View Full Version : Attacked by Smurfs!!!


ShinyPurple
01-07-2007, 21:02
Our wireless security log shows the following:

**Smurf** 219.98.187.255, 31068->> 89.241.63.228, 1026 (from ATM1 Inbound)

None of our computers were connected or even turned on but the Wii has a permanent wifi connection.:suspect:

Can anybody confirm that the attack was external or do you think my Wii has caught something nasty?

medusa
01-07-2007, 21:14
Was one of your games made by a company called So-Net Entertainment Corporation in Japan, by any chance?

The first IP you listed belongs to them, so it could be your game trying to update something.

The second comes out as Opal Telecom here in the UK- does that ring any bells?

punk
01-07-2007, 21:18
It's external and nothing to worry about, SMURF attacks are DoS attacks. The attack isn't against you, it's against this IP: 219.98.187.255

Someone is running a script to request pings from networks directed at the target, they will be trying sequential ip addresses of home networks/isps. Your router/firewall caught it anyway, just treat it like random internet traffic. You get these things all the time.

ShinyPurple
01-07-2007, 21:45
:confused:

Opal Telecom was bought by Carphone Warehouse and we've got TalkTalk broadband so that could make sense.

But So-Net is Sony's Japanese ISP and I can't figure out any connection to...well anything!

Whatever caused it didn't cause us a problem because no-one was using wi-fi when it happened but I want to make sure it is harmless or stop it before it causes a problem.

medusa
01-07-2007, 21:47
Whether you can explain it or not, your firewall stopped it (we know this because it gave you the message) so don't worry about it.

ShinyPurple
01-07-2007, 21:51
It's external and nothing to worry about, SMURF attacks are DoS attacks. The attack isn't against you, it's against this IP: 219.98.187.255

Someone is running a script to request pings from networks directed at the target, they will be trying sequential ip addresses of home networks/isps. Your router/firewall caught it anyway, just treat it like random internet traffic. You get these things all the time.

:thumbsup:

Thanks Punk!

I'm a bit paranoid because someone got my credit card details over the internet a couple of months back. Fortunately, my bank stopped it before any damage was done but I now double and triple check everything :suspect:

ShinyPurple
01-07-2007, 21:53
Whether you can explain it or not, your firewall stopped it (we know this because it gave you the message) so don't worry about it.

:thumbsup:

Thanks Medusa!

You guys replied faster than I can type!