Ukeâ„¢
08-04-2007, 00:52
My router has been very unreliable recently, locking up and rebooting randomly, so I enabled verbose logging. I was shocked to find my log filling up at an alarming rate, almost one page every 5 seconds, with entries like this:
Apr/07/2007 23:14:09
Drop TCP packet from WAN src:87.230.183.150:4671 dst:<IP removed>:51219 Rule: Default deny
Apr/07/2007 23:14:08
Drop TCP packet from WAN src:87.88.213.104:3910 dst:<IP removed>:51219 Rule: Default deny
Apr/07/2007 23:14:06
Drop TCP packet from WAN src:86.218.150.90:57840 dst:<IP removed>:51219 Rule: Default deny
Apr/07/2007 23:14:04
Drop UDP packet from WAN src:74.120.44.217:62037 dst:<IP removed>:61548 Rule: Default deny
Apr/07/2007 23:14:03
Drop TCP packet from WAN src:86.218.150.90:57840 dst:<IP removed>:51219 Rule: Default deny
Apr/07/2007 23:14:03
Drop UDP packet from WAN src:77.49.30.178:40938 dst:<IP removed>:61548 Rule: Default deny
Apr/07/2007 23:14:03
Drop TCP packet from WAN src:74.100.194.213:16881 dst:<IP removed>:61749 Rule: Default deny
Apr/07/2007 23:13:42
Drop TCP packet from WAN src:62.209.238.122:1976 dst:<IP removed>:51219 Rule: Default deny
Apr/07/2007 23:13:41
Drop UDP packet from WAN src:24.155.108.147:61651 dst:<IP removed>:61548 Rule: Default deny
Apr/07/2007 23:13:40
Drop TCP packet from WAN src:24.239.234.128:33609 dst:<IP removed>:51219 Rule: Default deny
Apr/07/2007 23:13:39
Drop TCP packet from WAN src:62.209.238.122:1976 dst:<IP removed>:51219 Rule: Default deny
Apr/07/2007 23:13:34
Drop UDP packet from WAN src:76.24.22.199:37994 dst:<IP removed>:61548 Rule: Default deny
Apr/07/2007 23:13:34
Drop TCP packet from WAN src:24.137.118.232:41035 dst:<IP removed>:61629 Rule: Default deny
Apr/07/2007 23:13:33
Drop TCP packet from WAN src:142.68.185.164:3925 dst:<IP removed>:51219 Rule: Default deny
Apr/07/2007 23:13:32
Drop TCP packet from WAN src:207.46.216.62:80 dst:<IP removed>:60019 Rule: Default deny
Apr/07/2007 23:13:31
Drop TCP packet from WAN src:82.34.48.9:4027 dst:<IP removed>:61658 Rule: Default deny
Apr/07/2007 23:13:30
Drop TCP packet from WAN src:24.160.130.214:49824 dst:<IP removed>:18294 Rule: Default deny
Apr/07/2007 23:13:30
Drop TCP packet from WAN src:81.153.37.43:1771 dst:<IP removed>:60031 Rule: Default deny
Apr/07/2007 23:13:29
Drop TCP packet from WAN src:24.190.41.96:40825 dst:<IP removed>:51219 Rule: Default deny
Apr/07/2007 23:13:28
Drop UDP packet from WAN src:24.160.130.214:27679 dst:<IP removed>:18294 Rule: Default deny
Apr/07/2007 23:13:27
Drop TCP packet from WAN src:195.226.235.229:1985 dst:<IP removed>:51219 Rule: Default deny
Apr/07/2007 23:13:25
Drop UDP packet from WAN src:86.153.82.10:59487 dst:<IP removed>:61548 Rule: Default deny
Apr/07/2007 23:13:25
Drop UDP packet from WAN src:24.160.130.214:27679 dst:<IP removed>:18294 Rule: Default deny
Apr/07/2007 23:13:24
Drop TCP packet from WAN src:24.160.130.214:49824 dst:<IP removed>:18294 Rule: Default deny
Apr/07/2007 23:13:23
Drop TCP packet from WAN src:24.190.41.96:40825 dst:<IP removed>:51219 Rule: Default deny
Apr/07/2007 23:13:23
Drop UDP packet from WAN src:81.233.92.60:59214 dst:<IP removed>:61548 Rule: Default deny
Apr/07/2007 23:13:23
Drop TCP packet from WAN src:64.233.183.99:80 dst:<IP removed>:60014 Rule: Default deny
Apr/07/2007 23:13:22
Drop TCP packet from WAN src:64.233.183.103:80 dst:<IP removed>:60008 Rule: Default deny
Apr/07/2007 23:13:22
Drop TCP packet from WAN src:82.79.160.201:1179 dst:<IP removed>:51219 Rule: Default deny
Apr/07/2007 23:13:21
Drop UDP packet from WAN src:24.160.130.214:27679 dst:<IP removed>:18294 Rule: Default deny
Apr/07/2007 23:13:21
Drop TCP packet from WAN src:195.226.235.229:1985 dst:<IP removed>:51219 Rule: Default deny
Apr/07/2007 23:13:21
Drop TCP packet from WAN src:24.160.130.214:49824 dst:<IP removed>:18294 Rule: Default deny
Apr/07/2007 23:13:20
Drop TCP packet from WAN src:24.190.41.96:40825 dst:<IP removed>:51219 Rule: Default deny
Apr/07/2007 23:13:20
Drop TCP packet from WAN src:64.233.183.99:80 dst:<IP removed>:60016 Rule: Default deny
Apr/07/2007 23:13:20
Drop TCP packet from WAN src:64.233.183.99:80 dst:<IP removed>:60009 Rule: Default deny
Apr/07/2007 23:13:20
Drop TCP packet from WAN src:64.233.183.99:80 dst:<IP removed>:60012 Rule: Default deny
Apr/07/2007 23:13:20
Drop TCP packet from WAN src:64.233.183.99:80 dst:<IP removed>:60010 Rule: Default deny
Apr/07/2007 23:13:20
Drop TCP packet from WAN src:64.233.183.99:80 dst:<IP removed>:60011 Rule: Default deny
Apr/07/2007 23:13:20
Drop TCP packet from WAN src:64.233.183.99:80 dst:<IP removed>:60015 Rule: Default deny
Apr/07/2007 23:13:20
Drop TCP packet from WAN src:64.233.183.99:80 dst:<IP removed>:60013 Rule: Default deny
Apr/07/2007 23:13:20
Drop TCP packet from WAN src:66.249.93.147:80 dst:<IP removed>:60007 Rule: Default deny
Apr/07/2007 23:13:19
Drop TCP packet from WAN src:195.226.235.229:1985 dst:<IP removed>:51219 Rule: Default deny
Apr/07/2007 23:13:19
Drop TCP packet from WAN src:82.79.160.201:1179 dst:<IP removed>:51219 Rule: Default deny
Apr/07/2007 23:13:18
Drop UDP packet from WAN src:24.160.130.214:27679 dst:<IP removed>:18294 Rule: Default deny
Apr/07/2007 23:13:16
Drop TCP packet from WAN src:212.96.178.60:61341 dst:<IP removed>:51219 Rule: Default deny
Apr/07/2007 23:13:15
Drop UDP packet from WAN src:82.75.152.5:54447 dst:<IP removed>:61548 Rule: Default deny
Apr/07/2007 23:13:15
Drop UDP packet from WAN src:89.98.46.48:6882 dst:<IP removed>:61548 Rule: Default deny
Apr/07/2007 23:13:14
Drop TCP packet from WAN src:82.79.160.201:1153 dst:<IP removed>:51219 Rule: Default deny
Apr/07/2007 23:13:13
Drop TCP packet from WAN src:212.96.178.60:61341 dst:<IP removed>:51219 Rule: Default deny
Apr/07/2007 23:13:00
Drop TCP packet from WAN src:207.46.216.62:80 dst:<IP removed>:60019 Rule: Default deny
Apr/07/2007 23:12:57
Drop TCP packet from WAN src:217.255.95.89:1140 dst:<IP removed>:51219 Rule: Default deny
Apr/07/2007 23:12:55
Drop UDP packet from WAN src:218.164.95.2:31789 dst:<IP removed>:61548 Rule: Default deny
Apr/07/2007 23:12:54
Drop TCP packet from WAN src:217.255.95.89:1140 dst:<IP removed>:51219 Rule: Default deny
Apr/07/2007 23:12:52
Drop TCP packet from WAN src:88.72.235.76:12906 dst:<IP removed>:51219 Rule: Default deny
Apr/07/2007 23:12:51
Drop TCP packet from WAN src:64.233.183.99:80 dst:<IP removed>:60014 Rule: Default deny
Apr/07/2007 23:12:51
Drop UDP packet from WAN src:68.111.44.182:42642 dst:<IP removed>:61548 Rule: Default deny
Apr/07/2007 23:12:50
Drop TCP packet from WAN src:64.233.183.103:80 dst:<IP removed>:60008 Rule: Default deny
Apr/07/2007 23:12:48
Drop TCP packet from WAN src:64.233.183.99:80 dst:<IP removed>:60016 Rule: Default deny
Apr/07/2007 23:12:48
Drop TCP packet from WAN src:64.233.183.99:80 dst:<IP removed>:60012 Rule: Default deny
Apr/07/2007 23:12:48
Drop TCP packet from WAN src:64.233.183.99:80 dst:<IP removed>:60009 Rule: Default deny
Apr/07/2007 23:12:48
Drop TCP packet from WAN src:64.233.183.99:80 dst:<IP removed>:60010 Rule: Default deny
Apr/07/2007 23:12:48
Drop TCP packet from WAN src:64.233.183.99:80 dst:<IP removed>:60011 Rule: Default deny
Apr/07/2007 23:12:48
Drop TCP packet from WAN src:64.233.183.99:80 dst:<IP removed>:60015 Rule: Default deny
Apr/07/2007 23:12:48
Drop TCP packet from WAN src:64.233.183.99:80 dst:<IP removed>:60013 Rule: Default deny
Apr/07/2007 23:12:48
Drop TCP packet from WAN src:66.249.93.147:80 dst:<IP removed>:60007 Rule: Default deny
Apr/07/2007 23:12:47
Drop UDP packet from WAN src:89.209.81.89:17810 dst:<IP removed>:61548 Rule: Default deny
Apr/07/2007 23:12:47
Drop TCP packet from WAN src:88.72.235.76:12906 dst:<IP removed>:51219 Rule: Default deny
Apr/07/2007 23:12:46
Drop UDP packet from WAN src:70.128.183.135:13502 dst:<IP removed>:61548 Rule: Default deny
Apr/07/2007 23:12:45
Drop TCP packet from WAN src:68.194.111.169:49723 dst:<IP removed>:51219 Rule: Default deny
Apr/07/2007 23:12:45
Drop TCP packet from WAN src:88.72.235.76:12906 dst:<IP removed>:51219 Rule: Default deny
Apr/07/2007 23:12:39
Drop TCP packet from WAN src:68.194.111.169:49723 dst:<IP removed>:51219 Rule: Default deny
Apr/07/2007 23:12:36
Drop TCP packet from WAN src:68.194.111.169:49723 dst:<IP removed>:51219 Rule: Default deny
Apr/07/2007 23:12:36
Drop UDP packet from WAN src:219.95.193.176:53726 dst:<IP removed>:61548 Rule: Default deny
Apr/07/2007 23:12:34
Drop UDP packet from WAN src:24.160.130.214:27679 dst:<IP removed>:18294 Rule: Default deny
Apr/07/2007 23:12:33
Drop TCP packet from WAN src:24.160.130.214:49782 dst:<IP removed>:18294 Rule: Default deny
Apr/07/2007 23:12:32
Drop TCP packet from WAN src:88.72.235.76:12880 dst:<IP removed>:51219 Rule: Default deny
Apr/07/2007 23:12:30
Drop UDP packet from WAN src:24.160.130.214:27679 dst:<IP removed>:18294 Rule: Default deny
Apr/07/2007 23:12:30
Drop TCP packet from WAN src:207.46.216.62:80 dst:<IP removed>:60019 Rule: Default deny
Apr/07/2007 23:12:30
Drop TCP packet from WAN src:213.220.205.66:1352 dst:<IP removed>:51219 Rule: Default deny
Apr/07/2007 23:12:27
Drop UDP packet from WAN src:24.160.130.214:27679 dst:<IP removed>:18294 Rule: Default deny
Apr/07/2007 23:12:27
Drop TCP packet from WAN src:24.160.130.214:49782 dst:<IP removed>:18294 Rule: Default deny
Apr/07/2007 23:12:26
Drop TCP packet from WAN src:88.72.235.76:12880 dst:<IP removed>:51219 Rule: Default deny
Apr/07/2007 23:12:24
Drop TCP packet from WAN src:82.79.160.201:1153 dst:<IP removed>:51219 Rule: Default deny
Apr/07/2007 23:12:24
Drop TCP packet from WAN src:88.72.235.76:12880 dst:<IP removed>:51219 Rule: Default deny
Apr/07/2007 23:12:24
Drop UDP packet from WAN src:24.160.130.214:27679 dst:<IP removed>:18294 Rule: Default deny
Apr/07/2007 23:12:24
Drop TCP packet from WAN src:24.160.130.214:49782 dst:<IP removed>:18294 Rule: Default deny
Apr/07/2007 23:12:22
Drop TCP packet from WAN src:87.223.165.110:1497 dst:<IP removed>:51219 Rule: Default deny
Apr/07/2007 23:12:21
Drop TCP packet from WAN src:82.79.160.201:1153 dst:<IP removed>:51219 Rule: Default deny
Apr/07/2007 23:12:21
Drop TCP packet from WAN src:86.218.150.90:57191 dst:<IP removed>:51219 Rule: Default deny
Apr/07/2007 23:12:20
Drop TCP packet from WAN src:64.233.183.99:80 dst:<IP removed>:60014 Rule: Default deny
Apr/07/2007 23:12:20
Drop TCP packet from WAN src:64.233.183.103:80 dst:<IP removed>:60008 Rule: Default deny
Apr/07/2007 23:12:19
Drop TCP packet from WAN src:195.226.235.229:1950 dst:<IP removed>:51219 Rule: Default deny
Apr/07/2007 23:12:18
Drop TCP packet from WAN src:64.233.183.99:80 dst:<IP removed>:60016 Rule: Default deny
Apr/07/2007 23:12:18
Drop TCP packet from WAN src:64.233.183.99:80 dst:<IP removed>:60009 Rule: Default deny
Apr/07/2007 23:12:18
Drop TCP packet from WAN src:64.233.183.99:80 dst:<IP removed>:60012 Rule: Default deny
Apr/07/2007 23:12:18
Drop TCP packet from WAN src:64.233.183.99:80 dst:<IP removed>:60010 Rule: Default deny
Apr/07/2007 23:12:18
Drop TCP packet from WAN src:64.233.183.99:80 dst:<IP removed>:60011 Rule: Default deny
Apr/07/2007 23:12:18
Drop TCP packet from WAN src:64.233.183.99:80 dst:<IP removed>:60015 Rule: Default deny
Apr/07/2007 23:12:18
Drop TCP packet from WAN src:64.233.183.99:80 dst:<IP removed>:60013 Rule: Default deny
Apr/07/2007 23:12:18
Drop TCP packet from WAN src:66.249.93.147:80 dst:<IP removed>:60007 Rule: Default deny
Apr/07/2007 23:12:15
Drop TCP packet from WAN src:82.79.160.201:1134 dst:<IP removed>:51219 Rule: Default deny
Apr/07/2007 23:12:13
Drop TCP packet from WAN src:195.226.235.229:1950 dst:<IP removed>:51219 Rule: Default deny
Apr/07/2007 23:12:11
Drop TCP packet from WAN src:88.72.235.76:12845 dst:<IP removed>:51219 Rule: Default deny
Apr/07/2007 23:12:10
Drop UDP packet from WAN src:81.15.156.35:31560 dst:<IP removed>:61548 Rule: Default deny
Apr/07/2007 23:12:10
Drop TCP packet from WAN src:195.226.235.229:1950 dst:<IP removed>:51219 Rule: Default deny
Apr/07/2007 23:12:08
Drop TCP packet from WAN src:142.68.185.164:3815 dst:<IP removed>:51219 Rule: Default deny
Apr/07/2007 23:12:05
Drop TCP packet from WAN src:88.72.235.76:12845 dst:<IP removed>:51219 Rule: Default deny
Apr/07/2007 23:12:05
Drop TCP packet from WAN src:142.68.185.164:3815 dst:<IP removed>:51219 Rule: Default deny
Apr/07/2007 23:12:04
Drop TCP packet from WAN src:74.100.194.213:16881 dst:<IP removed>:61749 Rule: Default deny
Apr/07/2007 23:12:04
Drop TCP packet from WAN src:212.96.178.60:63043 dst:<IP removed>:51219 Rule: Default deny
Apr/07/2007 23:12:03
Drop TCP packet from WAN src:88.72.235.76:12845 dst:<IP removed>:51219 Rule: Default deny
Apr/07/2007 23:11:58
Drop TCP packet from WAN src:207.46.216.62:80 dst:<IP removed>:60019 Rule: Default deny
Apr/07/2007 23:11:55
Drop TCP packet from WAN src:212.96.178.60:63043 dst:<IP removed>:51219 Rule: Default deny
Apr/07/2007 23:11:55
Drop TCP packet from WAN src:82.207.0.125:1051 dst:<IP removed>:51219 Rule: Default deny
Mod edit (Gavin): IPs removed for your own security.
I am sure that this is the problem, and I am sure it is indeed a DDoS attack as many of the IPs involved appear to be common household connections (hostnames point to Comcast, AOL, Sky etc.).
I would like to know what action I am able to take from this point onwards, taking into consideration a few facts:
I used to run a home server, these issues have made it inaccessible.
These issues are almost halving my connection speeds.
These issues may be shortening the life of my modem or router hardware.
Is there anything I can do to prevent this from happening again, and am I entitled to anything because of these attacks?
Apr/07/2007 23:14:09
Drop TCP packet from WAN src:87.230.183.150:4671 dst:<IP removed>:51219 Rule: Default deny
Apr/07/2007 23:14:08
Drop TCP packet from WAN src:87.88.213.104:3910 dst:<IP removed>:51219 Rule: Default deny
Apr/07/2007 23:14:06
Drop TCP packet from WAN src:86.218.150.90:57840 dst:<IP removed>:51219 Rule: Default deny
Apr/07/2007 23:14:04
Drop UDP packet from WAN src:74.120.44.217:62037 dst:<IP removed>:61548 Rule: Default deny
Apr/07/2007 23:14:03
Drop TCP packet from WAN src:86.218.150.90:57840 dst:<IP removed>:51219 Rule: Default deny
Apr/07/2007 23:14:03
Drop UDP packet from WAN src:77.49.30.178:40938 dst:<IP removed>:61548 Rule: Default deny
Apr/07/2007 23:14:03
Drop TCP packet from WAN src:74.100.194.213:16881 dst:<IP removed>:61749 Rule: Default deny
Apr/07/2007 23:13:42
Drop TCP packet from WAN src:62.209.238.122:1976 dst:<IP removed>:51219 Rule: Default deny
Apr/07/2007 23:13:41
Drop UDP packet from WAN src:24.155.108.147:61651 dst:<IP removed>:61548 Rule: Default deny
Apr/07/2007 23:13:40
Drop TCP packet from WAN src:24.239.234.128:33609 dst:<IP removed>:51219 Rule: Default deny
Apr/07/2007 23:13:39
Drop TCP packet from WAN src:62.209.238.122:1976 dst:<IP removed>:51219 Rule: Default deny
Apr/07/2007 23:13:34
Drop UDP packet from WAN src:76.24.22.199:37994 dst:<IP removed>:61548 Rule: Default deny
Apr/07/2007 23:13:34
Drop TCP packet from WAN src:24.137.118.232:41035 dst:<IP removed>:61629 Rule: Default deny
Apr/07/2007 23:13:33
Drop TCP packet from WAN src:142.68.185.164:3925 dst:<IP removed>:51219 Rule: Default deny
Apr/07/2007 23:13:32
Drop TCP packet from WAN src:207.46.216.62:80 dst:<IP removed>:60019 Rule: Default deny
Apr/07/2007 23:13:31
Drop TCP packet from WAN src:82.34.48.9:4027 dst:<IP removed>:61658 Rule: Default deny
Apr/07/2007 23:13:30
Drop TCP packet from WAN src:24.160.130.214:49824 dst:<IP removed>:18294 Rule: Default deny
Apr/07/2007 23:13:30
Drop TCP packet from WAN src:81.153.37.43:1771 dst:<IP removed>:60031 Rule: Default deny
Apr/07/2007 23:13:29
Drop TCP packet from WAN src:24.190.41.96:40825 dst:<IP removed>:51219 Rule: Default deny
Apr/07/2007 23:13:28
Drop UDP packet from WAN src:24.160.130.214:27679 dst:<IP removed>:18294 Rule: Default deny
Apr/07/2007 23:13:27
Drop TCP packet from WAN src:195.226.235.229:1985 dst:<IP removed>:51219 Rule: Default deny
Apr/07/2007 23:13:25
Drop UDP packet from WAN src:86.153.82.10:59487 dst:<IP removed>:61548 Rule: Default deny
Apr/07/2007 23:13:25
Drop UDP packet from WAN src:24.160.130.214:27679 dst:<IP removed>:18294 Rule: Default deny
Apr/07/2007 23:13:24
Drop TCP packet from WAN src:24.160.130.214:49824 dst:<IP removed>:18294 Rule: Default deny
Apr/07/2007 23:13:23
Drop TCP packet from WAN src:24.190.41.96:40825 dst:<IP removed>:51219 Rule: Default deny
Apr/07/2007 23:13:23
Drop UDP packet from WAN src:81.233.92.60:59214 dst:<IP removed>:61548 Rule: Default deny
Apr/07/2007 23:13:23
Drop TCP packet from WAN src:64.233.183.99:80 dst:<IP removed>:60014 Rule: Default deny
Apr/07/2007 23:13:22
Drop TCP packet from WAN src:64.233.183.103:80 dst:<IP removed>:60008 Rule: Default deny
Apr/07/2007 23:13:22
Drop TCP packet from WAN src:82.79.160.201:1179 dst:<IP removed>:51219 Rule: Default deny
Apr/07/2007 23:13:21
Drop UDP packet from WAN src:24.160.130.214:27679 dst:<IP removed>:18294 Rule: Default deny
Apr/07/2007 23:13:21
Drop TCP packet from WAN src:195.226.235.229:1985 dst:<IP removed>:51219 Rule: Default deny
Apr/07/2007 23:13:21
Drop TCP packet from WAN src:24.160.130.214:49824 dst:<IP removed>:18294 Rule: Default deny
Apr/07/2007 23:13:20
Drop TCP packet from WAN src:24.190.41.96:40825 dst:<IP removed>:51219 Rule: Default deny
Apr/07/2007 23:13:20
Drop TCP packet from WAN src:64.233.183.99:80 dst:<IP removed>:60016 Rule: Default deny
Apr/07/2007 23:13:20
Drop TCP packet from WAN src:64.233.183.99:80 dst:<IP removed>:60009 Rule: Default deny
Apr/07/2007 23:13:20
Drop TCP packet from WAN src:64.233.183.99:80 dst:<IP removed>:60012 Rule: Default deny
Apr/07/2007 23:13:20
Drop TCP packet from WAN src:64.233.183.99:80 dst:<IP removed>:60010 Rule: Default deny
Apr/07/2007 23:13:20
Drop TCP packet from WAN src:64.233.183.99:80 dst:<IP removed>:60011 Rule: Default deny
Apr/07/2007 23:13:20
Drop TCP packet from WAN src:64.233.183.99:80 dst:<IP removed>:60015 Rule: Default deny
Apr/07/2007 23:13:20
Drop TCP packet from WAN src:64.233.183.99:80 dst:<IP removed>:60013 Rule: Default deny
Apr/07/2007 23:13:20
Drop TCP packet from WAN src:66.249.93.147:80 dst:<IP removed>:60007 Rule: Default deny
Apr/07/2007 23:13:19
Drop TCP packet from WAN src:195.226.235.229:1985 dst:<IP removed>:51219 Rule: Default deny
Apr/07/2007 23:13:19
Drop TCP packet from WAN src:82.79.160.201:1179 dst:<IP removed>:51219 Rule: Default deny
Apr/07/2007 23:13:18
Drop UDP packet from WAN src:24.160.130.214:27679 dst:<IP removed>:18294 Rule: Default deny
Apr/07/2007 23:13:16
Drop TCP packet from WAN src:212.96.178.60:61341 dst:<IP removed>:51219 Rule: Default deny
Apr/07/2007 23:13:15
Drop UDP packet from WAN src:82.75.152.5:54447 dst:<IP removed>:61548 Rule: Default deny
Apr/07/2007 23:13:15
Drop UDP packet from WAN src:89.98.46.48:6882 dst:<IP removed>:61548 Rule: Default deny
Apr/07/2007 23:13:14
Drop TCP packet from WAN src:82.79.160.201:1153 dst:<IP removed>:51219 Rule: Default deny
Apr/07/2007 23:13:13
Drop TCP packet from WAN src:212.96.178.60:61341 dst:<IP removed>:51219 Rule: Default deny
Apr/07/2007 23:13:00
Drop TCP packet from WAN src:207.46.216.62:80 dst:<IP removed>:60019 Rule: Default deny
Apr/07/2007 23:12:57
Drop TCP packet from WAN src:217.255.95.89:1140 dst:<IP removed>:51219 Rule: Default deny
Apr/07/2007 23:12:55
Drop UDP packet from WAN src:218.164.95.2:31789 dst:<IP removed>:61548 Rule: Default deny
Apr/07/2007 23:12:54
Drop TCP packet from WAN src:217.255.95.89:1140 dst:<IP removed>:51219 Rule: Default deny
Apr/07/2007 23:12:52
Drop TCP packet from WAN src:88.72.235.76:12906 dst:<IP removed>:51219 Rule: Default deny
Apr/07/2007 23:12:51
Drop TCP packet from WAN src:64.233.183.99:80 dst:<IP removed>:60014 Rule: Default deny
Apr/07/2007 23:12:51
Drop UDP packet from WAN src:68.111.44.182:42642 dst:<IP removed>:61548 Rule: Default deny
Apr/07/2007 23:12:50
Drop TCP packet from WAN src:64.233.183.103:80 dst:<IP removed>:60008 Rule: Default deny
Apr/07/2007 23:12:48
Drop TCP packet from WAN src:64.233.183.99:80 dst:<IP removed>:60016 Rule: Default deny
Apr/07/2007 23:12:48
Drop TCP packet from WAN src:64.233.183.99:80 dst:<IP removed>:60012 Rule: Default deny
Apr/07/2007 23:12:48
Drop TCP packet from WAN src:64.233.183.99:80 dst:<IP removed>:60009 Rule: Default deny
Apr/07/2007 23:12:48
Drop TCP packet from WAN src:64.233.183.99:80 dst:<IP removed>:60010 Rule: Default deny
Apr/07/2007 23:12:48
Drop TCP packet from WAN src:64.233.183.99:80 dst:<IP removed>:60011 Rule: Default deny
Apr/07/2007 23:12:48
Drop TCP packet from WAN src:64.233.183.99:80 dst:<IP removed>:60015 Rule: Default deny
Apr/07/2007 23:12:48
Drop TCP packet from WAN src:64.233.183.99:80 dst:<IP removed>:60013 Rule: Default deny
Apr/07/2007 23:12:48
Drop TCP packet from WAN src:66.249.93.147:80 dst:<IP removed>:60007 Rule: Default deny
Apr/07/2007 23:12:47
Drop UDP packet from WAN src:89.209.81.89:17810 dst:<IP removed>:61548 Rule: Default deny
Apr/07/2007 23:12:47
Drop TCP packet from WAN src:88.72.235.76:12906 dst:<IP removed>:51219 Rule: Default deny
Apr/07/2007 23:12:46
Drop UDP packet from WAN src:70.128.183.135:13502 dst:<IP removed>:61548 Rule: Default deny
Apr/07/2007 23:12:45
Drop TCP packet from WAN src:68.194.111.169:49723 dst:<IP removed>:51219 Rule: Default deny
Apr/07/2007 23:12:45
Drop TCP packet from WAN src:88.72.235.76:12906 dst:<IP removed>:51219 Rule: Default deny
Apr/07/2007 23:12:39
Drop TCP packet from WAN src:68.194.111.169:49723 dst:<IP removed>:51219 Rule: Default deny
Apr/07/2007 23:12:36
Drop TCP packet from WAN src:68.194.111.169:49723 dst:<IP removed>:51219 Rule: Default deny
Apr/07/2007 23:12:36
Drop UDP packet from WAN src:219.95.193.176:53726 dst:<IP removed>:61548 Rule: Default deny
Apr/07/2007 23:12:34
Drop UDP packet from WAN src:24.160.130.214:27679 dst:<IP removed>:18294 Rule: Default deny
Apr/07/2007 23:12:33
Drop TCP packet from WAN src:24.160.130.214:49782 dst:<IP removed>:18294 Rule: Default deny
Apr/07/2007 23:12:32
Drop TCP packet from WAN src:88.72.235.76:12880 dst:<IP removed>:51219 Rule: Default deny
Apr/07/2007 23:12:30
Drop UDP packet from WAN src:24.160.130.214:27679 dst:<IP removed>:18294 Rule: Default deny
Apr/07/2007 23:12:30
Drop TCP packet from WAN src:207.46.216.62:80 dst:<IP removed>:60019 Rule: Default deny
Apr/07/2007 23:12:30
Drop TCP packet from WAN src:213.220.205.66:1352 dst:<IP removed>:51219 Rule: Default deny
Apr/07/2007 23:12:27
Drop UDP packet from WAN src:24.160.130.214:27679 dst:<IP removed>:18294 Rule: Default deny
Apr/07/2007 23:12:27
Drop TCP packet from WAN src:24.160.130.214:49782 dst:<IP removed>:18294 Rule: Default deny
Apr/07/2007 23:12:26
Drop TCP packet from WAN src:88.72.235.76:12880 dst:<IP removed>:51219 Rule: Default deny
Apr/07/2007 23:12:24
Drop TCP packet from WAN src:82.79.160.201:1153 dst:<IP removed>:51219 Rule: Default deny
Apr/07/2007 23:12:24
Drop TCP packet from WAN src:88.72.235.76:12880 dst:<IP removed>:51219 Rule: Default deny
Apr/07/2007 23:12:24
Drop UDP packet from WAN src:24.160.130.214:27679 dst:<IP removed>:18294 Rule: Default deny
Apr/07/2007 23:12:24
Drop TCP packet from WAN src:24.160.130.214:49782 dst:<IP removed>:18294 Rule: Default deny
Apr/07/2007 23:12:22
Drop TCP packet from WAN src:87.223.165.110:1497 dst:<IP removed>:51219 Rule: Default deny
Apr/07/2007 23:12:21
Drop TCP packet from WAN src:82.79.160.201:1153 dst:<IP removed>:51219 Rule: Default deny
Apr/07/2007 23:12:21
Drop TCP packet from WAN src:86.218.150.90:57191 dst:<IP removed>:51219 Rule: Default deny
Apr/07/2007 23:12:20
Drop TCP packet from WAN src:64.233.183.99:80 dst:<IP removed>:60014 Rule: Default deny
Apr/07/2007 23:12:20
Drop TCP packet from WAN src:64.233.183.103:80 dst:<IP removed>:60008 Rule: Default deny
Apr/07/2007 23:12:19
Drop TCP packet from WAN src:195.226.235.229:1950 dst:<IP removed>:51219 Rule: Default deny
Apr/07/2007 23:12:18
Drop TCP packet from WAN src:64.233.183.99:80 dst:<IP removed>:60016 Rule: Default deny
Apr/07/2007 23:12:18
Drop TCP packet from WAN src:64.233.183.99:80 dst:<IP removed>:60009 Rule: Default deny
Apr/07/2007 23:12:18
Drop TCP packet from WAN src:64.233.183.99:80 dst:<IP removed>:60012 Rule: Default deny
Apr/07/2007 23:12:18
Drop TCP packet from WAN src:64.233.183.99:80 dst:<IP removed>:60010 Rule: Default deny
Apr/07/2007 23:12:18
Drop TCP packet from WAN src:64.233.183.99:80 dst:<IP removed>:60011 Rule: Default deny
Apr/07/2007 23:12:18
Drop TCP packet from WAN src:64.233.183.99:80 dst:<IP removed>:60015 Rule: Default deny
Apr/07/2007 23:12:18
Drop TCP packet from WAN src:64.233.183.99:80 dst:<IP removed>:60013 Rule: Default deny
Apr/07/2007 23:12:18
Drop TCP packet from WAN src:66.249.93.147:80 dst:<IP removed>:60007 Rule: Default deny
Apr/07/2007 23:12:15
Drop TCP packet from WAN src:82.79.160.201:1134 dst:<IP removed>:51219 Rule: Default deny
Apr/07/2007 23:12:13
Drop TCP packet from WAN src:195.226.235.229:1950 dst:<IP removed>:51219 Rule: Default deny
Apr/07/2007 23:12:11
Drop TCP packet from WAN src:88.72.235.76:12845 dst:<IP removed>:51219 Rule: Default deny
Apr/07/2007 23:12:10
Drop UDP packet from WAN src:81.15.156.35:31560 dst:<IP removed>:61548 Rule: Default deny
Apr/07/2007 23:12:10
Drop TCP packet from WAN src:195.226.235.229:1950 dst:<IP removed>:51219 Rule: Default deny
Apr/07/2007 23:12:08
Drop TCP packet from WAN src:142.68.185.164:3815 dst:<IP removed>:51219 Rule: Default deny
Apr/07/2007 23:12:05
Drop TCP packet from WAN src:88.72.235.76:12845 dst:<IP removed>:51219 Rule: Default deny
Apr/07/2007 23:12:05
Drop TCP packet from WAN src:142.68.185.164:3815 dst:<IP removed>:51219 Rule: Default deny
Apr/07/2007 23:12:04
Drop TCP packet from WAN src:74.100.194.213:16881 dst:<IP removed>:61749 Rule: Default deny
Apr/07/2007 23:12:04
Drop TCP packet from WAN src:212.96.178.60:63043 dst:<IP removed>:51219 Rule: Default deny
Apr/07/2007 23:12:03
Drop TCP packet from WAN src:88.72.235.76:12845 dst:<IP removed>:51219 Rule: Default deny
Apr/07/2007 23:11:58
Drop TCP packet from WAN src:207.46.216.62:80 dst:<IP removed>:60019 Rule: Default deny
Apr/07/2007 23:11:55
Drop TCP packet from WAN src:212.96.178.60:63043 dst:<IP removed>:51219 Rule: Default deny
Apr/07/2007 23:11:55
Drop TCP packet from WAN src:82.207.0.125:1051 dst:<IP removed>:51219 Rule: Default deny
Mod edit (Gavin): IPs removed for your own security.
I am sure that this is the problem, and I am sure it is indeed a DDoS attack as many of the IPs involved appear to be common household connections (hostnames point to Comcast, AOL, Sky etc.).
I would like to know what action I am able to take from this point onwards, taking into consideration a few facts:
I used to run a home server, these issues have made it inaccessible.
These issues are almost halving my connection speeds.
These issues may be shortening the life of my modem or router hardware.
Is there anything I can do to prevent this from happening again, and am I entitled to anything because of these attacks?