54, 50089->> MY IP, 62915 (from PPPoE1 Inbound)

05/23/2012 15:37:55 **SYN Flood** 178.196.122.23, 54369->> MY IP, 62915 (from PPPoE1 Inbound)

05/23/2012 15:37:55 **SYN Flood** 91.132.220.20, 60110->> MY IP, 62915 (from PPPoE1 Inbound)

05/23/2012 15:37:55 **SYN Flood** 85.241.172.247, 53119->> MY IP, 62915 (from PPPoE1 Inbound)

05/23/2012 15:37:55 **SYN Flood** 192.168.2.4, 52301->> 199.19.80.10, 80 (from PPPoE1 Outbound)

05/23/2012 15:37:55 **SYN Flood** 71.95.180.173, 62247->> MY IP, 62915 (from PPPoE1 Inbound)

05/23/2012 15:37:55 **SYN Flood** 68.47.38.136, 52056->> MY IP, 62915 (from PPPoE1 Inbound)

05/23/2012 15:37:55 **SYN Flood** 80.216.33.58, 55742->> MY IP, 62915 (from PPPoE1 Inbound)

05/23/2012 15:37:02 **SYN Flood** 41.135.49.143, 60302->> MY IP, 62915 (from PPPoE1 Inbound)

05/23/2012 15:34:51 **UDP Loop** 62.238.181.3, 61217->> MY IP, 19 (from PPPoE1 Inbound)

05/23/2012 15:34:06 **UDP Loop** 62.238.181.3, 61217->> MY IP, 19 (from PPPoE1 Inbound)

05/23/2012 15:33:51 **UDP Loop** 62.238.181.3, 63875->> 192.168.2.4, 62915 (from PPPoE1 Inbound)

05/23/2012 15:33:43 **UDP Loop** 62.238.181.3, 63875->> 192.168.2.4, 62915 (from PPPoE1 Inbound)

05/23/2012 15:33:39 **UDP Loop** 62.238.181.3, 63875->> 192.168.2.4, 62915 (from PPPoE1 Inbound)

05/23/2012 15:33:37 **UDP Loop** 62.238.181.3, 61217->> MY IP, 19 (from PPPoE1 Inbound)

05/23/2012 15:33:36 **UDP Loop** 62.238.181.3, 61217->> MY IP, 19 (from PPPoE1 Inbound)

05/23/2012 15:33:20 **UDP Loop** 62.238.181.3, 63875->> 192.168.2.4, 62915 (from PPPoE1 Inbound)

05/23/2012 15:33:01 **UDP Loop** 62.238.181.3, 61217->> MY IP, 19 (from PPPoE1 Inbound)

05/23/2012 15:32:50 **UDP Loop** 62.238.181.3, 61217->> MY IP, 19 (from PPPoE1 Inbound)

05/23/2012 15:32:46 **UDP Loop** 62.238.181.3, 61217->> MY IP, 19 (from PPPoE1 Inbound)

05/23/2012 15:32:45 **UDP Loop** 62.238.181.3, 63875->> 192.168.2.4, 62915 (from PPPoE1 Inbound)

05/23/2012 15:32:43 **UDP Loop** 62.238.181.3, 63875->> 192.168.2.4, 62915 (from PPPoE1 Inbound)

05/23/2012 15:32:40 **UDP Loop** 62.238.181.3, 63875->> 192.168.2.4, 62915 (from PPPoE1 Inbound)

05/23/2012 15:32:38 **UDP Loop** 62.238.181.3, 61217->> MY IP, 19 (from PPPoE1 Inbound)

05/23/2012 15:32:37 **UDP Loop** 62.238.181.3, 63875->> 192.168.2.4, 62915 (from PPPoE1 Inbound)

05/23/2012 15:32:27 **UDP Loop** 62.238.181.3, 61217->> MY IP, 19 (from PPPoE1 Inbound)

05/23/2012 15:32:23 **UDP Loop** 62.238.181.3, 63875->> 192.168.2.4, 62915 (from PPPoE1 Inbound)

05/23/2012 15:32:21 **UDP Loop** 62.238.181.3, 63875->> 192.168.2.4, 62915 (from PPPoE1 Inbound)

05/23/2012 15:32:19 **UDP Loop** 62.238.181.3, 63875->> 192.168.2.4, 62915 (from PPPoE1 Inbound)

05/23/2012 15:32:18 **UDP Loop** 62.238.181.3, 63875->> 192.168.2.4, 62915 (from PPPoE1 Inbound)

05/23/2012 15:32:14 **UDP Loop** 62.238.181.3, 61217->> MY IP, 19 (from PPPoE1 Inbound)

05/23/2012 15:32:11 **UDP Loop** 62.238.181.3, 61217->> MY IP, 19 (from PPPoE1 Inbound)

05/23/2012 15:32:10 **UDP Loop** 62.238.181.3, 61217->> MY IP, 19 (from PPPoE1 Inbound)

05/23/2012 15:32:09 **UDP Loop** 62.238.181.3, 63875->> 192.168.2.4, 62915 (from PPPoE1 Inbound)

05/23/2012 15:32:07 **UDP Loop** 62.238.181.3, 63875->> 192.168.2.4, 62915 (from PPPoE1 Inbound)

05/23/2012 15:32:06 **UDP Loop** 62.238.181.3, 61217->> MY IP, 19 (from PPPoE1 Inbound)

05/23/2012 15:31:55 **UDP Loop** 62.238.181.3, 61217->> MY IP, 19 (from PPPoE1 Inbound)

05/23/2012 15:31:51 **UDP Loop** 62.238.181.3, 61217->> MY IP, 19 (from PPPoE1 Inbound)

05/23/2012 15:31:47 **UDP Loop** 62.238.181.3, 61217->> MY IP, 19 (from PPPoE1 Inbound)

05/23/2012 15:31:45 **UDP Loop** 62.238.181.3, 61217->> MY IP, 19 (from PPPoE1 Inbound)

05/23/2012 15:31:44 **UDP Loop** 62.238.181.3, 63875->> 192.168.2.4, 62915 (from PPPoE1 Inbound)

Έφαγε κανείς άλλος τίποτα αντίστοιχο;

[TifoziF1]

Καλά που μου το θύμισες !

Σήμερα λίγει ο μήνας και ΚΑΜΙΑ απάντηση από OTENET

Πάμε για 2η καταγγελία ?

[Volrath]

Θέλω να δω μήπως έχω κολλήσει καμιά ιστορία..μετά το ip refresh μου έβγαλε το εξής:

05/23/2012 15:57:30 **Smurf** 192.168.56.255->> 192.168.2.4, Type:3, Code:3 (from LAN Outbound)

05/23/2012 15:57:29 **Smurf** 192.168.56.255->> 192.168.2.4, Type:3, Code:3 (from LAN Outbound)

05/23/2012 15:57:27 **Smurf** 192.168.56.255->> 192.168.2.4, Type:3, Code:3 (from LAN Outbound)

192.168.2.Χ είναι το pool του εσωτερικού δικτύου μου...

[suboy]

o firewall (watchguard) συχνά τραβάει block στις 175.170.0.2 & 62.1.1.62 με reason: Port scan attack