Jump to content

DoS attacks

Poohy14
By Poohy14
in Networking
 Share
Posted

Hi, for the past week I have been getting DoS attacked and well my internet goes off line till I can hard reset the router. The attacks only happens at night time like 2 am. I am using a Netgear N900 for my router. Just wanting to know what I should do to stop the attacks or try and make it harder to find my IP address without sacrificing my ping. 

Logs from my router - 
[DoS Attack: ACK Scan] from source: 62.122.207.162, port 38782

[DoS Attack: ACK Scan] from source: 83.23.93.81, port 54629
[DoS Attack: ACK Scan] from source: 66.87.149.157, port 21114
[DoS Attack: ACK Scan] from source: 71.54.66.219, port 58000

Don't know that much about networking so that's why I came here and see what you experts should think I should do.

 

Also my internet speed is 

4127064471.png


Thanks for helping me out.

Well this is happening to me right now

[WLAN access rejected: incorrect security] from MAC address d8:9d:67:55:f2:49, Sunday, February 08, 2015 12:19:54

[LAN access from remote] from 99.88.161.250:52260 to 192.168.1.2:30715, Sunday, February 08, 2015 12:19:12
[WLAN access rejected: incorrect security] from MAC address d8:9d:67:55:f2:49, Sunday, February 08, 2015 12:19:11
[LAN access from remote] from 179.209.7.179:37428 to 192.168.1.2:30715, Sunday, February 08, 2015 12:18:51
[admin login] from source 192.168.1.2, Sunday, February 08, 2015 12:18:37
[WLAN access rejected: incorrect security] from MAC address d8:9d:67:55:f2:49, Sunday, February 08, 2015 12:18:27
[DoS Attack: ACK Scan] from source: 105.233.172.84, port 57460, Sunday, February 08, 2015 12:17:45
[WLAN access rejected: incorrect security] from MAC address d8:9d:67:55:f2:49, Sunday, February 08, 2015 12:17:44
[DoS Attack: ACK Scan] from source: 105.233.172.84, port 57460, Sunday, February 08, 2015 12:17:42
[WLAN access rejected: incorrect security] from MAC address d8:9d:67:55:f2:49, Sunday, February 08, 2015 12:16:18
[LAN access from remote] from 85.73.212.34:3020 to 192.168.1.2:30715, Sunday, February 08, 2015 12:15:53
[uPnP set event: add_nat_rule] from source 192.168.1.2, Sunday, February 08, 2015 12:15:49
[uPnP set event: del_nat_rule] from source 192.168.1.2, Sunday, February 08, 2015 12:15:47
[WLAN access rejected: incorrect security] from MAC address d8:9d:67:55:f2:49, Sunday, February 08, 2015 12:14:08
[DoS Attack: ACK Scan] from source: 124.148.111.165, port 65311, Sunday, February 08, 2015 12:13:55
[WLAN access rejected: incorrect security] from MAC address d8:9d:67:55:f2:49, Sunday, February 08, 2015 12:12:42
[uPnP set event: del_nat_rule] from source 192.168.1.2, Sunday, February 08, 2015 12:12:38
[LAN access from remote] from 162.157.188.116:62982 to 192.168.1.2:45694, Sunday, February 08, 2015 12:12:33
[LAN access from remote] from 83.85.75.120:62395 to 192.168.1.2:45694, Sunday, February 08, 2015 12:12:27
[LAN access from remote] from 82.149.8.218:59133 to 192.168.1.2:45694, Sunday, February 08, 2015 12:12:22
[LAN access from remote] from 83.134.102.18:44883 to 192.168.1.2:45694, Sunday, February 08, 2015 12:12:17
[LAN access from remote] from 97.96.9.6:60059 to 192.168.1.2:45694, Sunday, February 08, 2015 12:12:12
[LAN access from remote] from 81.152.191.120:63565 to 192.168.1.2:45694, Sunday, February 08, 2015 12:12:07
[DoS Attack: ACK Scan] from source: 171.96.179.210, port 62507, Sunday, February 08, 2015 12:12:04
[LAN access from remote] from 185.21.216.186:48817 to 192.168.1.2:45694, Sunday, February 08, 2015 12:12:02
[WLAN access rejected: incorrect security] from MAC address d8:9d:67:55:f2:49, Sunday, February 08, 2015 12:11:58
[LAN access from remote] from 99.88.161.250:59624 to 192.168.1.2:30715, Sunday, February 08, 2015 12:11:57
[LAN access from remote] from 5.66.79.127:3937 to 192.168.1.2:45694, Sunday, February 08, 2015 12:11:54
[LAN access from remote] from 175.142.252.24:43139 to 192.168.1.2:45694, Sunday, February 08, 2015 12:11:47
[LAN access from remote] from 197.87.114.2:54839 to 192.168.1.2:45694, Sunday, February 08, 2015 12:11:42
[LAN access from remote] from 71.75.47.10:56434 to 192.168.1.2:45694, Sunday, February 08, 2015 12:11:37
[LAN access from remote] from 67.204.219.171:55046 to 192.168.1.2:45694, Sunday, February 08, 2015 12:11:32
[LAN access from remote] from 39.59.109.103:59816 to 192.168.1.2:45694, Sunday, February 08, 2015 12:11:27
[LAN access from remote] from 105.97.159.56:50795 to 192.168.1.2:45694, Sunday, February 08, 2015 12:11:22
[LAN access from remote] from 175.142.252.24:37988 to 192.168.1.2:45694, Sunday, February 08, 2015 12:11:18
[WLAN access rejected: incorrect security] from MAC address d8:9d:67:55:f2:49, Sunday, February 08, 2015 12:11:15
[LAN access from remote] from 50.48.206.66:50957 to 192.168.1.2:45694, Sunday, February 08, 2015 12:11:13
[LAN access from remote] from 81.152.191.120:63386 to 192.168.1.2:45694, Sunday, February 08, 2015 12:11:07
[DoS Attack: ACK Scan] from source: 171.96.179.210, port 62507, Sunday, February 08, 2015 12:11:05
[LAN access from remote] from 110.39.68.206:55298 to 192.168.1.2:45694, Sunday, February 08, 2015 12:11:02
[LAN access from remote] from 91.243.199.247:53840 to 192.168.1.2:30715, Sunday, February 08, 2015 12:10:58
[LAN access from remote] from 109.224.169.238:60450 to 192.168.1.2:45694, Sunday, February 08, 2015 12:10:52
[LAN access from remote] from 171.96.179.210:63758 to 192.168.1.2:45694, Sunday, February 08, 2015 12:10:47
[LAN access from remote] from 103.224.117.98:53084 to 192.168.1.2:45694, Sunday, February 08, 2015 12:10:42
[LAN access from remote] from 83.28.39.121:36109 to 192.168.1.2:45694, Sunday, February 08, 2015 12:10:37
[LAN access from remote] from 24.166.181.61:57113 to 192.168.1.2:45694, Sunday, February 08, 2015 12:10:32
[WLAN access rejected: incorrect security] from MAC address d8:9d:67:55:f2:49, Sunday, February 08, 2015 12:10:32
[LAN access from remote] from 188.104.231.126:49848 to 192.168.1.2:45694, Sunday, February 08, 2015 12:10:28
[LAN access from remote] from 88.177.26.30:40786 to 192.168.1.2:45694, Sunday, February 08, 2015 12:10:24
[LAN access from remote] from 197.87.114.2:54117 to 192.168.1.2:45694, Sunday, February 08, 2015 12:10:18
[LAN access from remote] from 92.37.98.204:65362 to 192.168.1.2:45694, Sunday, February 08, 2015 12:10:13
[LAN access from remote] from 41.72.102.19:25611 to 192.168.1.2:45694, Sunday, February 08, 2015 12:10:07
[DoS Attack: ACK Scan] from source: 171.96.179.210, port 62507, Sunday, February 08, 2015 12:10:05
[LAN access from remote] from 103.224.117.98:49789 to 192.168.1.2:45694, Sunday, February 08, 2015 12:10:04
[LAN access from remote] from 85.76.55.203:31518 to 192.168.1.2:30715, Sunday, February 08, 2015 12:09:58
[LAN access from remote] from 41.72.102.19:56464 to 192.168.1.2:45694, Sunday, February 08, 2015 12:09:52
[WLAN access rejected: incorrect security] from MAC address d8:9d:67:55:f2:49, Sunday, February 08, 2015 12:09:49
[LAN access from remote] from 46.239.227.176:62052 to 192.168.1.2:45694, Sunday, February 08, 2015 12:09:47
[DoS Attack: ACK Scan] from source: 105.233.172.84, port 34290, Sunday, February 08, 2015 12:09:44
[LAN access from remote] from 14.200.10.217:43153 to 192.168.1.2:45694, Sunday, February 08, 2015 12:09:43
[DoS Attack: ACK Scan] from source: 105.233.172.84, port 34290, Sunday, February 08, 2015 12:09:37
[LAN access from remote] from 49.151.99.164:63205 to 192.168.1.2:45694, Sunday, February 08, 2015 12:09:37
[DoS Attack: ACK Scan] from source: 105.233.172.84, port 34290, Sunday, February 08, 2015 12:09:36
[LAN access from remote] from 5.20.204.110:50457 to 192.168.1.2:45694, Sunday, February 08, 2015 12:09:35
[DoS Attack: ACK Scan] from source: 105.233.172.84, port 34290, Sunday, February 08, 2015 12:09:35
[LAN access from remote] from 83.134.102.18:38450 to 192.168.1.2:45694, Sunday, February 08, 2015 12:09:28
[DoS Attack: ACK Scan] from source: 171.96.179.210, port 62507, Sunday, February 08, 2015 12:09:26
[LAN access from remote] from 83.20.32.194:60691 to 192.168.1.2:45694, Sunday, February 08, 2015 12:09:23
[LAN access from remote] from 24.166.181.61:56924 to 192.168.1.2:45694, Sunday, February 08, 2015 12:09:18
[LAN access from remote] from 175.142.252.24:45806 to 192.168.1.2:45694, Sunday, February 08, 2015 12:09:13
[LAN access from remote] from 90.225.4.150:56268 to 192.168.1.2:45694, Sunday, February 08, 2015 12:09:07
[WLAN access rejected: incorrect security] from MAC address d8:9d:67:55:f2:49, Sunday, February 08, 2015 12:09:06
[LAN access from remote] from 87.53.21.34:63786 to 192.168.1.2:45694, Sunday, February 08, 2015 12:09:02
[LAN access from remote] from 178.164.143.30:51844 to 192.168.1.2:45694, Sunday, February 08, 2015 12:08:57
[LAN access from remote] from 83.28.39.121:44782 to 192.168.1.2:45694, Sunday, February 08, 2015 12:08:53
[LAN access from remote] from 37.236.15.134:50641 to 192.168.1.2:45694, Sunday, February 08, 2015 12:08:47
[LAN access from remote] from 85.229.50.230:62803 to 192.168.1.2:45694, Sunday, February 08, 2015 12:08:42
[LAN access from remote] from 72.190.53.179:53900 to 192.168.1.2:45694, Sunday, February 08, 2015 12:08:38
[LAN access from remote] from 64.113.172.14:18950 to 192.168.1.2:45694, Sunday, February 08, 2015 12:08:35
[LAN access from remote] from 105.237.199.167:60077 to 192.168.1.2:45694, Sunday, February 08, 2015 12:08:34
[WLAN access rejected: incorrect security] from MAC address d8:9d:67:55:f2:49, Sunday, February 08, 2015 12:08:23
[LAN access from remote] from 180.97.152.55:47542 to 192.168.1.2:45694, Sunday, February 08, 2015 12:08:22
[LAN access from remote] from 98.254.125.234:50847 to 192.168.1.2:45694, Sunday, February 08, 2015 12:08:21
[LAN access from remote] from 41.182.212.240:59146 to 192.168.1.2:45694, Sunday, February 08, 2015 12:08:13
[LAN access from remote] from 187.193.78.71:52243 to 192.168.1.2:45694, Sunday, February 08, 2015 12:08:09
[LAN access from remote] from 85.229.50.230:18281 to 192.168.1.2:45694, Sunday, February 08, 2015 12:08:02
[DoS Attack: ACK Scan] from source: 105.233.172.84, port 34290, Sunday, February 08, 2015 12:07:58
[LAN access from remote] from 37.48.64.103:56569 to 192.168.1.2:45694, Sunday, February 08, 2015 12:07:57
[DoS Attack: ACK Scan] from source: 105.233.172.84, port 34290, Sunday, February 08, 2015 12:07:53
[LAN access from remote] from 92.37.98.204:64764 to 192.168.1.2:45694, Sunday, February 08, 2015 12:07:52
[DoS Attack: ACK Scan] from source: 105.233.172.84, port 34290, Sunday, February 08, 2015 12:07:50
[LAN access from remote] from 90.225.4.150:57317 to 192.168.1.2:45694, Sunday, February 08, 2015 12:07:48
[LAN access from remote] from 88.177.26.30:40298 to 192.168.1.2:45694, Sunday, February 08, 2015 12:07:42
[WLAN access rejected: incorrect security] from MAC address d8:9d:67:55:f2:49, Sunday, February 08, 2015 12:07:40
[LAN access from remote] from 62.195.118.80:51424 to 192.168.1.2:45694, Sunday, February 08, 2015 12:07:37
[LAN access from remote] from 174.98.86.231:48010 to 192.168.1.2:45694, Sunday, February 08, 2015 12:07:32
[LAN access from remote] from 183.81.169.22:49969 to 192.168.1.2:45694, Sunday, February 08, 2015 12:07:28
[LAN access from remote] from 211.30.41.34:62019 to 192.168.1.2:45694, Sunday, February 08, 2015 12:07:24
[LAN access from remote] from 64.113.172.14:29446 to 192.168.1.2:45694, Sunday, February 08, 2015 12:07:17
[LAN access from remote] from 67.204.219.171:53741 to 192.168.1.2:45694, Sunday, February 08, 2015 12:07:14
[LAN access from remote] from 105.229.82.225:63583 to 192.168.1.2:45694, Sunday, February 08, 2015 12:07:08
[LAN access from remote] from 64.113.172.14:29446 to 192.168.1.2:45694, Sunday, February 08, 2015 12:07:02
[LAN access from remote] from 85.13.198.91:38163 to 192.168.1.2:45694, Sunday, February 08, 2015 12:06:58
[WLAN access rejected: incorrect security] from MAC address d8:9d:67:55:f2:49, Sunday, February 08, 2015 12:06:56
[LAN access from remote] from 180.131.248.93:57190 to 192.168.1.2:45694, Sunday, February 08, 2015 12:06:53
[LAN access from remote] from 171.96.179.210:61174 to 192.168.1.2:45694, Sunday, February 08, 2015 12:06:48
[LAN access from remote] from 5.66.79.127:4476 to 192.168.1.2:45694, Sunday, February 08, 2015 12:06:42
[LAN access from remote] from 24.50.128.145:62949 to 192.168.1.2:30715, Sunday, February 08, 2015 12:06:37
[LAN access from remote] from 188.104.231.126:50124 to 192.168.1.2:45694, Sunday, February 08, 2015 12:06:32
[LAN access from remote] from 71.30.255.229:54314 to 192.168.1.2:45694, Sunday, February 08, 2015 12:06:27
[LAN access from remote] from 37.236.15.134:5831 to 192.168.1.2:45694, Sunday, February 08, 2015 12:06:22
[LAN access from remote] from 50.48.206.66:60716 to 192.168.1.2:45694, Sunday, February 08, 2015 12:06:18
[WLAN access rejected: incorrect security] from MAC address d8:9d:67:55:f2:49, Sunday, February 08, 2015 12:06:13
[LAN access from remote] from 105.233.172.84:57061 to 192.168.1.2:45694, Sunday, February 08, 2015 12:06:12
[LAN access from remote] from 83.28.39.121:60737 to 192.168.1.2:45694, Sunday, February 08, 2015 12:06:11
[LAN access from remote] from 188.104.231.126:47902 to 192.168.1.2:45694, Sunday, February 08, 2015 12:06:02
[LAN access from remote] from 46.248.217.18:53659 to 192.168.1.2:45694, Sunday, February 08, 2015 12:05:57
[LAN access from remote] from 31.182.64.193:13725 to 192.168.1.2:45694, Sunday, February 08, 2015 12:05:53
[LAN access from remote] from 85.229.50.230:10801 to 192.168.1.2:45694, Sunday, February 08, 2015 12:05:48
[LAN access from remote] from 50.252.62.158:38322 to 192.168.1.2:45694, Sunday, February 08, 2015 12:05:44
[LAN access from remote] from 162.219.176.218:50644 to 192.168.1.2:45694, Sunday, February 08, 2015 12:05:37
[LAN access from remote] from 37.48.64.103:56294 to 192.168.1.2:45694, Sunday, February 08, 2015 12:05:33
[WLAN access rejected: incorrect security] from MAC address d8:9d:67:55:f2:49, Sunday, February 08, 2015 12:05:30
[LAN access from remote] from 64.113.172.14:63494 to 192.168.1.2:45694, Sunday, February 08, 2015 12:05:28
[LAN access from remote] from 77.247.225.181:50527 to 192.168.1.2:45694, Sunday, February 08, 2015 12:05:23
[LAN access from remote] from 109.224.169.238:57213 to 192.168.1.2:45694, Sunday, February 08, 2015 12:05:17
[LAN access from remote] from 92.160.124.155:1684 to 192.168.1.2:45694, Sunday, February 08, 2015 12:05:13
[LAN access from remote] from 88.177.26.30:39062 to 192.168.1.2:45694, Sunday, February 08, 2015 12:05:07
[LAN access from remote] from 197.87.114.2:51115 to 192.168.1.2:45694, Sunday, February 08, 2015 12:05:04
[LAN access from remote] from 98.254.125.234:50466 to 192.168.1.2:45694, Sunday, February 08, 2015 12:05:02
[LAN access from remote] from 37.48.64.99:50548 to 192.168.1.2:45694, Sunday, February 08, 2015 12:04:54
[WLAN access rejected: incorrect security] from MAC address d8:9d:67:55:f2:49, Sunday, February 08, 2015 12:04:47
[LAN access from remote] from 112.208.124.128:29667 to 192.168.1.2:45694, Sunday, February 08, 2015 12:04:47
[LAN access from remote] from 105.229.82.225:62125 to 192.168.1.2:45694, Sunday, February 08, 2015 12:04:43
[LAN access from remote] from 24.166.181.61:56319 to 192.168.1.2:45694, Sunday, February 08, 2015 12:04:41
[LAN access from remote] from 31.182.64.193:64116 to 192.168.1.2:45694, Sunday, February 08, 2015 12:04:33
[LAN access from remote] from 64.113.172.14:2566 to 192.168.1.2:45694, Sunday, February 08, 2015 12:04:27
[LAN access from remote] from 1.126.48.45:54071 to 192.168.1.2:45694, Sunday, February 08, 2015 12:04:23
[LAN access from remote] from 82.176.218.1:49007 to 192.168.1.2:45694, Sunday, February 08, 2015 12:04:18
[DoS Attack: ACK Scan] from source: 171.96.179.210, port 59155, Sunday, February 08, 2015 12:04:17
[LAN access from remote] from 196.210.99.218:51721 to 192.168.1.2:45694, Sunday, February 08, 2015 12:04:13
[LAN access from remote] from 109.224.169.238:56578 to 192.168.1.2:45694, Sunday, February 08, 2015 12:04:09
[WLAN access rejected: incorrect security] from MAC address d8:9d:67:55:f2:49, Sunday, February 08, 2015 12:04:04
[LAN access from remote] from 218.145.140.17:58615 to 192.168.1.2:45694, Sunday, February 08, 2015 12:04:03
[LAN access from remote] from 71.75.47.10:53613 to 192.168.1.2:45694, Sunday, February 08, 2015 12:03:58
[LAN access from remote] from 110.39.68.206:53842 to 192.168.1.2:45694, Sunday, February 08, 2015 12:03:56
[LAN access from remote] from 213.121.177.194:9772 to 192.168.1.2:45694, Sunday, February 08, 2015 12:03:47
[LAN access from remote] from 88.177.26.30:43845 to 192.168.1.2:45694, Sunday, February 08, 2015 12:03:42
[LAN access from remote] from 62.122.207.162:39001 to 192.168.1.2:45694, Sunday, February 08, 2015 12:03:37
[LAN access from remote] from 95.176.189.245:55368 to 192.168.1.2:45694, Sunday, February 08, 2015 12:03:34
[LAN access from remote] from 178.164.143.30:51566 to 192.168.1.2:45694, Sunday, February 08, 2015 12:03:27
[LAN access from remote] from 79.170.55.117:46541 to 192.168.1.2:45694, Sunday, February 08, 2015 12:03:24
[WLAN access rejected: incorrect security] from MAC address d8:9d:67:55:f2:49, Sunday, February 08, 2015 12:03:21
[LAN access from remote] from 80.98.151.92:65469 to 192.168.1.2:45694, Sunday, February 08, 2015 12:03:17
[LAN access from remote] from 105.229.82.225:61092 to 192.168.1.2:45694, Sunday, February 08, 2015 12:03:13
[LAN access from remote] from 71.47.135.190:56723 to 192.168.1.2:45694, Sunday, February 08, 2015 12:03:07
[LAN access from remote] from 81.152.191.120:62011 to 192.168.1.2:45694, Sunday, February 08, 2015 12:03:02
[LAN access from remote] from 86.157.131.164:38049 to 192.168.1.2:45694, Sunday, February 08, 2015 12:02:57
[LAN access from remote] from 174.98.86.231:51110 to 192.168.1.2:45694, Sunday, February 08, 2015 12:02:57
[LAN access from remote] from 175.142.252.24:42197 to 192.168.1.2:45694, Sunday, February 08, 2015 12:02:47
[LAN access from remote] from 185.21.216.186:40560 to 192.168.1.2:45694, Sunday, February 08, 2015 12:02:42
[WLAN access rejected: incorrect security] from MAC address d8:9d:67:55:f2:49, Sunday, February 08, 2015 12:02:37
[LAN access from remote] from 80.98.151.92:65287 to 192.168.1.2:45694, Sunday, February 08, 2015 12:02:37
[LAN access from remote] from 197.224.88.210:58818 to 192.168.1.2:45694, Sunday, February 08, 2015 12:02:34
[LAN access from remote] from 88.177.26.30:36869 to 192.168.1.2:45694, Sunday, February 08, 2015 12:02:28
[LAN access from remote] from 49.151.99.164:60887 to 192.168.1.2:45694, Sunday, February 08, 2015 12:02:22
[LAN access from remote] from 46.246.63.25:12738 to 192.168.1.2:45694, Sunday, February 08, 2015 12:02:18
[LAN access from remote] from 83.134.102.18:58051 to 192.168.1.2:45694, Sunday, February 08, 2015 12:02:13
[LAN access from remote] from 90.225.4.150:52121 to 192.168.1.2:45694, Sunday, February 08, 2015 12:02:09
[LAN access from remote] from 81.152.191.120:61832 to 192.168.1.2:45694, Sunday, February 08, 2015 12:02:02
[LAN access from remote] from 87.198.1.244:54347 to 192.168.1.2:45694, Sunday, February 08, 2015 12:01:58
[WLAN access rejected: incorrect security] from MAC address d8:9d:67:55:f2:49, Sunday, February 08, 2015 12:01:54
[LAN access from remote] from 92.217.68.32:54300 to 192.168.1.2:45694, Sunday, February 08, 2015 12:01:52
[LAN access from remote] from 64.113.172.14:19974 to 192.168.1.2:45694, Sunday, February 08, 2015 12:01:47
[LAN access from remote] from 62.122.207.162:44500 to 192.168.1.2:45694, Sunday, February 08, 2015 12:01:43
[LAN access from remote] from 62.122.207.162:53016 to 192.168.1.2:45694, Sunday, February 08, 2015 12:01:37
[LAN access from remote] from 41.182.212.240:57762 to 192.168.1.2:45694, Sunday, February 08, 2015 12:01:33
[LAN access from remote] from 50.48.206.66:58119 to 192.168.1.2:45694, Sunday, February 08, 2015 12:01:27
[LAN access from remote] from 171.96.179.210:57549 to 192.168.1.2:45694, Sunday, February 08, 2015 12:01:22
[LAN access from remote] from 189.249.252.74:10329 to 192.168.1.2:45694, Sunday, February 08, 2015 12:01:17
[LAN access from remote] from 89.168.190.240:51139 to 192.168.1.2:45694, Sunday, February 08, 2015 12:01:13
[WLAN access rejected: incorrect security] from MAC address d8:9d:67:55:f2:49, Sunday, February 08, 2015 12:01:11
[LAN access from remote] from 62.122.207.162:58894 to 192.168.1.2:45694, Sunday, February 08, 2015 12:01:07
[LAN access from remote] from 188.104.231.126:44760 to 192.168.1.2:45694, Sunday, February 08, 2015 12:01:03
[LAN access from remote] from 66.239.58.148:57126 to 192.168.1.2:45694, Sunday, February 08, 2015 12:01:00
[LAN access from remote] from 180.131.248.93:56072 to 192.168.1.2:45694, Sunday, February 08, 2015 12:00:53
[LAN access from remote] from 105.233.172.84:56339 to 192.168.1.2:45694, Sunday, February 08, 2015 12:00:49
[LAN access from remote] from 76.108.50.24:55847 to 192.168.1.2:45694, Sunday, February 08, 2015 12:00:42
[LAN access from remote] from 83.134.102.18:33460 to 192.168.1.2:45694, Sunday, February 08, 2015 12:00:38
[LAN access from remote] from 24.155.200.173:45526 to 192.168.1.2:45694, Sunday, February 08, 2015 12:00:33
[WLAN access rejected: incorrect security] from MAC address d8:9d:67:55:f2:49, Sunday, February 08, 2015 12:00:28
[LAN access from remote] from 175.142.252.24:34165 to 192.168.1.2:45694, Sunday, February 08, 2015 12:00:27
[LAN access from remote] from 220.221.163.133:52474 to 192.168.1.2:45694, Sunday, February 08, 2015 12:00:22
[LAN access from remote] from 64.113.172.14:29958 to 192.168.1.2:45694, Sunday, February 08, 2015 12:00:17
[LAN access from remote] from 37.236.15.134:1029 to 192.168.1.2:45694, Sunday, February 08, 2015 12:00:12
[LAN access from remote] from 77.247.225.181:56326 to 192.168.1.2:45694, Sunday, February 08, 2015 12:00:07
[LAN access from remote] from 92.217.68.32:53435 to 192.168.1.2:45694, Sunday, February 08, 2015 12:00:04
[LAN access from remote] from 41.182.212.240:57424 to 192.168.1.2:45694, Sunday, February 08, 2015 11:59:58
[LAN access from remote] from 213.121.177.194:7715 to 192.168.1.2:45694, Sunday, February 08, 2015 11:59:53
[LAN access from remote] from 177.156.84.220:58243 to 192.168.1.2:45694, Sunday, February 08, 2015 11:59:48
[WLAN access rejected: incorrect security] from MAC address d8:9d:67:55:f2:49, Sunday, February 08, 2015 11:59:45
[LAN access from remote] from 1.126.48.45:19069 to 192.168.1.2:45694, Sunday, February 08, 2015 11:59:42
[LAN access from remote] from 131.221.246.64:62806 to 192.168.1.2:45694, Sunday, February 08, 2015 11:59:37
[LAN access from remote] from 105.237.199.167:59655 to 192.168.1.2:45694, Sunday, February 08, 2015 11:59:33
[DoS Attack: ACK Scan] from source: 124.148.111.165, port 58791, Sunday, February 08, 2015 11:59:30
[LAN access from remote] from 92.37.98.204:62676 to 192.168.1.2:45694, Sunday, February 08, 2015 11:59:27
[LAN access from remote] from 5.66.79.127:3826 to 192.168.1.2:45694, Sunday, February 08, 2015 11:59:24
[LAN access from remote] from 46.248.217.18:51547 to 192.168.1.2:45694, Sunday, February 08, 2015 11:59:17
[LAN access from remote] from 90.225.4.150:62490 to 192.168.1.2:45694, Sunday, February 08, 2015 11:59:15
[LAN access from remote] from 197.224.88.210:58352 to 192.168.1.2:45694, Sunday, February 08, 2015 11:59:14
[DoS Attack: ACK Scan] from source: 171.96.179.210, port 55359, Sunday, February 08, 2015 11:59:10
[LAN access from remote] from 67.204.219.171:51282 to 192.168.1.2:45694, Sunday, February 08, 2015 11:59:03
[WLAN access rejected: incorrect security] from MAC address d8:9d:67:55:f2:49, Sunday, February 08, 2015 11:59:01
[DoS Attack: RST Scan] from source: 99.194.47.196, port 10452, Sunday, February 08, 2015 11:59:00
[LAN access from remote] from 110.39.68.206:52830 to 192.168.1.2:45694, Sunday, February 08, 2015 11:58:57
[LAN access from remote] from 98.182.48.22:51248 to 192.168.1.2:45694, Sunday, February 08, 2015 11:58:52
[LAN access from remote] from 65.128.70.189:49693 to 192.168.1.2:30715, Sunday, February 08, 2015 11:58:49
[DoS Attack: ACK Scan] from source: 171.96.179.210, port 55359, Sunday, February 08, 2015 11:58:46
[LAN access from remote] from 92.160.124.155:1338 to 192.168.1.2:45694, Sunday, February 08, 2015 11:58:43
[LAN access from remote] from 202.160.34.146:16881 to 192.168.1.2:45694, Sunday, February 08, 2015 11:58:37
[LAN access from remote] from 222.73.133.20:58091 to 192.168.1.2:45694, Sunday, February 08, 2015 11:58:33
[LAN access from remote] from 213.87.143.236:42460 to 192.168.1.2:30715, Sunday, February 08, 2015 11:58:27
[LAN access from remote] from 5.66.79.127:4359 to 192.168.1.2:45694, Sunday, February 08, 2015 11:58:23
[WLAN access rejected: incorrect security] from MAC address d8:9d:67:55:f2:49, Sunday, February 08, 2015 11:58:18
[LAN access from remote] from 46.239.227.176:61365 to 192.168.1.2:45694, Sunday, February 08, 2015 11:58:18
[LAN access from remote] from 83.28.39.121:56673 to 192.168.1.2:45694, Sunday, February 08, 2015 11:58:12
[LAN access from remote] from 50.153.101.44:58711 to 192.168.1.2:45694, Sunday, February 08, 2015 11:58:07
[LAN access from remote] from 71.75.47.10:52342 to 192.168.1.2:45694, Sunday, February 08, 2015 11:58:02
[LAN access from remote] from 84.251.32.11:50185 to 192.168.1.2:45694, Sunday, February 08, 2015 11:57:58
[LAN access from remote] from 211.30.41.34:52651 to 192.168.1.2:45694, Sunday, February 08, 2015 11:57:52
[LAN access from remote] from 97.96.9.6:58393 to 192.168.1.2:45694, Sunday, February 08, 2015 11:57:49
[LAN access from remote] from 67.217.150.230:32669 to 192.168.1.2:45694, Sunday, February 08, 2015 11:57:44
[LAN access from remote] from 71.30.255.229:38203 to 192.168.1.2:45694, Sunday, February 08, 2015 11:57:38
[WLAN access rejected: incorrect security] from MAC address d8:9d:67:55:f2:49, Sunday, February 08, 2015 11:57:35
[LAN access from remote] from 188.104.231.126:53955 to 192.168.1.2:45694, Sunday, February 08, 2015 11:57:32
[LAN access from remote] from 62.195.118.80:49090 to 192.168.1.2:45694, Sunday, February 08, 2015 11:57:27
[LAN access from remote] from 85.228.199.168:58249 to 192.168.1.2:45694, Sunday, February 08, 2015 11:57:23
[LAN access from remote] from 79.115.69.98:62398 to 192.168.1.2:45694, Sunday, February 08, 2015 11:57:17
[LAN access from remote] from 92.37.98.204:62129 to 192.168.1.2:45694, Sunday, February 08, 2015 11:57:14
[LAN access from remote] from 188.104.231.126:53955 to 192.168.1.2:45694, Sunday, February 08, 2015 11:57:07
[LAN access from remote] from 105.236.27.16:34841 to 192.168.1.2:45694, Sunday, February 08, 2015 11:57:03
[LAN access from remote] from 71.75.47.10:51857 to 192.168.1.2:45694, Sunday, February 08, 2015 11:56:57
[LAN access from remote] from 90.225.4.150:64130 to 192.168.1.2:45694, Sunday, February 08, 2015 11:56:56
[WLAN access rejected: incorrect security] from MAC address d8:9d:67:55:f2:49, Sunday, February 08, 2015 11:56:52
[LAN access from remote] from 46.239.227.176:61331 to 192.168.1.2:45694, Sunday, February 08, 2015 11:56:48
[LAN access from remote] from 88.177.26.30:56722 to 192.168.1.2:45694, Sunday, February 08, 2015 11:56:42
[LAN access from remote] from 79.115.69.98:62354 to 192.168.1.2:45694, Sunday, February 08, 2015 11:56:37
[LAN access from remote] from 83.134.102.18:34230 to 192.168.1.2:45694, Sunday, February 08, 2015 11:56:33
[LAN access from remote] from 83.28.39.121:54715 to 192.168.1.2:45694, Sunday, February 08, 2015 11:56:27
[LAN access from remote] from 174.98.86.231:41287 to 192.168.1.2:45694, Sunday, February 08, 2015 11:56:22
[LAN access from remote] from 97.96.9.6:58236 to 192.168.1.2:45694, Sunday, February 08, 2015 11:56:17
[LAN access from remote] from 80.98.151.92:63568 to 192.168.1.2:45694, Sunday, February 08, 2015 11:56:13
[WLAN access rejected: incorrect security] from MAC address d8:9d:67:55:f2:49, Sunday, February 08, 2015 11:56:09
[LAN access from remote] from 89.17.130.183:37979 to 192.168.1.2:45694, Sunday, February 08, 2015 11:56:08
[LAN access from remote] from 178.73.218.149:54230 to 192.168.1.2:45694, Sunday, February 08, 2015 11:56:04

[LAN access from remote] from 41.72.102.19:48122 to 192.168.1.2:45694, Sunday, February 08, 2015 11:55:59

Computer and other things (My Phanteks Enthoo Elite build is done)

Spoiler

Main Computer

Spoiler

Processor: Intel Core i7 6850k @4.5GHz
Motherboard: Asus Rampage V ROG Edition 10
Heatsink: Custom Hardline
Memory: Corsaor Dominator 16GB (4GB x2) DDR4 3000MHz 
Video Card: EVGA GTX 1080 FTW
Hard Drive: x2 OCZ ARC 100 240GB RAID 0 (Boot), Western Digital 4TB SSHD (Steam), x2 Adata 512GB (Steam)
Main GUI: Windows 10 Pro 64-bit

All That Extra Stuff

 

Spoiler

Monitor: x2 Dell U2414H
Keyboard: Ducky Shine 5 RGB (Cherry MX Blue)
Mouse: Logitech G502
Headset: AKG K553 Pro Studio Headphones
Speakers: Boston Accustics Home Media Theater 2.1 + Boston Accustics Soundbar
Microphone: Audio Technica AT-2035 w/ Focusrite Scarlett Solo
Sound: Creative Sound Blaster E5 DAC

Server

Spoiler

Case: Rosewill 4U Rackmount RSV-L4500

Processor: Intel Xeon E5-2670 V3 12C/24T

Motherboard: Asrock x99 Extreme 4

Ram: Kingston HyperX DDR4 2133 4x4GB

Video Card: Nvidia GT520

OS Drive: Kingston Hyperx 240GB SSD

Raid Card: LSI MegaRaid  9261-8i 8-port

Hard Drives: x7 HGST 4TB Nas

 

 

Link to comment
https://linustechtips.com/topic/306841-dos-attacks/
Share on other sites
Link to post
Share on other sites
Posted
  • Author

Is this your IP or someone else?

 

71.54.66.219

Someone elses, my IP is not in here

Computer and other things (My Phanteks Enthoo Elite build is done)

Spoiler

Main Computer

Spoiler

Processor: Intel Core i7 6850k @4.5GHz
Motherboard: Asus Rampage V ROG Edition 10
Heatsink: Custom Hardline
Memory: Corsaor Dominator 16GB (4GB x2) DDR4 3000MHz 
Video Card: EVGA GTX 1080 FTW
Hard Drive: x2 OCZ ARC 100 240GB RAID 0 (Boot), Western Digital 4TB SSHD (Steam), x2 Adata 512GB (Steam)
Main GUI: Windows 10 Pro 64-bit

All That Extra Stuff

 

Spoiler

Monitor: x2 Dell U2414H
Keyboard: Ducky Shine 5 RGB (Cherry MX Blue)
Mouse: Logitech G502
Headset: AKG K553 Pro Studio Headphones
Speakers: Boston Accustics Home Media Theater 2.1 + Boston Accustics Soundbar
Microphone: Audio Technica AT-2035 w/ Focusrite Scarlett Solo
Sound: Creative Sound Blaster E5 DAC

Server

Spoiler

Case: Rosewill 4U Rackmount RSV-L4500

Processor: Intel Xeon E5-2670 V3 12C/24T

Motherboard: Asrock x99 Extreme 4

Ram: Kingston HyperX DDR4 2133 4x4GB

Video Card: Nvidia GT520

OS Drive: Kingston Hyperx 240GB SSD

Raid Card: LSI MegaRaid  9261-8i 8-port

Hard Drives: x7 HGST 4TB Nas

 

 

Link to comment
https://linustechtips.com/topic/306841-dos-attacks/#findComment-4168752
Share on other sites
Link to post
Share on other sites
Posted
  • Author

Have you port forwarded? 

Its on a automatic so I dont have to do it manually

Computer and other things (My Phanteks Enthoo Elite build is done)

Spoiler

Main Computer

Spoiler

Processor: Intel Core i7 6850k @4.5GHz
Motherboard: Asus Rampage V ROG Edition 10
Heatsink: Custom Hardline
Memory: Corsaor Dominator 16GB (4GB x2) DDR4 3000MHz 
Video Card: EVGA GTX 1080 FTW
Hard Drive: x2 OCZ ARC 100 240GB RAID 0 (Boot), Western Digital 4TB SSHD (Steam), x2 Adata 512GB (Steam)
Main GUI: Windows 10 Pro 64-bit

All That Extra Stuff

 

Spoiler

Monitor: x2 Dell U2414H
Keyboard: Ducky Shine 5 RGB (Cherry MX Blue)
Mouse: Logitech G502
Headset: AKG K553 Pro Studio Headphones
Speakers: Boston Accustics Home Media Theater 2.1 + Boston Accustics Soundbar
Microphone: Audio Technica AT-2035 w/ Focusrite Scarlett Solo
Sound: Creative Sound Blaster E5 DAC

Server

Spoiler

Case: Rosewill 4U Rackmount RSV-L4500

Processor: Intel Xeon E5-2670 V3 12C/24T

Motherboard: Asrock x99 Extreme 4

Ram: Kingston HyperX DDR4 2133 4x4GB

Video Card: Nvidia GT520

OS Drive: Kingston Hyperx 240GB SSD

Raid Card: LSI MegaRaid  9261-8i 8-port

Hard Drives: x7 HGST 4TB Nas

 

 

Link to comment
https://linustechtips.com/topic/306841-dos-attacks/#findComment-4168758
Share on other sites
Link to post
Share on other sites
Posted

Do you have a static or dynamic IP?

 

If you have a static one, then ask your ISP to change it.

If you have a dynamic one, then you're being tracked somehow...

 

Its on a automatic so I dont have to do it manually

Call up your ISP and tell them, they will then block previous IP's used to attack you in the event of it having been a ddos botnet and as said, they can change your static IP address.

Use a VPN to mask your IP.

Disable any port-forwarding.

Link to comment
https://linustechtips.com/topic/306841-dos-attacks/#findComment-4168780
Share on other sites
Link to post
Share on other sites
Posted
  • Author

Do you have a static or dynamic IP?

 

If you have a static one, then ask your ISP to change it.

If you have a dynamic one, then you're being tracked somehow...

 

Static

Computer and other things (My Phanteks Enthoo Elite build is done)

Spoiler

Main Computer

Spoiler

Processor: Intel Core i7 6850k @4.5GHz
Motherboard: Asus Rampage V ROG Edition 10
Heatsink: Custom Hardline
Memory: Corsaor Dominator 16GB (4GB x2) DDR4 3000MHz 
Video Card: EVGA GTX 1080 FTW
Hard Drive: x2 OCZ ARC 100 240GB RAID 0 (Boot), Western Digital 4TB SSHD (Steam), x2 Adata 512GB (Steam)
Main GUI: Windows 10 Pro 64-bit

All That Extra Stuff

 

Spoiler

Monitor: x2 Dell U2414H
Keyboard: Ducky Shine 5 RGB (Cherry MX Blue)
Mouse: Logitech G502
Headset: AKG K553 Pro Studio Headphones
Speakers: Boston Accustics Home Media Theater 2.1 + Boston Accustics Soundbar
Microphone: Audio Technica AT-2035 w/ Focusrite Scarlett Solo
Sound: Creative Sound Blaster E5 DAC

Server

Spoiler

Case: Rosewill 4U Rackmount RSV-L4500

Processor: Intel Xeon E5-2670 V3 12C/24T

Motherboard: Asrock x99 Extreme 4

Ram: Kingston HyperX DDR4 2133 4x4GB

Video Card: Nvidia GT520

OS Drive: Kingston Hyperx 240GB SSD

Raid Card: LSI MegaRaid  9261-8i 8-port

Hard Drives: x7 HGST 4TB Nas

 

 

Link to comment
https://linustechtips.com/topic/306841-dos-attacks/#findComment-4168781
Share on other sites
Link to post
Share on other sites
Posted

Hi, for the past week I have been getting DoS attacked and well my internet goes off line till I can hard reset the router. The attacks only happens at night time like 2 am. I am using a Netgear N900 for my router. Just wanting to know what I should do to stop the attacks. 

Logs from my router - 

[DoS Attack: ACK Scan] from source: 62.122.207.162, port 38782

[DoS Attack: ACK Scan] from source: 83.23.93.81, port 54629

[DoS Attack: ACK Scan] from source: 66.87.149.157, port 21114

[DoS Attack: ACK Scan] from source: 71.54.66.219, port 58000

Don't know that much about networking so that's why I came here and see what you experts should think I should do.

 

Also my internet speed is 

4127064471.png

Thanks for helping me out.

are the loads of entrys each night?

 

Theres nothing you can do from your side. Contact your ISP and explain the problem.

Allthogh theres probably not much they will do either.

 

the only real thing you could do is have some kind of firewall before the router to help filter it out

Link to comment
https://linustechtips.com/topic/306841-dos-attacks/#findComment-4168805
Share on other sites
Link to post
Share on other sites
Posted

get your ISP to change your IP address

dont port forward any ports on your router

turn on WAN ping blocking mode

NEW PC build: Blank Heaven   minimalist white and black PC     Old S340 build log "White Heaven"        The "LIGHTCANON" flashlight build log        Project AntiRoll (prototype)        Custom speaker project

Spoiler

Ryzen 3950X | AMD Vega Frontier Edition | ASUS X570 Pro WS | Corsair Vengeance LPX 64GB | NZXT H500 | Seasonic Prime Fanless TX-700 | Custom loop | Coolermaster SK630 White | Logitech MX Master 2S | Samsung 980 Pro 1TB + 970 Pro 512GB | Samsung 58" 4k TV | Scarlett 2i4 | 2x AT2020

 

Link to comment
https://linustechtips.com/topic/306841-dos-attacks/#findComment-4168819
Share on other sites
Link to post
Share on other sites
Posted
  • Author

turn on WAN ping blocking mode

 

Now where would I go to do that??

7QN6dNa.png

Computer and other things (My Phanteks Enthoo Elite build is done)

Spoiler

Main Computer

Spoiler

Processor: Intel Core i7 6850k @4.5GHz
Motherboard: Asus Rampage V ROG Edition 10
Heatsink: Custom Hardline
Memory: Corsaor Dominator 16GB (4GB x2) DDR4 3000MHz 
Video Card: EVGA GTX 1080 FTW
Hard Drive: x2 OCZ ARC 100 240GB RAID 0 (Boot), Western Digital 4TB SSHD (Steam), x2 Adata 512GB (Steam)
Main GUI: Windows 10 Pro 64-bit

All That Extra Stuff

 

Spoiler

Monitor: x2 Dell U2414H
Keyboard: Ducky Shine 5 RGB (Cherry MX Blue)
Mouse: Logitech G502
Headset: AKG K553 Pro Studio Headphones
Speakers: Boston Accustics Home Media Theater 2.1 + Boston Accustics Soundbar
Microphone: Audio Technica AT-2035 w/ Focusrite Scarlett Solo
Sound: Creative Sound Blaster E5 DAC

Server

Spoiler

Case: Rosewill 4U Rackmount RSV-L4500

Processor: Intel Xeon E5-2670 V3 12C/24T

Motherboard: Asrock x99 Extreme 4

Ram: Kingston HyperX DDR4 2133 4x4GB

Video Card: Nvidia GT520

OS Drive: Kingston Hyperx 240GB SSD

Raid Card: LSI MegaRaid  9261-8i 8-port

Hard Drives: x7 HGST 4TB Nas

 

 

Link to comment
https://linustechtips.com/topic/306841-dos-attacks/#findComment-4168874
Share on other sites
Link to post
Share on other sites
Posted

Now where would I go to do that??

 

Oh you already have ping response disabled, thats the same thing

NEW PC build: Blank Heaven   minimalist white and black PC     Old S340 build log "White Heaven"        The "LIGHTCANON" flashlight build log        Project AntiRoll (prototype)        Custom speaker project

Spoiler

Ryzen 3950X | AMD Vega Frontier Edition | ASUS X570 Pro WS | Corsair Vengeance LPX 64GB | NZXT H500 | Seasonic Prime Fanless TX-700 | Custom loop | Coolermaster SK630 White | Logitech MX Master 2S | Samsung 980 Pro 1TB + 970 Pro 512GB | Samsung 58" 4k TV | Scarlett 2i4 | 2x AT2020

 

Link to comment
https://linustechtips.com/topic/306841-dos-attacks/#findComment-4169071
Share on other sites
Link to post
Share on other sites
Posted

I'd run some anti male are and Antivirus software

Go to grc.com and run there shields up Web app and see if maybe it will help u teach down how they are finding you so if u do get it fixed they don't just attack your new ip

https://www.grc.com/x/ne.dll?bh0bkyd2

Link to comment
https://linustechtips.com/topic/306841-dos-attacks/#findComment-4170325
Share on other sites
Link to post
Share on other sites
Posted

It's probably just a random port scan. People run these all the time.

 

You should try running an SSH server on port 22, the amount of attacks is ridiculous.

root@[member=Husky]:/home/darren# grep "password for root" /var/log/auth.log | wc -l315
20:27 < Benzin> Ah. Some chinese IP was attacking my server.20:27 < Benzin> Few million logins for root. Weird because most digital vps's are set up with certs out of the box20:27 < Benzin> so don't know why they would want to scan that range20:50 < salmon> lol

Nothing to worry about really.

Link to comment
https://linustechtips.com/topic/306841-dos-attacks/#findComment-4174130
Share on other sites
Link to post
Share on other sites
Posted

i am not sure that you are under attack, we all have people scanning our IP's at some point looking for things they can exploit. the fact that you are even able to run a speed scan indicates that this is not really an attack on you.

 

If you are really worried then you can get your ISP to change your IP, But I think that your issue of the locking router probably wont go away.

Link to comment
https://linustechtips.com/topic/306841-dos-attacks/#findComment-4174589
Share on other sites
Link to post
Share on other sites
Posted
  • Author

i am not sure that you are under attack, we all have people scanning our IP's at some point looking for things they can exploit. the fact that you are even able to run a speed scan indicates that this is not really an attack on you.

 

If you are really worried then you can get your ISP to change your IP, But I think that your issue of the locking router probably wont go away.

Changed to a different router and did the same thing so I know for sure my router isn't locking up.

This just happened over night for me, but they have been unsuccessful since I closed my ports on my router.

Current Time: Monday, Feb 09,2015 10:39:17

[DoS attack: Smurf] attack packets in last 20 sec from ip [49.144.247.255], Monday, Feb 09,2015 05:47:57

[DoS attack: Smurf] attack packets in last 20 sec from ip [49.144.247.255], Monday, Feb 09,2015 05:46:28

[DoS attack: Smurf] attack packets in last 20 sec from ip [49.144.247.255], Monday, Feb 09,2015 05:24:20

[DoS attack: Smurf] attack packets in last 20 sec from ip [49.144.247.255], Monday, Feb 09,2015 05:19:26

[DoS attack: Smurf] attack packets in last 20 sec from ip [49.144.247.255], Monday, Feb 09,2015 05:17:29

[DoS attack: Smurf] attack packets in last 20 sec from ip [221.218.187.255], Monday, Feb 09,2015 02:43:52

Computer and other things (My Phanteks Enthoo Elite build is done)

Spoiler

Main Computer

Spoiler

Processor: Intel Core i7 6850k @4.5GHz
Motherboard: Asus Rampage V ROG Edition 10
Heatsink: Custom Hardline
Memory: Corsaor Dominator 16GB (4GB x2) DDR4 3000MHz 
Video Card: EVGA GTX 1080 FTW
Hard Drive: x2 OCZ ARC 100 240GB RAID 0 (Boot), Western Digital 4TB SSHD (Steam), x2 Adata 512GB (Steam)
Main GUI: Windows 10 Pro 64-bit

All That Extra Stuff

 

Spoiler

Monitor: x2 Dell U2414H
Keyboard: Ducky Shine 5 RGB (Cherry MX Blue)
Mouse: Logitech G502
Headset: AKG K553 Pro Studio Headphones
Speakers: Boston Accustics Home Media Theater 2.1 + Boston Accustics Soundbar
Microphone: Audio Technica AT-2035 w/ Focusrite Scarlett Solo
Sound: Creative Sound Blaster E5 DAC

Server

Spoiler

Case: Rosewill 4U Rackmount RSV-L4500

Processor: Intel Xeon E5-2670 V3 12C/24T

Motherboard: Asrock x99 Extreme 4

Ram: Kingston HyperX DDR4 2133 4x4GB

Video Card: Nvidia GT520

OS Drive: Kingston Hyperx 240GB SSD

Raid Card: LSI MegaRaid  9261-8i 8-port

Hard Drives: x7 HGST 4TB Nas

 

 

Link to comment
https://linustechtips.com/topic/306841-dos-attacks/#findComment-4177788
Share on other sites
Link to post
Share on other sites
Posted
  • Author

First IP seems to be from Ukraine. You got a score with Ukraine that needs to be settled?

 

/jk (but seriously it is)

 

Just phone your ISP.

Yeah called them yesterday but they never have any tech support on Sundays but they were suppose to call me back today and haven't yet

Computer and other things (My Phanteks Enthoo Elite build is done)

Spoiler

Main Computer

Spoiler

Processor: Intel Core i7 6850k @4.5GHz
Motherboard: Asus Rampage V ROG Edition 10
Heatsink: Custom Hardline
Memory: Corsaor Dominator 16GB (4GB x2) DDR4 3000MHz 
Video Card: EVGA GTX 1080 FTW
Hard Drive: x2 OCZ ARC 100 240GB RAID 0 (Boot), Western Digital 4TB SSHD (Steam), x2 Adata 512GB (Steam)
Main GUI: Windows 10 Pro 64-bit

All That Extra Stuff

 

Spoiler

Monitor: x2 Dell U2414H
Keyboard: Ducky Shine 5 RGB (Cherry MX Blue)
Mouse: Logitech G502
Headset: AKG K553 Pro Studio Headphones
Speakers: Boston Accustics Home Media Theater 2.1 + Boston Accustics Soundbar
Microphone: Audio Technica AT-2035 w/ Focusrite Scarlett Solo
Sound: Creative Sound Blaster E5 DAC

Server

Spoiler

Case: Rosewill 4U Rackmount RSV-L4500

Processor: Intel Xeon E5-2670 V3 12C/24T

Motherboard: Asrock x99 Extreme 4

Ram: Kingston HyperX DDR4 2133 4x4GB

Video Card: Nvidia GT520

OS Drive: Kingston Hyperx 240GB SSD

Raid Card: LSI MegaRaid  9261-8i 8-port

Hard Drives: x7 HGST 4TB Nas

 

 

Link to comment
https://linustechtips.com/topic/306841-dos-attacks/#findComment-4177911
Share on other sites
Link to post
Share on other sites
Posted

Changed to a different router and did the same thing so I know for sure my router isn't locking up.

This just happened over night for me, but they have been unsuccessful since I closed my ports on my router.

Current Time: Monday, Feb 09,2015 10:39:17

[DoS attack: Smurf] attack packets in last 20 sec from ip [49.144.247.255], Monday, Feb 09,2015 05:47:57

[DoS attack: Smurf] attack packets in last 20 sec from ip [49.144.247.255], Monday, Feb 09,2015 05:46:28

[DoS attack: Smurf] attack packets in last 20 sec from ip [49.144.247.255], Monday, Feb 09,2015 05:24:20

[DoS attack: Smurf] attack packets in last 20 sec from ip [49.144.247.255], Monday, Feb 09,2015 05:19:26

[DoS attack: Smurf] attack packets in last 20 sec from ip [49.144.247.255], Monday, Feb 09,2015 05:17:29

[DoS attack: Smurf] attack packets in last 20 sec from ip [221.218.187.255], Monday, Feb 09,2015 02:43:52

 

You're not being attacked, it's just a random port scan. Happens constantly. Just looking for random ports that are open like 22/80 to try attack.

 

Please don't waste your ISPs time by being that old man who needs a tinfoil hat who is paranoid that someone is out to get you. All they will do is laugh. Source: Works for an ISP.

Link to comment
https://linustechtips.com/topic/306841-dos-attacks/#findComment-4183077
Share on other sites
Link to post
Share on other sites
Posted

Are you on that internet connection when you send this post. If the answer to this is yes you are not under attack.

 

I know these logs are worrying but every connection has this kind of behavior. I have seen many attacks both DDOS and application attacks and if it is the former then you will know about it as you will not even be able to connect to the internet to write these posts.

 

If it is the second then you are safe anyway unless you are running a server from your home location.

 

Another question that i have for you is why would someone take the time and effort to attack you in this way ? 

 

Also could you let us know how much of the bandwidth that you have is being taken by this traffic ? have you looked at the connection tables on the router are these full ? are there lots of embryotic connections etc ? 

Link to comment
https://linustechtips.com/topic/306841-dos-attacks/#findComment-4183918
Share on other sites
Link to post
Share on other sites
Posted

It's probably just a random port scan. People run these all the time.

 

You should try running an SSH server on port 22, the amount of attacks is ridiculous.

root@[member='Husky']:/home/darren# grep "password for root" /var/log/auth.log | wc -l315
20:27 < Benzin> Ah. Some chinese IP was attacking my server.20:27 < Benzin> Few million logins for root. Weird because most digital vps's are set up with certs out of the box20:27 < Benzin> so don't know why they would want to scan that range20:50 < salmon> lol

Nothing to worry about really.

Port 22 +  honeycomb + ovh = lmao

Link to comment
https://linustechtips.com/topic/306841-dos-attacks/#findComment-4185331
Share on other sites
Link to post
Share on other sites
Posted
  • Author

Are you on that internet connection when you send this post. If the answer to this is yes you are not under attack.

 

I know these logs are worrying but every connection has this kind of behavior. I have seen many attacks both DDOS and application attacks and if it is the former then you will know about it as you will not even be able to connect to the internet to write these posts.

 

If it is the second then you are safe anyway unless you are running a server from your home location.

 

Another question that i have for you is why would someone take the time and effort to attack you in this way ? 

 

Also could you let us know how much of the bandwidth that you have is being taken by this traffic ? have you looked at the connection tables on the router are these full ? are there lots of embryotic connections etc ? 

 

My connection was down for a few hours at a time. So I couldn't do anything with it for a long time. Got my IP changed (only on the phone for 5 minutes) so we will see what happens. I do know someone who hates me and like to DDoS people he doesn't like but I cant prove it was him.But anyways, thanks for the quick help on this issue. Hopefully it got solved. Also would like someone do a post on internet security sometime so people can reference that if they need help with this like that and show false positives of attacks and other things.

 

You're not being attacked, it's just a random port scan. Happens constantly. Just looking for random ports that are open like 22/80 to try attack.

 

Please don't waste your ISPs time by being that old man who needs a tinfoil hat who is paranoid that someone is out to get you. All they will do is laugh. Source: Works for an ISP.

Not sure if it was a random port scan or not since I only know the basics of networking and nothing about DDoS or DoS attacks. But my ISP is always friendly to talk to since they are a local ISP. I was only on the phone for 5 minutes and most of the time we talked and they are doing fiber in my area which will be out next year. 

Computer and other things (My Phanteks Enthoo Elite build is done)

Spoiler

Main Computer

Spoiler

Processor: Intel Core i7 6850k @4.5GHz
Motherboard: Asus Rampage V ROG Edition 10
Heatsink: Custom Hardline
Memory: Corsaor Dominator 16GB (4GB x2) DDR4 3000MHz 
Video Card: EVGA GTX 1080 FTW
Hard Drive: x2 OCZ ARC 100 240GB RAID 0 (Boot), Western Digital 4TB SSHD (Steam), x2 Adata 512GB (Steam)
Main GUI: Windows 10 Pro 64-bit

All That Extra Stuff

 

Spoiler

Monitor: x2 Dell U2414H
Keyboard: Ducky Shine 5 RGB (Cherry MX Blue)
Mouse: Logitech G502
Headset: AKG K553 Pro Studio Headphones
Speakers: Boston Accustics Home Media Theater 2.1 + Boston Accustics Soundbar
Microphone: Audio Technica AT-2035 w/ Focusrite Scarlett Solo
Sound: Creative Sound Blaster E5 DAC

Server

Spoiler

Case: Rosewill 4U Rackmount RSV-L4500

Processor: Intel Xeon E5-2670 V3 12C/24T

Motherboard: Asrock x99 Extreme 4

Ram: Kingston HyperX DDR4 2133 4x4GB

Video Card: Nvidia GT520

OS Drive: Kingston Hyperx 240GB SSD

Raid Card: LSI MegaRaid  9261-8i 8-port

Hard Drives: x7 HGST 4TB Nas

 

 

Link to comment
https://linustechtips.com/topic/306841-dos-attacks/#findComment-4187211
Share on other sites
Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
 Share
Go to topic listing Networking

×