[Help] Security Log looks bad

Author	All Replies
Mykejjjj @co.uk	[Help] Security Log looks bad 07/23/2007 15:13:45 192.168.0.45 login success 07/23/2007 15:08:44 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 15:07:52 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 15:07:50 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 15:06:05 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 15:06:04 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 15:05:53 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 15:05:51 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 15:05:50 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 15:05:49 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 15:05:41 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 15:05:40 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 15:05:18 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 15:05:16 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 15:04:54 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 15:04:52 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 15:00:48 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:57:54 192.168.0.45 login success 07/23/2007 14:57:02 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:57:00 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:56:35 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:56:34 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:56:20 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:56:19 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:56:13 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:56:12 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:55:56 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:55:55 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:55:50 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:55:48 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:55:33 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:55:31 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:55:22 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:55:21 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:55:18 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:55:16 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:54:03 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:54:02 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:53:48 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:53:47 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:53:44 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:53:42 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:53:36 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:53:34 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:53:27 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:53:26 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:53:17 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:53:16 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:53:12 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:53:10 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:53:09 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:52:57 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:52:56 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:52:55 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:52:53 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:52:52 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:52:50 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:52:49 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:52:47 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:52:46 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:52:44 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:52:37 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:52:35 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:52:25 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:52:23 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:52:21 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:52:19 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:52:13 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:52:11 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:52:10 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:52:09 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:52:00 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:51:58 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:51:56 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:51:54 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:51:53 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:51:30 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:51:29 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:51:27 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:51:26 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:50:15 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:50:11 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:50:10 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:49:56 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:49:55 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:49:50 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:49:48 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:49:46 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:49:45 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:49:33 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:49:31 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:49:30 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:49:27 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:49:25 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:49:15 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:49:13 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:49:04 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:49:03 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:49:00 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:48:58 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:48:51 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:48:49 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:48:35 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:48:34 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:48:20 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:48:18 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:48:17 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:48:06 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:48:05 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:48:04 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:48:02 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:48:01 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:48:00 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:47:54 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:47:52 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:47:45 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:47:44 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:47:32 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:47:31 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:47:29 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:47:27 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:47:17 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:47:16 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:47:08 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:47:06 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:46:56 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:46:55 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:46:51 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:46:50 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:46:48 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:46:47 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:46:45 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:46:44 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:46:42 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:46:41 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:46:39 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:46:37 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:46:36 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:46:14 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:46:13 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:46:11 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:46:10 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:42:49 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:42:47 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:40:55 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:40:53 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:40:46 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:40:45 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:40:40 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:40:38 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:40:33 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:40:32 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:40:29 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:40:27 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:40:17 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:40:16 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:40:14 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:40:04 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:40:03 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) 07/23/2007 14:39:57 Smurf 192.168.1.255->> 192.168.1.5, Type:3, Code:3 (from ATM1 Outbound) Just got this from my Belkin security logs, does this indicate a 'smurf attack' or not?
Mykejjjj @co.uk	to forum · permalink · 2007-07-23 10:26:05 ·
TheWiseGuy Dog And Butterfly Premium,MVM join:2002-07-04 Yonkers, NY	It wouldn't be a smurf attack. A smurf would be an ICMP type 8, with a response of an ICMP type 0. This is an ICMP type 3, sub-code 3, which is Destination Unreachable, Port Unreachable (the port has nothing running to demultiplex the UDP Protocol). This would seem closer to a fraggle but I doubt it for several reasons including the frequency of the packets. An explanation of fraggle is »www-arc.com/sara/cve/Possible_Do···lem.html In addition there are several things that seem strange, your router is 192.168.0.45 but the logs are from the 192.168.1.X range. The logs also indicate the packets are "from ATM1 Outbound". Also if I am reading the log correctly they are from 192.168.1.255 intended for 192.168.1.5 which would be the broadcast address sending packets and there should not be a device at the broadcast address, so packets should not be sent from the broadcast address. More information on what how your network is setup might help, also do you have any devices in the 192.168.1.x range. Is one of them at 192.168.1.5. If you do that would be the place to start to try and figure out why this is occurring. -- Warning, If you post nonsense and use misinformation and are here to argue based on those methods, you will be put on ignore.
	to forum · permalink · · 2007-07-23 16:25:00 ·


Friday, 27-Nov 06:04:54	Terms of Use \| Privacy Policy \| Hosting by www.nac.net - DSL,Hosting & Co-lo \| feedback \| contact over 10 years online! © 1999-2009 dslreports.com. republican-creole page compression OFF