Spoof?

T

trail_boss2

n00b
Joined
Feb 19, 2004
Messages
25
I was just going through all of the settings and menus on my router just to see what everything was and went to the log. In my log it said some things about a spoof attack. What is this and should I be worried? I have the firewall in the router turned on and I have the internet connection firewall turned on as well. Here is a copy of the log:
EDIT: and btw, if I run ipconfig it says that the mac address listed below is mine.

Apr/10/2004 00:26:11 DHCP lease IP 192.168.0.100 to upstairs 00-03-6D-1C-E7-2E
Apr/10/2004 00:26:11 Target IP(255.255.255.255), Target Port(67) Packet Dropped
Apr/10/2004 00:26:11 Spoof IP(0.0.0.0), Spoof Port(68)
Apr/10/2004 00:26:11 Spoof Attack fromd MAC(00-03-6D-1C-E7-2E) Detect,
Apr/10/2004 00:09:02 DHCP Request success 68.235.47.25
Apr/10/2004 00:09:02 DHCP Request 68.235.47.25
Apr/09/2004 22:41:19 DHCP lease IP 192.168.0.100 to upstairs 00-03-6D-1C-E7-2E
Apr/09/2004 22:41:19 Target IP(255.255.255.255), Target Port(67) Packet Dropped
Apr/09/2004 22:41:19 Spoof IP(0.0.0.0), Spoof Port(68)
Apr/09/2004 22:41:19 Spoof Attack fromd MAC(00-03-6D-1C-E7-2E) Detect,
 
Apr/10/2004 00:26:11 Target IP(255.255.255.255), Target Port(67) Packet Dropped


looks like you're fine.. might have been just someone scanning
 
Port 67 and 68 are used for BootP and DHCP so something is attempting to obtain a lease from your DHCP server and it appears to be dropping that attempt.
 
see if there is a computer on your network with a NIC with this MAC address

(00-03-6D-1C-E7-2E)
 
Originally posted by ozzyblood
see if there is a computer on your network with a NIC with this MAC address

(00-03-6D-1C-E7-2E)
Click to expand...
Yeah, that is my pc with that mac address. There is only 2 pcs on the network, mine running XP home and the downstairs which my little sister mainly uses running 98SE.
 
Ok, I got this in my log today:

Apr/12/2004 06:41:25 Ping of Death Detect 80.184.144.248:6881 68.235.47.25:63667 Packet Dropped

that is my IP address, and I also saw in my log that it said DHCP Request:Success a bunch of times this morning and the times were while I was asleep and no one else was at my house.

Apr/12/2004 12:10:40 DHCP Request success 68.235.47.25
Apr/12/2004 12:10:39 DHCP Request 68.235.47.25
Apr/12/2004 10:40:39 DHCP Request success 68.235.47.25
Apr/12/2004 10:40:38 DHCP Request 68.235.47.25
Apr/12/2004 09:10:38 DHCP Request success 68.235.47.25
Apr/12/2004 09:10:37 DHCP Request 68.235.47.25
Apr/12/2004 08:40:49 DHCP lease IP 192.168.0.100 to upstairs 00-03-6D-1C-E7-2E
Apr/12/2004 07:40:37 DHCP Request success 68.235.47.25
Apr/12/2004 07:40:36 DHCP Request 68.235.47.25
 
You must log in or register to reply here.
Back
Top