Forum     

Go Back   Digit Technology Discussion Forum > Portables, Peripherals and Electronics > QnA (read only)
Register FAQ Calendar Mark Forums Read

QnA (read only) Mods please help transfer the contents of this forum to proper sections. :)


 
 
LinkBack Thread Tools Search this Thread Display Modes
Old 07-05-2006, 10:07 PM   #1 (permalink)
Your Maker.
 
MysticHalo's Avatar
 
Join Date: Jan 2006
Location: mumba][
Posts: 397
Unhappy ethernet attack ! Help Plz


Hello ppl,
I am in some trouble here...lately, i am getting "Ethernet attacks's from a particular IP address but with different MAC. The IP address is 255.255.255.255 (now thats weird) But thats what my firewall tells me ( Outpost Firewall Pro 3.51) The firewall is updated with latest definitions...so i think that i shouldnt be any trouble, but whenever this attack happens(5 times in past 15 minutes)my internet connection stops working(looks like the firewall blocks it, ), so i have to disconnect and reconnect
The warning also tells that "Host tampers with its Ip addresses" Now what does this mean
here's the attack LOG-:
Code:
10:04:51 PM    Host tampers its IP addresses.    IP spoofing detected. Host 0B-00-20-00-0B-00 (255.255.255.255) tampers its IP addresses.
9:57:56 PM    Host tampers its IP addresses.    IP spoofing detected. Host 0A-00-20-00-0A-00 (255.255.255.255) tampers its IP addresses.
9:56:57 PM    Host tampers its IP addresses.    IP spoofing detected. Host 09-00-20-00-09-00 (255.255.255.255) tampers its IP addresses.
9:56:32 PM    Host tampers its IP addresses.    IP spoofing detected. Host 08-00-20-00-08-00 (255.255.255.255) tampers its IP addresses.
9:54:09 PM    Host tampers its IP addresses.    IP spoofing detected. Host 07-00-20-00-07-00 (255.255.255.255) tampers its IP addresses.
9:50:13 PM    Host tampers its IP addresses.    IP spoofing detected. Host 06-00-20-00-06-00 (255.255.255.255) tampers its IP addresses.
9:48:58 PM    Host tampers its IP addresses.    IP spoofing detected. Host 05-00-20-00-05-00 (255.255.255.255) tampers its IP addresses.
9:46:30 PM    Host tampers its IP addresses.    IP spoofing detected. Host 3A-F4-20-00-04-00 (255.255.255.255) tampers its IP addresses.
9:44:48 PM    Host tampers its IP addresses.    IP spoofing detected. Host 03-00-20-00-03-00 (255.255.255.255) tampers its IP addresses.
9:41:03 PM    Host tampers its IP addresses.    IP spoofing detected. Host 02-00-20-00-02-00 (255.255.255.255) tampers its IP addresses.
Plz help me guys
__________________
“Talent is a flame, but genius is a fire.”
MysticHalo is offline  
Advertisements. Register and be a member of the community to get rid of them.
Advertisement

Old 08-05-2006, 05:13 PM   #2 (permalink)
Your Maker.
 
MysticHalo's Avatar
 
Join Date: Jan 2006
Location: mumba][
Posts: 397
Default Re: ethernet attack ! Help Plz

No one?
Thankfully, the attacks have stopped now....but still, what WAS IT?
__________________
“Talent is a flame, but genius is a fire.”
MysticHalo is offline  
Old 09-05-2006, 01:15 PM   #3 (permalink)
Right Off the Assembly Line
 
Join Date: May 2006
Posts: 2
Default Re: ethernet attack ! Help Plz

IP spoofing is to change the mac address of lan card with some other address here it is your address the attacker is using. That's why it is showing that it as it tampers the ip address that is to change the mac address.
iwillsavetheworld is offline  
Old 09-05-2006, 10:51 PM   #4 (permalink)
In The Zone
 
phatratt's Avatar
 
Join Date: Jan 2006
Location: Mysore
Posts: 263
Default Re: ethernet attack ! Help Plz

255.255.255.255,is'nt this a subnet??Is it possible that some backdoor program has been installed causing this attack??please clarify
__________________
Growing old is mandatory; growing up is optional.
phatratt is offline  
Old 10-05-2006, 07:43 AM   #5 (permalink)
Coming back to life ..
 
it_waaznt_me's Avatar
 
Join Date: Nov 2003
Location: A bit closer to heaven
Posts: 1,997
Default Re: ethernet attack ! Help Plz

255.255.255.255 is a broadcast address.Which means that if a packet's destination address is set to broadcast address, all hosts will recieve it .. It cannot be a source address.
Now here whats happening is that your firewall sees that the packet's source address is a broadcast address which cannot be .. So its telling you that someone is spoofing ip address.
You cannot change the mac address of a lan card. Its burned on the rom and contains a unique number.

To the author, Dont worry, maybe some worm was testing your defences. Your firewall will take care of it.
__________________
Sleight of hand and twist of fate...
On a bed of nails she makes me wait...
And I wait without you ...
With or without you ..
----
Batty = Too Busy Now !!!
it_waaznt_me is offline  
 

Bookmarks

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


 
Latest Threads
- by Sarath
- by clmlbx
- by ico
- by clinton
- by icebags
- by Charan

Advertisement




All times are GMT +5.5. The time now is 01:42 AM.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2012, vBulletin Solutions, Inc.

Search Engine Optimization by vBSEO 3.3.2