Omega Owners Forum

Chat Area => General Discussion Area => Topic started by: Gaffers on 25 January 2010, 18:57:55

Title: I think someone is trying to hack in...
Post by: Gaffers on 25 January 2010, 18:57:55
The router where i am staying seems to be constantly falling over itself.  Connection works then it doesn't, thenit works again....annoying....

Just checked the log and got this:

2010-01-25T18:54:26Z        info        src=79.73.235.116 dst=86.158.131.197 ipprot=6 sport=57449 dport=1947 Unknown inbound session stopped
2010-01-25T18:54:26Z       info       src=89.152.16.91 dst=86.158.131.197 ipprot=6 sport=4766 dport=51664 Unknown inbound session stopped
2010-01-25T18:54:26Z       info       src=217.10.40.121 dst=86.158.131.197 ipprot=6 sport=33121 dport=14896 Unknown inbound session stopped
2010-01-25T18:54:26Z       info       src=80.192.119.74 dst=86.158.131.197 ipprot=6 sport=21962 dport=14896 Unknown inbound session stopped
2010-01-25T18:54:26Z       info       src=61.19.97.6 dst=86.158.131.197 ipprot=6 sport=56795 dport=14896 Unknown inbound session stopped
2010-01-25T18:54:26Z       info       src=92.238.180.169 dst=86.158.131.197 ipprot=6 sport=53389 dport=14896 Unknown inbound session stopped
2010-01-25T18:54:26Z       info       src=86.12.86.225 dst=86.158.131.197 ipprot=6 sport=61513 dport=14896 Unknown inbound session stopped
2010-01-25T18:54:27Z       info       src=76.174.55.51 dst=86.158.131.197 ipprot=6 sport=57235 dport=14896 Unknown inbound session stopped
2010-01-25T18:54:28Z       info       src=89.101.34.2 dst=86.158.131.197 ipprot=6 sport=49876 dport=14896 Unknown inbound session stopped

ad infinitum....

anyone got an idea? DoS?
Title: Re: I think someone is trying to hack in...
Post by: Plomien on 25 January 2010, 19:00:00
looks like kids doing port scans nothing to worry about as your firewall has blocked them :y
Title: Re: I think someone is trying to hack in...
Post by: Gaffers on 25 January 2010, 19:00:41
to add when the web works i dont have access to al sites, just OOF, MSN and Skype....nothing else....
Title: Re: I think someone is trying to hack in...
Post by: Gaffers on 25 January 2010, 19:05:26
Quote
looks like kids doing port scans nothing to worry about as your firewall has blocked them :y

Yeah but they seem to be kicking out the internet sporadically....it took me 5 mins to reply to this......
Title: Re: I think someone is trying to hack in...
Post by: feeutfo on 25 January 2010, 19:11:51
time and date is all the same, time to bother your provider for a new router perhaps?
Title: Re: I think someone is trying to hack in...
Post by: Gaffers on 25 January 2010, 19:14:54
Quote
time and date is all the same, time to bother your provider for a new router perhaps?

Nah thats just a snapshotof a few seconds........getting 6-9 port requests a second :(
Title: Re: I think someone is trying to hack in...
Post by: TheBoy on 25 January 2010, 19:39:30
Do a netstat -a and see if you have something listening on tcp 14896...
Title: Re: I think someone is trying to hack in...
Post by: Gaffers on 25 January 2010, 19:57:21
If they were they arent anymore and the connection has come back albeit slow..... I am seeing an address which I dont think should be there:

r6ay206.net.upc.cz:61501

How do I kill that connection?
Title: Re: I think someone is trying to hack in...
Post by: Pitchfork on 25 January 2010, 19:59:26
Quote
If they were they arent anymore and the connection has come back albeit slow..... I am seeing an address which I dont think should be there:

r6ay206.net.upc.cz:61501



How do I kill that connection?
You'll need to Czech it out!! ;D
Title: Re: I think someone is trying to hack in...
Post by: Gaffers on 25 January 2010, 20:02:10
Quote
Quote
If they were they arent anymore and the connection has come back albeit slow..... I am seeing an address which I dont think should be there:

r6ay206.net.upc.cz:61501



How do I kill that connection?
You'll need to Czech it out!! ;D

[opens door and hands PF his coat]  ;D ;D

Title: Re: I think someone is trying to hack in...
Post by: eddie on 26 January 2010, 06:01:37
Take a look here-http://www.bleepingcomputer.com/virus-removal/remove-windows-antivirus-pro
-Sounds very similar to the one the Mrs had on her pc.

eddie