someone trying to hack?

**sharmapu** · 04-07-09, 10:58 AM

Today I saw the log from my wireless buffalo router,

I am not sure if some one trying to hack into my system.

see the log file:

--------------------------------------------------

2006/01/02 12

15 WIRELESS wl0: 11g : Associated User - 00:1d:e0:07:55:8d

2006/01/02 11:30:04 ATTACK ALERT [ SYN_FLOOD : ]: 5 attempts from 99.147.120.161.Total=5.

2006/01/02 11:00:04 WIRELESS wl0: Channel Select: 11

2006/01/02 10:45:04 WIRELESS wl0: Channel Select: 2

2006/01/02 09:43:01 ATTACK ALERT [ SYN_FLOOD : ]: 5 attempts from 118.100.245.162.Total=5.

2006/01/02 08:28:52 ATTACK ALERT [ NMAP_PORT_SCAN : ]: 5 attempts from 92.114.51.134.Total=10.

2006/01/02 08:24:14 ATTACK ALERT [ SYN_FLOOD : ]: 5 attempts from 92.114.51.134.Total=5.

2006/01/02 07:59:28 ATTACK ALERT [ SYN_FLOOD : ]: 5 attempts from 86.106.40.120.Total=5.

2006/01/02 07:43:08 ATTACK ALERT [ NMAP_PORT_SCAN : ]: 5 attempts from 123.236.221.101.Total=5.

2006/01/02 07:38:59 ATTACK ALERT [ NMAP_PORT_SCAN : ]: 5 attempts from 91.73.110.40.Total=5.

2006/01/02 07:30:04 WIRELESS wl0: Channel Select: 11

2006/01/02 07:19:24 ATTACK ALERT [ SYN_FLOOD : ]: 5 attempts from 71.192.2.237.Total=5.

2006/01/02 07:00:04 WIRELESS wl0: Channel Select: 2

2006/01/02 06:50:57 ATTACK ALERT [ SYN_FLOOD : ]: 5 attempts from 189.12.184.198.Total=10.

2006/01/02 06:15:04 WIRELESS wl0: Channel Select: 11

2006/01/02 06:03:36 ATTACK ALERT [ SYN_FLOOD : ]: 5 attempts from 113.22.159.48.Total=5.

2006/01/02 05:52:53 ATTACK ALERT [ NMAP_PORT_SCAN : ]: 5 attempts from 189.12.184.198.Total=5.

2006/01/02 05:45:04 WIRELESS wl0: Channel Select: 2

2006/01/02 05:15:03 ATTACK ALERT [ SYN_FLOOD : ]: 5 attempts from 114.30.103.91.Total=5.

2006/01/02 05:00:04 WIRELESS wl0: Channel Select: 11

2006/01/02 04:55:48 ATTACK ALERT [ SYN_FLOOD : ]: 5 attempts from 84.229.68.224.Total=5.

2006/01/02 04:35:43 ATTACK ALERT [ SYN_FLOOD : ]: 5 attempts from 190.95.75.245.Total=5.

2006/01/02 04:30:04 WIRELESS wl0: Channel Select: 2

2006/01/02 04:15:04 WIRELESS wl0: Channel Select: 11

2006/01/02 04:06:33 ATTACK ALERT [ SYN_FLOOD : ]: 5 attempts from 188.24.21.56.Total=5.

2006/01/02 04:05:57 ATTACK ALERT [ NMAP_PORT_SCAN : ]: 5 attempts from 84.203.47.198.Total=5.

2006/01/02 04:02:59 ATTACK ALERT [ SYN_FLOOD : ]: 5 attempts from 116.14.114.55.Total=5.

2006/01/02 03:57:14 ATTACK ALERT [ SYN_FLOOD : ]: 5 attempts from 98.199.206.196.Total=5.

2006/01/02 03:56:54 ATTACK ALERT [ SYN_FLOOD : ]: 5 attempts from 79.101.153.148.Total=5.

2006/01/02 03:54:05 ATTACK ALERT [ SYN_FLOOD : ]: 5 attempts from 118.68.200.44.Total=5.

2006/01/02 03:45:04 WIRELESS wl0: Channel Select: 2

2006/01/02 03:41:29 ATTACK ALERT [ SMURF_ATTACK : ]: 5 attempts from 79.184.111.254.Total=5.

2006/01/02 03:40:37 ATTACK ALERT [ SYN_FLOOD : ]: 5 attempts from 124.182.97.71.Total=5.

2006/01/02 03:30:04 WIRELESS wl0: Channel Select: 5

2006/01/02 03:27:52 ATTACK ALERT [ NMAP_PORT_SCAN : ]: 5 attempts from 186.80.101.59.Total=5.

2006/01/02 03:26:58 ATTACK ALERT [ SMURF_ATTACK : ]: 5 attempts from 77.49.28.42.Total=5.

2006/01/02 03:24:16 ATTACK ALERT [ SYN_FLOOD : ]: 5 attempts from 188.25.25.214.Total=5.

2006/01/02 03:20:19 ATTACK ALERT [ SYN_FLOOD : ]: 5 attempts from 201.130.157.109.Total=5.

2006/01/02 03:17:08 ATTACK ALERT [ NMAP_PORT_SCAN : ]: 5 attempts from 124.106.220.23.Total=10.

2006/01/02 03:16:09 ATTACK ALERT [ SYN_FLOOD : ]: 5 attempts from 90.191.173.236.Total=5.

2006/01/02 03:15:04 WIRELESS wl0: Channel Select: 2

2006/01/02 03:07:20 ATTACK ALERT [ SYN_FLOOD : ]: 5 attempts from 77.54.229.46.Total=5.

2006/01/02 03:00:26 ATTACK ALERT [ SYN_FLOOD : ]: 5 attempts from 93.87.219.222.Total=5.

2006/01/02 03:00:04 WIRELESS wl0: Channel Select: 11

2006/01/02 02:47:53 ATTACK ALERT [ SYN_FLOOD : ]: 5 attempts from 218.186.32.229.Total=5.

2006/01/02 02:43:00 ATTACK ALERT [ SYN_FLOOD : ]: 5 attempts from 87.205.248.161.Total=5.

2006/01/02 02:40:28 ATTACK ALERT [ NMAP_PORT_SCAN : ]: 5 attempts from 190.163.1.163.Total=5.

2006/01/02 02:38:29 ATTACK ALERT [ SYN_FLOOD : ]: 5 attempts from 82.169.86.252.Total=5.

2006/01/02 02:35:31 ATTACK ALERT [ SYN_FLOOD : ]: 5 attempts from 212.179.84.2.Total=5.

2006/01/02 02:35:07 ATTACK ALERT [ SYN_FLOOD : ]: 5 attempts from 90.220.147.96.Total=5.

2006/01/02 02:31:01 ATTACK ALERT [ SYN_FLOOD : ]: 5 attempts from 80.217.137.254.Total=5.

2006/01/02 02:30:11 ATTACK ALERT [ SYN_FLOOD : ]: 5 attempts from 122.54.24.36.Total=5.

2006/01/02 02:18:02 ATTACK ALERT [ SYN_FLOOD : ]: 5 attempts from 203.219.247.153.Total=10.

2006/01/02 02:12:43 ATTACK ALERT [ SYN_FLOOD : ]: 5 attempts from 124.187.66.205.Total=5.

2006/01/02 02:07:31 ATTACK ALERT [ SMURF_ATTACK : ]: 5 attempts from 190.20.85.231.Total=5.

2006/01/02 02:07:27 ATTACK ALERT [ SYN_FLOOD : ]: 5 attempts from 122.167.27.221.Total=5.

2006/01/02 02:04:10 ATTACK ALERT [ SYN_FLOOD : ]: 5 attempts from 142.162.109.66.Total=5.

2006/01/02 02:02:19 ATTACK ALERT [ SYN_FLOOD : ]: 5 attempts from 99.234.75.202.Total=5.

2006/01/02 01:50:28 ATTACK ALERT [ SYN_FLOOD : ]: 5 attempts from 87.229.3.189.Total=5.

2006/01/02 01:45:04 WIRELESS wl0: Channel Select: 2

2006/01/02 01:43:57 ATTACK ALERT [ SYN_FLOOD : ]: 5 attempts from 122.100.180.129.Total=5.

2006/01/02 01:43:01 ATTACK ALERT [ SYN_FLOOD : ]: 5 attempts from 220.253.105.101.Total=5.

2006/01/02 01:39:35 ATTACK ALERT [ SYN_FLOOD : ]: 5 attempts from 219.70.216.196.Total=5.

2006/01/02 01:39:07 ATTACK ALERT [ SYN_FLOOD : ]: 5 attempts from 151.47.58.175.Total=5.

2006/01/02 01:37:29 ATTACK ALERT [ SYN_FLOOD : ]: 5 attempts from 82.240.133.49.Total=5.

2006/01/02 01:37:00 ATTACK ALERT [ NMAP_PORT_SCAN : ]: 5 attempts from 84.203.48.98.Total=5.

2006/01/02 01:36:50 ATTACK ALERT [ SYN_FLOOD : ]: 5 attempts from 124.149.32.193.Total=5.

2006/01/02 01:33:08 ATTACK ALERT [ SYN_FLOOD : ]: 5 attempts from 122.161.157.72.Total=5.

2006/01/02 01:30:21 ATTACK ALERT [ SYN_FLOOD : ]: 5 attempts from 110.8.64.140.Total=5.

2006/01/02 01:30:04 WIRELESS wl0: Channel Select: 5

2006/01/02 01:13:16 ATTACK ALERT [ SYN_FLOOD : ]: 5 attempts from 123.16.242.248.Total=5.

2006/01/02 01:12:17 ATTACK ALERT [ SYN_FLOOD : ]: 5 attempts from 84.108.225.36.Total=5.

2006/01/02 01:09:38 ATTACK ALERT [ SYN_FLOOD : ]: 5 attempts from 116.71.21.190.Total=5.

2006/01/02 01:07:38 ATTACK ALERT [ SYN_FLOOD : ]: 5 attempts from 189.7.44.235.Total=5.

2006/01/02 01:00:31 ATTACK ALERT [ NMAP_PORT_SCAN : ]: 5 attempts from 212.200.206.20.Total=5.

2006/01/02 00:47:06 ATTACK ALERT [ SYN_FLOOD : ]: 5 attempts from 58.182.145.197.Total=5.

2006/01/02 00:46:04 ATTACK ALERT [ SYN_FLOOD : ]: 5 attempts from 90.38.19.210.Total=5.

2006/01/02 00:45:09 ATTACK ALERT [ SYN_FLOOD : ]: 5 attempts from 217.75.90.147.Total=5.

2006/01/02 00:33:34 ATTACK ALERT [ SYN_FLOOD : ]: 5 attempts from 122.53.205.117.Total=5.

2006/01/02 00:29:12 ATTACK ALERT [ SYN_FLOOD : ]: 5 attempts from 195.240.149.199.Total=5.

2006/01/02 00:25:39 ATTACK ALERT [ SYN_FLOOD : ]: 5 attempts from 121.6.90.205.Total=5.

2006/01/02 00

56 ATTACK ALERT [ SYN_FLOOD : ]: 5 attempts from 119.73.33.119.Total=5.

2006/01/02 00

44 ATTACK ALERT [ NMAP_PORT_SCAN : ]: 5 attempts from 92.114.51.129.Total=10.

2006/01/02 00:22:07 ATTACK ALERT [ SYN_FLOOD : ]: 5 attempts from 116.71.16.126.Total=5.

2006/01/02 00:21:53 ATTACK ALERT [ SYN_FLOOD : ]: 5 attempts from 124.106.220.23.Total=5.

2006/01/02 00:10:28 ATTACK ALERT [ SYN_FLOOD : ]: 5 attempts from 116.71.26.176.Total=5.

2006/01/02 00:09:18 ATTACK ALERT [ SYN_FLOOD : ]: 5 attempts from 114.206.74.86.Total=5.

2006/01/02 00:00:07 ATTACK ALERT [ SYN_FLOOD : ]: 5 attempts from 94.194.19.133.Total=5.

------------------------------------------

should i be worried ...any idea whats going on..

TIA

**Aphro_EVO** · 04-07-09, 11:19 AM

This is nothing suspicious, it just indicates you are downloading a torrent. Syn attack is symbolic of failure of TCP the handshake process - ie - when the node receives multiple SYN packet sans sending out ACK packet.

Yours could be either of 2 cases -

1- Torrent being downloaded via DHT, thus so many broken connections

2- The torrent download has just been switched on, thus broken connections.

Its just peers trying to connect to you.