Forum Help
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
PM3
Aspiring Contributor

on ‎18-05-2021 12h49

4,803 Views
Message 11 of 22

Re: Random Mac addresses on wifi, am I being hacked?

Go to solution

Good morning guys,

Is this an attack. The first part was at 9am this morning and second part was at 7am this morning. 

 

9:00:002  DoS(UDP Loopback): IN=ppp1 OUT= MAC= src=184.105.139.113 DST=86.172.255.252 LEN=29 TOS=0x00 PREC=0x00 TTL=52 ID=13870 DF PROTO=UDP SPT=35571 DPT=19 LEN=9 MARK=0x8000000

DoS(Port Scanning): IN=ppp1 OUT= MAC= src=89.248.165.97 DST=86.172.255.252 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=17658 PROTO=TCP SPT=54679 DPT=2714 WINDOW=1024 RES=0x00 SYN URGP=0 MARK=0x8000000
 

 

07:00:02, 18 May.
DoS(Port Scanning): IN=ppp1 OUT= MAC= src=89.248.165.97 DST=86.172.255.252 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=55354 PROTO=TCP SPT=54679 DPT=2796 WINDOW=1024 RES=0x00 SYN URGP=0 MARK=0x8000000
 

 

07:00:02, 18 May.
DoS(Port Scanning): IN=ppp1 OUT= MAC= src=89.248.165.97 DST=86.172.255.252 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=41341 PROTO=TCP SPT=54679 DPT=2503 WINDOW=1024 RES=0x00 SYN URGP=0 MARK=0x8000000
 

 

07:00:02, 18 May.
DoS(Port Scanning): IN=ppp1 OUT= MAC= src=89.248.165.97 DST=86.172.255.252 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=46140 PROTO=TCP SPT=54679 DPT=2794 WINDOW=1024 RES=0x00 SYN URGP=0 MARK=0x8000000
 

 

07:00:02, 18 May.
DoS(Port Scanning): IN=ppp1 OUT= MAC= src=89.248.165.97 DST=86.172.255.252 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=64292 PROTO=TCP SPT=54679 DPT=2933 WINDOW=1024 RES=0x00 SYN URGP=0 MARK=0x8000000
 

 

07:00:02, 18 May.
DoS(Port Scanning): IN=ppp1 OUT= MAC= src=89.248.165.97 DST=86.172.255.252 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=54061 PROTO=TCP SPT=54679 DPT=2850 WINDOW=1024 RES=0x00 SYN URGP=0 MARK=0x8000000
 

 

07:00:02, 18 May.
DoS(Port Scanning): IN=ppp1 OUT= MAC= src=89.248.165.97 DST=86.172.255.252 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=38464 PROTO=TCP SPT=54679 DPT=2983 WINDOW=1024 RES=0x00 SYN URGP=0 MARK=0x8000000
 

 

07:00:02, 18 May.
DoS(Port Scanning): IN=ppp1 OUT= MAC= src=89.248.165.97 DST=86.172.255.252 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=61433 PROTO=TCP SPT=54679 DPT=2811 WINDOW=1024 RES=0x00 SYN URGP=0 MARK=0x8000000
 

 

 

 

 

 
 

 

0 Ratings
PM3
Aspiring Contributor

on ‎18-05-2021 14h20

4,816 Views
Message 12 of 22

Is this anything to worry about?

Go to solution

Good afternoon guys,

Is this an attack. The first part was at 9am this morning and second part was at 7am this morning. 

 

9:00:002  DoS(UDP Loopback): IN=ppp1 OUT= MAC= src=184.105.139.113 DST=86.172.255.252 LEN=29 TOS=0x00 PREC=0x00 TTL=52 ID=13870 DF PROTO=UDP SPT=35571 DPT=19 LEN=9 MARK=0x8000000

DoS(Port Scanning): IN=ppp1 OUT= MAC= src=89.248.165.97 DST=86.172.255.252 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=17658 PROTO=TCP SPT=54679 DPT=2714 WINDOW=1024 RES=0x00 SYN URGP=0 MARK=0x8000000
 

 

07:00:02, 18 May.
DoS(Port Scanning): IN=ppp1 OUT= MAC= src=89.248.165.97 DST=86.172.255.252 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=55354 PROTO=TCP SPT=54679 DPT=2796 WINDOW=1024 RES=0x00 SYN URGP=0 MARK=0x8000000
 

 

07:00:02, 18 May.
DoS(Port Scanning): IN=ppp1 OUT= MAC= src=89.248.165.97 DST=86.172.255.252 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=41341 PROTO=TCP SPT=54679 DPT=2503 WINDOW=1024 RES=0x00 SYN URGP=0 MARK=0x8000000
 

 

07:00:02, 18 May.
DoS(Port Scanning): IN=ppp1 OUT= MAC= src=89.248.165.97 DST=86.172.255.252 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=46140 PROTO=TCP SPT=54679 DPT=2794 WINDOW=1024 RES=0x00 SYN URGP=0 MARK=0x8000000
 

 

07:00:02, 18 May.
DoS(Port Scanning): IN=ppp1 OUT= MAC= src=89.248.165.97 DST=86.172.255.252 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=64292 PROTO=TCP SPT=54679 DPT=2933 WINDOW=1024 RES=0x00 SYN URGP=0 MARK=0x8000000
 

 

07:00:02, 18 May.
DoS(Port Scanning): IN=ppp1 OUT= MAC= src=89.248.165.97 DST=86.172.255.252 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=54061 PROTO=TCP SPT=54679 DPT=2850 WINDOW=1024 RES=0x00 SYN URGP=0 MARK=0x8000000
 

 

07:00:02, 18 May.
DoS(Port Scanning): IN=ppp1 OUT= MAC= src=89.248.165.97 DST=86.172.255.252 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=38464 PROTO=TCP SPT=54679 DPT=2983 WINDOW=1024 RES=0x00 SYN URGP=0 MARK=0x8000000
 

 

07:00:02, 18 May.
DoS(Port Scanning): IN=ppp1 OUT= MAC= src=89.248.165.97 DST=86.172.255.252 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=61433 PROTO=TCP SPT=54679 DPT=2811 WINDOW=1024 RES=0x00 SYN URGP=0 MARK=0x8000000
0 Ratings
licquorice
Distinguished Sage
Distinguished Sage

‎18-05-2021 15h12 - edited ‎18-05-2021 16h08

4,792 Views
Message 13 of 22

Re: Random Mac addresses on wifi, am I being hacked?

Go to solution

Just your firewall doing its job.

 

Please don't post the same question in more than one place, it just causes total confusion for replies. I have merged your posts.

PM3
Aspiring Contributor

on ‎18-05-2021 18h13

4,768 Views
Message 14 of 22

Re: Random Mac addresses on wifi, am I being hacked?

Go to solution

Thank you for your reply. I did another post as I didn't think no one would read the old thread.

 

0 Ratings
PARKERTEK
Contributor

on ‎20-05-2021 10h58

4,742 Views
Message 15 of 22

Re: Is this anything to worry about?

Go to solution
Yes this is definitely just your firewall doing it’s bit.
I’d try not to post your public IP address online though, that MIGHT lead to someone attempting hack, just a tip 😁
0 Ratings
Les-Gibson
Guru

on ‎20-05-2021 11h55

4,732 Views
Message 16 of 22

Re: Is this anything to worry about?

Go to solution

The IP address ending 252 is yours, the others both lead to sites which claim to be legitimate sites for gathering information on the internet.

One claims to be working with law enforcement agencies for improving security on the internet, the other just states that it gathers information such as open ports but doesn't say why

PM3
Aspiring Contributor

on ‎20-05-2021 16h11

4,714 Views
Message 17 of 22

Re: Is this anything to worry about?

Go to solution

Thanks guys. This has just happened again and theres like two pages of it in my log plus this -

2.4G client Mac:  Deauthentications (Reason:Deauthenticated because sending station is leaving (or has left) IBSS or ESS)

Which is my roku box and there's also 2 pages of this.

0 Ratings
licquorice
Distinguished Sage
Distinguished Sage

‎20-05-2021 16h20 - edited ‎20-05-2021 16h21

4,709 Views
Message 18 of 22

Re: Is this anything to worry about?

Go to solution

Virtually every broadband user will have the same thing in their logs, it is a fact of life when connected to the internet, That is why you have a firewall.

The other, is just mobile device disconnecting.

0 Ratings
PM3
Aspiring Contributor

on ‎20-05-2021 19h20

4,688 Views
Message 19 of 22

Re: Is this anything to worry about?

Go to solution

Thank you. So I guess there is nothing to worry about.

What things would you look for if there was a hack?

The whole police improving security thing sounded a little strange.

0 Ratings
licquorice
Distinguished Sage
Distinguished Sage

on ‎20-05-2021 21h03

4,678 Views
Message 20 of 22

Re: Is this anything to worry about?

Go to solution

Its extremely unlikely that you will be 'hacked' by a brute force attack on your home router. Any sort of hacking problems  you encounter will either be due to a hack of a commercial site exposing your details or by clicking on dodgy links in phishing emails.

 

0 Ratings