Your forum username:
Do you already have an account?
Forgot your password?
  • Log in or Sign up


    Welcome to Sky User - The Unofficial Support Forum for everything Sky! - Proudly helping over 65k members.


    Advertisement

    Results 1 to 6 of 6

    Denial Of Service Attacks

    This is a discussion on Denial Of Service Attacks within the Sky Broadband help forums, part of the Sky Broadband help and support category; Hi, Since moving to Sky BB I've noticed the normal type of attacks/probes that I had with other ISPs, but ...

    1. #1
      starfire's Avatar
      starfire is offline Sky User Member
      Exchange: Coalville
      Broadband ISP: Max
      Router:
      Sky TV:
      Join Date
      Nov 2006
      Posts
      11
      Thanks
      0
      Thanked 0 Times in 0 Posts

      Angry Denial Of Service Attacks

      Hi,

      Since moving to Sky BB I've noticed the normal type of attacks/probes that I had with other ISPs, but recently I've been getting attacked on port 7500 a lot, can't find that this port is used for anything useful.

      Here are my logs for a short time from tonight:-

      et - Source:68.51.238.227,3523 Destination:90.194.182.158,7500 - [DOS]
      Tue, 2007-04-24 21:42:29 - TCP Packet - Source:212.194.244.53,16613 Destination:90.194.182.158,7500 - [DOS]
      Tue, 2007-04-24 21:42:31 - TCP Packet - Source:68.51.238.227,3523 Destination:90.194.182.158,7500 - [DOS]
      Tue, 2007-04-24 21:42:32 - TCP Packet - Source:24.163.137.106,2187 Destination:90.194.182.158,7500 - [DOS]
      Tue, 2007-04-24 21:42:34 - TCP Packet - Source:87.196.162.36,1941 Destination:90.194.182.158,7500 - [DOS]
      Tue, 2007-04-24 21:42:35 - TCP Packet - Source:212.194.244.53,16613 Destination:90.194.182.158,7500 - [DOS]
      Tue, 2007-04-24 21:42:36 - TCP Packet - Source:203.173.5.206,4750 Destination:90.194.182.158,7500 - [DOS]
      Tue, 2007-04-24 21:42:37 - TCP Packet - Source:87.196.162.36,1941 Destination:90.194.182.158,7500 - [DOS]
      Tue, 2007-04-24 21:42:37 - TCP Packet - Source:67.44.144.212,2735 Destination:90.194.182.158,7500 - [DOS]
      Tue, 2007-04-24 21:44:10 - TCP Packet - Source:68.94.178.61,4737 Destination:90.194.182.158,7500 - [DOS]
      Tue, 2007-04-24 21:45:10 - TCP Packet - Source:203.173.5.206,2353 Destination:90.194.182.158,7500 - [DOS]
      Tue, 2007-04-24 21:45:19 - TCP Packet - Source:203.173.5.206,2463 Destination:90.194.182.158,7500 - [DOS]
      Tue, 2007-04-24 21:45:25 - TCP Packet - Source:68.106.138.165,49777 Destination:90.194.182.158,7500 - [DOS]
      Tue, 2007-04-24 21:45:28 - TCP Packet - Source:203.173.5.206,2463 Destination:90.194.182.158,7500 - [DOS]
      Tue, 2007-04-24 21:45:28 - TCP Packet - Source:84.100.144.168,2830 Destination:90.194.182.158,7500 - [DOS]


      The source IP is obviously lots of different PCs, presumably zombies that their user's are unaware of....

      Anyone else had this issue at all?


    2. Advertisement
    3. #2
      Saturday's Avatar
      Saturday is offline Sky User Super Mod
      Exchange:
      Broadband ISP: Sky Broadband Unlimited Pro
      Router: Sky Hub SR102
      Sky TV: Sky+HD box
      Join Date
      Sep 2006
      Posts
      6,086
      Thanks
      20
      Thanked 52 Times in 47 Posts

      Re: Denial Of Service Attacks

      Don't worry about it. A denial of service attack would be hundreds a second not fourteen in three minutes.

      Have you recently rebooted and got a new IP address? Probably someone that had it earlier was using P2P or something similar.

      In any event you should reboot and get a new address now - you've just posted your current one on a public forum.

    4. #3
      starfire's Avatar
      starfire is offline Sky User Member
      Exchange: Coalville
      Broadband ISP: Max
      Router:
      Sky TV:
      Join Date
      Nov 2006
      Posts
      11
      Thanks
      0
      Thanked 0 Times in 0 Posts

      Re: Denial Of Service Attacks

      Yep, got a new IP already don't worry. I suspect the router isn't capable of logging hundreds a second though.

      Had this IP for 4 days before just rebooting and I don't use P2P at all.

    5. #4
      Saturday's Avatar
      Saturday is offline Sky User Super Mod
      Exchange:
      Broadband ISP: Sky Broadband Unlimited Pro
      Router: Sky Hub SR102
      Sky TV: Sky+HD box
      Join Date
      Sep 2006
      Posts
      6,086
      Thanks
      20
      Thanked 52 Times in 47 Posts

      Re: Denial Of Service Attacks

      Couldn't say how many the router could log a second but it would be many more than you posted.

      If you've had that IP for a few days then as a precaution you should check your system for malware.

    6. #5
      starfire's Avatar
      starfire is offline Sky User Member
      Exchange: Coalville
      Broadband ISP: Max
      Router:
      Sky TV:
      Join Date
      Nov 2006
      Posts
      11
      Thanks
      0
      Thanked 0 Times in 0 Posts

      Re: Denial Of Service Attacks

      I really just wondered if other people had seen similar things or not, have you?

    7. #6
      Saturday's Avatar
      Saturday is offline Sky User Super Mod
      Exchange:
      Broadband ISP: Sky Broadband Unlimited Pro
      Router: Sky Hub SR102
      Sky TV: Sky+HD box
      Join Date
      Sep 2006
      Posts
      6,086
      Thanks
      20
      Thanked 52 Times in 47 Posts

      Re: Denial Of Service Attacks

      Yes - tend to get a handful each day.

      There are all sorts of reasons for these, most of them legitimate i.e. if not relating to a previously owned IP then the router could be misreporting the arrival of packets etc. Then there are various illegitimate scans that are part and parcel of internet life.

      If you're confident there's nothing on your system which is inviting these without your knowledge then you can safely ignore them.

     

     

    Tags for this Thread

    Posting Permissions

    • You may not post new threads
    • You may not post replies
    • You may not post attachments
    • You may not edit your posts
    •  
    SkyUser - Copyright © 2006-2017. SatDish and NewsreadeR | SkyUser is in no way affiliated with Sky Broadband / BSkyB
    RIPA NOTICE: NO CONSENT IS GIVEN FOR INTERCEPTION OF PAGE TRANSMISSION