CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

Donation/Premium
spacer
block bottom
Security Central
spacer
· Home
· PIRT/Fried Phish
· MIRT
· SIRT
· Deutsch
· Wiki
· Newsletter
· O16/ActiveX
· CLSID List
· Contest2007
· Downloads
· Feedback (send)
· Forums
· HijackThis
· Hijacktrend
· LSPs
· My Downloads
· O18
· O20
· O21
· O22
· O23
· O9
· Premium
· Private Messages
· Proxomitron
· Reviews
· Search
· StartupList
· Stories Archive
· Submit News
· WsIRT
· Your Account
· Acceptable Use Policy
block bottom
spacer spacer

Wireless router logs report IP spoofing

 
Post new topic   Reply to topic       All -> FavForums -> Firewalls [del.icio.us!] [digg it!] [reddit!]
View previous topic :: View next topic  
Author Message
Debaser

Cadet
Cadet


Joined: Jul 10, 2006
Posts: 1
Location: USA

PostPosted: Wed Jul 18, 2007 5:52 pm    Post subject: Wireless router logs report IP spoofing
Reply with quote

Hello, all. I recently got my Buffalo wireless router/AP up and running at home and the log has given me the few entries of note the last couple of days:

IP SPOOFING attack: 10.130.192.1 255.255.255.255 2007/07/18 11:44:29 - 2007/07/18 12:19:19 1130
2007/07/18 11:44:37 ATTACK ALERT [ IP_SPOOFING : ]: 5 attempts from 10.130.192.1.Total=5.
2007/07/18 10:01:23 ATTACK ALERT [ NMAP_PORT_SCAN : ]: 5 attempts from 199.106.212.23.Total=5.
2007/07/18 09:53:39 ATTACK ALERT [ IP_SPOOFING : ]: 5 attempts from 10.130.192.1.Total=5.
2007/07/18 09:53:26 ATTACK ALERT [ IP_SPOOFING : ]: 5 attempts from 10.130.192.1.Total=5.
2007/07/18 09:52:56 ATTACK ALERT [ IP_SPOOFING : ]: 5 attempts from 10.130.192.1.Total=5.
2007/07/18 09:51:32 ATTACK ALERT [ IP_SPOOFING : ]: 5 attempts from 10.130.192.1.Total=5.
2007/07/18 09:19:36 ATTACK ALERT [ NMAP_PORT_SCAN : ]: 5 attempts from 12.130.50.214.Total=5.
2007/07/18 08:28:08 ATTACK ALERT [ NMAP_PORT_SCAN : ]: 5 attempts from 12.130.50.213.Total=5.
2007/07/18 08:27:35 ATTACK ALERT [ NMAP_PORT_SCAN : ]: 5 attempts from 199.106.212.23.Total=5.
2007/07/18 07:47:11 ATTACK ALERT [ NMAP_PORT_SCAN : ]: 5 attempts from 12.120.1.233.Total=5.
2007/07/18 07:47:08 ATTACK ALERT [ NMAP_PORT_SCAN : ]: 5 attempts from 12.120.1.236.Total=5.
2007/07/18 05:40:42 ATTACK ALERT [ IP_SPOOFING : ]: 5 attempts from 10.130.192.1.Total=5.
2007/07/18 05:33:03 ATTACK ALERT [ IP_SPOOFING : ]: 5 attempts from 10.130.192.1.Total=5.
2007/07/18 02:56:57 ATTACK ALERT [ SMURF_ATTACK : ]: 5 attempts from 74.140.133.242.Total=5.
2007/07/17 21:56:57 ATTACK ALERT [ IP_SPOOFING : ]: 5 attempts from 10.130.192.1.Total=5.

The Smurf attacks and the NMAP port scans I get. Is my router perhaps causing the IP spoofing episodes above? I assume there's no need to worry in any case since the router is denying the events from happening. Still, I am curious if I should report them to my ISP.

Thanks.

Back to top
View users profile Send private message
Display posts from previous:   
Post new topic   Reply to topic       All -> FavForums -> Firewalls All times are GMT
Page 1 of 1

 
Quick Reply:
Username: 

Quote the last message
Attach signature (signatures can be changed in profile)
 
You can post new topics in this forum
You can reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum


Powered by phpBB © 2001 phpBB Group
spacer spacer