Kitz Forum
Internet => General Internet => Topic started by: Weaver on January 03, 2016, 04:22:06 AM
-
From the Andrews and Arnold logs for my lines on clueless.aa.net.uk:
Yesterday 12:18:26 Blacklist completed
Yesterday 12:17:51 Denial of Service attack
It seems A & A have some automated system now.
A bit worrying if it goes on for too long though.
-
Well, a bit worrying that they're out there, and also reassuring that someone is doing something about it.
-
I believe that my router, a Firebrick FB 2500, has a few defaults in respect of its own IPV4 address that are unhelpful. I'm trying to be 'stealthy', not necessarily succeeding.
-
Thanks to user Burakkucat for his help in testing this, off-thread.
-
It will likely be some script kiddie trying their luck on a random list of IPs.
Years ago I used to get quite a lot of them and various other attempts. Once upon a time I even reported one particular ddos attempt to the ISP which was BT, who later informed me that they had taken action. I cant recall the exact wording but it implied they may have suspended their account.
These days most attempts are usually via IPs in certain parts of the globe and most likely a proxy... so I dont even bother logging them in my router any more.
-
This was logged by Andrews and Arnold and they took some kind of automatic action very quickly. Burakkucat is helping me sort my stealthiness out.
-
Have about 20 Possible DoS attack detected from xx:xx:xx:xx in one month of router logs the IP address's are always different and at different times of the day it does not worry me it shows the router firewall is doing the job it was designed for :fingers:
one that shows up a few times is 185.94.111.1 - IP address, location, and related information. IP lookup is Russian Federation for 185.94.111.1 address.
-
This was detected by the ISP though, Andrews and Arnold, not by my own firewall. It may be that Andrews and Arnold slammed the door shut so that the DOS wouldn't rack up a bill on my account. (As I pay for MB downstream.)