Networking Forums

Networking Forums > Wireless Networking > Wireless Networks > Spoof attack

Reply
 
 
Toobi Won Kenobi
Guest
Posts: n/a

 
      03-16-2007, 05:27 PM
I had occasion to check my router's security log and found the following

16.03.2007 18:21:21 192.*.*.* login success
16.03.2007 17:41:46 **ICMP Redirect** 74.120.157.254->> 83.104.57.185,
Type:5, Code:1 (from ATM1 Inbound)

16.03.2007 16:15:21 **IP Spoofing** 192.*.*.*->> 192.*.*.*, Type:3, Code:3
(from ATM1 Inbound)
16.03.2007 16:15:19 **IP Spoofing** 192.*.*.*->> 192.*.*.*, Type:3, Code:3
(from ATM1 Inbound)
16.03.2007 16:14:56 **IP Spoofing** 192.*.*.*->> 192.168.2.4, Type:3, Code:3
(from ATM1 Inbound)
16.03.2007 16:12:56 **ICMP Redirect** 80.37.149.206->> 83.104.57.185,
Type:5, Code:1 (from ATM1 Inbound)
16.03.2007 16:12:37 **ICMP Redirect** 80.37.149.206->> 83.104.57.185,
Type:5, Code:1 (from ATM1 Inbound)
16.03.2007 16:12:31 **ICMP Redirect** 80.37.149.206->> 83.104.57.185,
Type:5, Code:1 (from ATM1 Inbound)

I've done an NSLOOKUP and got some sites for these IP addresses, (Spanish
spam site) what can I do to stop these scumbags?

TIA
TWK


 
Reply With Quote
 
 
 
 
Toobi Won Kenobi
Guest
Posts: n/a

 
      03-16-2007, 06:47 PM
Thanks Jack, will give them a try.

Regards
TWK
"Jack (MVP-Networking)." <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> Hi
> Looking at a Cable/DSL Router's log is always scary, never the less, in
> reality there is nothing you can do about traffic knocking on the door
> beside block it (which is the Router's NAT Firewall Job)
> If you want to check your system security against outside involuntary
> intruders, log to this site, scroll down few pages to
> http://www.grc.com/default.htm ShieldsUP!
> If you want, more security from the inside read this,
> http://www.ezlan.net/firewall.html
> Jack (MVP-Networking).
>
> "Toobi Won Kenobi" <(E-Mail Removed)> wrote in message
> news:etenid$5gs$1$(E-Mail Removed)...
>>I had occasion to check my router's security log and found the following
>>
>> 16.03.2007 18:21:21 192.*.*.* login success
>> 16.03.2007 17:41:46 **ICMP Redirect** 74.120.157.254->> 83.104.57.185,
>> Type:5, Code:1 (from ATM1 Inbound)
>>
>> 16.03.2007 16:15:21 **IP Spoofing** 192.*.*.*->> 192.*.*.*, Type:3,
>> Code:3 (from ATM1 Inbound)
>> 16.03.2007 16:15:19 **IP Spoofing** 192.*.*.*->> 192.*.*.*, Type:3,
>> Code:3 (from ATM1 Inbound)
>> 16.03.2007 16:14:56 **IP Spoofing** 192.*.*.*->> 192.168.2.4, Type:3,
>> Code:3 (from ATM1 Inbound)
>> 16.03.2007 16:12:56 **ICMP Redirect** 80.37.149.206->> 83.104.57.185,
>> Type:5, Code:1 (from ATM1 Inbound)
>> 16.03.2007 16:12:37 **ICMP Redirect** 80.37.149.206->> 83.104.57.185,
>> Type:5, Code:1 (from ATM1 Inbound)
>> 16.03.2007 16:12:31 **ICMP Redirect** 80.37.149.206->> 83.104.57.185,
>> Type:5, Code:1 (from ATM1 Inbound)
>>
>> I've done an NSLOOKUP and got some sites for these IP addresses, (Spanish
>> spam site) what can I do to stop these scumbags?
>>
>> TIA
>> TWK
>>
>>

>
>



 
Reply With Quote
 
Jack \(MVP-Networking\).
Guest
Posts: n/a

 
      03-16-2007, 07:33 PM
Hi
Looking at a Cable/DSL Router's log is always scary, never the less, in
reality there is nothing you can do about traffic knocking on the door
beside block it (which is the Router’s NAT Firewall Job)
If you want to check your system security against outside involuntary
intruders, log to this site, scroll down few pages to
http://www.grc.com/default.htm ShieldsUP!
If you want, more security from the inside read this,
http://www.ezlan.net/firewall.html
Jack (MVP-Networking).

"Toobi Won Kenobi" <(E-Mail Removed)> wrote in message
news:etenid$5gs$1$(E-Mail Removed)...
>I had occasion to check my router's security log and found the following
>
> 16.03.2007 18:21:21 192.*.*.* login success
> 16.03.2007 17:41:46 **ICMP Redirect** 74.120.157.254->> 83.104.57.185,
> Type:5, Code:1 (from ATM1 Inbound)
>
> 16.03.2007 16:15:21 **IP Spoofing** 192.*.*.*->> 192.*.*.*, Type:3, Code:3
> (from ATM1 Inbound)
> 16.03.2007 16:15:19 **IP Spoofing** 192.*.*.*->> 192.*.*.*, Type:3, Code:3
> (from ATM1 Inbound)
> 16.03.2007 16:14:56 **IP Spoofing** 192.*.*.*->> 192.168.2.4, Type:3,
> Code:3 (from ATM1 Inbound)
> 16.03.2007 16:12:56 **ICMP Redirect** 80.37.149.206->> 83.104.57.185,
> Type:5, Code:1 (from ATM1 Inbound)
> 16.03.2007 16:12:37 **ICMP Redirect** 80.37.149.206->> 83.104.57.185,
> Type:5, Code:1 (from ATM1 Inbound)
> 16.03.2007 16:12:31 **ICMP Redirect** 80.37.149.206->> 83.104.57.185,
> Type:5, Code:1 (from ATM1 Inbound)
>
> I've done an NSLOOKUP and got some sites for these IP addresses, (Spanish
> spam site) what can I do to stop these scumbags?
>
> TIA
> TWK
>
>



 
Reply With Quote
 
 
 
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
MAC address change/spoof trouble Mac Attack Wireless Networks 1 01-04-2008 06:01 PM
spoof mac address bam Bino Wireless Internet 10 05-02-2004 09:09 PM
spoof attack!!! help Jørgen Gilberg Wireless Internet 2 10-14-2003 09:55 PM
Can a Netgear MR814 spoof a MAC address? eyi Wireless Internet 1 09-11-2003 12:58 AM
Why can't I spoof to another MAC address? Jimbo Lee Linux Networking 0 08-23-2003 02:19 AM



1 2 3 4 5 6 7 8 9 10 11