Newsgroup: it.comp.sicurezza.varie
Titolo: attacco DOS

Controllando i log del mio router ho trovato un flood di questo tipo che 
mi sembra preoccupante, c'ï¿œ modo di bloccarlo?
ciao a tutti
Sun, 2010-10-17 22:35:04 - TCP Packet - Source:190.233.95.221,51623 
Destination:mio ip,46832 - [DOS]
Sun, 2010-10-17 22:35:04 - TCP Packet - Source:190.234.92.238,58785 
Destination:mio ip,6382 - [DOS]
Sun, 2010-10-17 22:35:04 - TCP Packet - Source:190.232.68.121,23097 
Destination:mio ip,6490 - [DOS]
Sun, 2010-10-17 22:35:04 - TCP Packet - Source:190.235.26.140,26991 
Destination:mio ip,34317 - [DOS]
Sun, 2010-10-17 22:35:04 - TCP Packet - Source:190.235.40.48,62933 
Destination:mio ip,3173 - [DOS]
Sun, 2010-10-17 22:35:04 - TCP Packet - Source:190.40.133.158,26501 
Destination:mio ip,40164 - [DOS]
Sun, 2010-10-17 22:35:05 - TCP Packet - Source:190.232.10.237,7168 
Destination:mio ip,64201 - [DOS]
Sun, 2010-10-17 22:35:05 - TCP Packet - Source:190.235.40.146,54604 
Destination:mio ip,43669 - [DOS]
Sun, 2010-10-17 22:35:05 - TCP Packet - Source:190.232.10.130,23017 
Destination:mio ip,26165 - [DOS]
Sun, 2010-10-17 22:35:05 - TCP Packet - Source:190.233.18.185,10113 
Destination:mio ip,64184 - [DOS]
Sun, 2010-10-17 22:35:05 - TCP Packet - Source:190.234.92.201,16007 
Destination:mio ip,22866 - [DOS]
Sun, 2010-10-17 22:35:05 - TCP Packet - Source:190.235.38.77,34199 
Destination:mio ip,57622 - [DOS]
Sun, 2010-10-17 22:35:05 - TCP Packet - Source:175.107.17.143 
Destination:mio ip - [PORT SCAN]
Sun, 2010-10-17 22:35:07 - TCP Packet - Source:190.40.48.172,42497 
Destination:mio ip,50419 - [DOS]
Sun, 2010-10-17 22:35:07 - TCP Packet - Source:175.107.17.143 
Destination:mio ip - [PORT SCAN]
Sun, 2010-10-17 22:35:07 - TCP Packet - Source:190.234.3.65,32087 
Destination:mio ip,4913 - [DOS]
Sun, 2010-10-17 22:35:07 - TCP Packet - Source:190.234.24.145,56805 
Destination:mio ip,19627 - [DOS]
Sun, 2010-10-17 22:35:07 - TCP Packet - Source:175.107.17.143 
Destination:mio ip - [PORT SCAN]
Sun, 2010-10-17 22:35:08 - TCP Packet - Source:190.234.203.68,30114 
Destination:mio ip,19011 - [DOS]
Sun, 2010-10-17 22:35:08 - TCP Packet - Source:190.235.82.173,17915 
Destination:mio ip,339 - [DOS]
Sun, 2010-10-17 22:35:08 - TCP Packet - Source:190.234.137.121,12760 
Destination:mio ip,2975 - [DOS]
Sun, 2010-10-17 22:35:08 - TCP Packet - Source:175.107.17.143,50336 
Destination:mio ip,59321 - [DOS]
Sun, 2010-10-17 22:35:08 - TCP Packet - Source:190.234.69.164,25484 
Destination:mio ip,27676 - [DOS]
Sun, 2010-10-17 22:35:08 - TCP Packet - Source:190.234.157.88,46851 
Destination:mio ip,55537 - [DOS]
Sun, 2010-10-17 22:35:08 - TCP Packet - Source:190.234.24.109,64322 
Destination:mio ip,52607 - [DOS]
Sun, 2010-10-17 22:35:08 - TCP Packet - Source:175.107.17.143,477 
Destination:mio ip,63728 - [DOS]
Sun, 2010-10-17 22:35:09 - TCP Packet - Source:175.107.17.143,49599 
Destination:mio ip,4679 - [DOS]
Sun, 2010-10-17 22:35:09 - TCP Packet - Source:190.235.73.219,53836 
Destination:mio ip,45790 - [DOS]
Sun, 2010-10-17 22:35:09 - TCP Packet - Source:190.232.10.151,61031 
Destination:mio ip,59400 - [DOS]
Sun, 2010-10-17 22:35:10 - TCP Packet - Source:190.232.161.103 
Destination:mio ip - [PORT SCAN]
Sun, 2010-10-17 22:35:10 - TCP Packet - Source:190.234.18.237,16484 
Destination:mio ip,43410 - [DOS]
Sun, 2010-10-17 22:35:10 - TCP Packet - Source:175.107.17.143 
Destination:mio ip - [PORT SCAN]
Sun, 2010-10-17 22:35:11 - TCP Packet - Source:190.232.161.103,35698 
Destination:mio ip,53809 - [DOS]
Sun, 2010-10-17 22:35:11 - TCP Packet - Source:190.235.114.182,58340 
Destination:mio ip,40240 - [DOS]
Sun, 2010-10-17 22:35:11 - TCP Packet - Source:175.107.17.143 
Destination:mio ip - [PORT SCAN]
Sun, 2010-10-17 22:35:11 - TCP Packet - Source:190.234.3.212,51259 
Destination:mio ip,12403 - [DOS]
Sun, 2010-10-17 22:35:11 - TCP Packet - Source:190.235.42.37,64709 
Destination:mio ip,19752 - [DOS]
Sun, 2010-10-17 22:35:11 - TCP Packet - Source:175.107.17.143 
Destination:mio ip - [PORT SCAN]
Sun, 2010-10-17 22:35:12 - TCP Packet - Source:202.83.164.101,63629 
Destination:mio ip,64454 - [DOS]
Sun, 2010-10-17 22:35:12 - TCP Packet - Source:175.107.17.143 
Destination:mio ip - [PORT SCAN]
Sun, 2010-10-17 22:35:12 - TCP Packet - Source:190.232.161.103,13739 
Destination:mio ip,13571 - [DOS]
Sun, 2010-10-17 22:35:13 - TCP Packet - Source:190.233.36.104,27684 
Destination:mio ip,15052 - [DOS]
Sun, 2010-10-17 22:35:14 - TCP Packet - Source:190.234.18.192,49419 
Destination:mio ip,24994 - [DOS]
Sun, 2010-10-17 22:35:14 - TCP Packet - Source:175.107.17.143 
Destination:mio ip - [PORT SCAN]
Sun, 2010-10-17 22:35:14 - TCP Packet - Source:190.40.59.137,17918 
Destination:mio ip,25282 - [DOS]
Sun, 2010-10-17 22:35:14 - TCP Packet - Source:190.43.78.17,43285 
Destination:mio ip,27640 - [DOS]
Sun, 2010-10-17 22:35:14 - TCP Packet - Source:190.234.9.152,24055 
Destination:mio ip,42152 - [DOS]
Sun, 2010-10-17 22:35:14 - TCP Packet - Source:190.235.89.229,7710 
Destination:mio ip,29720 - [DOS]
Sun, 2010-10-17 22:35:16 - TCP Packet - Source:175.107.17.143 
Destination:mio ip - [PORT SCAN]
Sun, 2010-10-17 22:35:16 - TCP Packet - Source:190.232.68.222,35734 
Destination:mio ip,60650 - [DOS]
Sun, 2010-10-17 22:35:16 - TCP Packet - Source:190.234.5.184,46551 
Destination:mio ip,22068 - [DOS]
Sun, 2010-10-17 22:35:16 - TCP Packet - Source:190.234.11.252,50985 
Destination:mio ip,54587 - [DOS]
Sun, 2010-10-17 22:35:16 - TCP Packet - Source:190.235.43.38,11667 
Destination:mio ip,24661 - [DOS]
Sun, 2010-10-17 22:35:16 - TCP Packet - Source:190.234.18.171,18760 
Destination:mio ip,8550 - [DOS]
Sun, 2010-10-17 22:35:16 - TCP Packet - Source:175.107.17.143 
Destination:mio ip - [PORT SCAN]
Sun, 2010-10-17 22:35:16 - TCP Packet - Source:190.235.3.54,45948 
Destination:mio ip,27953 - [DOS]
Sun, 2010-10-17 22:35:16 - TCP Packet - Source:190.235.114.115,14117 
Destination:mio ip,55532 - [DOS]
Sun, 2010-10-17 22:35:16 - TCP Packet - Source:190.232.153.85,31652 
Destination:mio ip,15303 - [DOS]
Sun, 2010-10-17 22:35:16 - TCP Packet - Source:190.235.73.85,31975 
Destination:mio ip,28117 - [DOS]
Sun, 2010-10-17 22:35:16 - TCP Packet - Source:190.234.92.63,19541 
Destination:mio ip,17245 - [DOS]
Sun, 2010-10-17 22:35:16 - TCP Packet - Source:190.235.8.76,39738 
Destination:mio ip,25154 - [DOS]
Sun, 2010-10-17 22:35:16 - TCP Packet - Source:190.234.3.230,55375 
Destination:mio ip,15347 - [DOS]
Sun, 2010-10-17 22:35:16 - TCP Packet - Source:190.234.203.60,17834 
Destination:mio ip,27051 - [DOS]
Sun, 2010-10-17 22:35:16 - TCP Packet - Source:190.235.42.37,26389 
Destination:mio ip,39322 - [DOS]
Sun, 2010-10-17 22:35:16 - TCP Packet - Source:190.234.11.70,35031 
Destination:mio ip,45502 - [DOS]
Sun, 2010-10-17 22:35:16 - TCP Packet - Source:190.233.18.78,41292 
Destination:mio ip,45431 - [DOS]
Sun, 2010-10-17 22:35:17 - TCP Packet - Source:190.234.186.167,51960 
Destination:mio ip,34742 - [DOS]
Sun, 2010-10-17 22:35:17 - TCP Packet - Source:175.107.17.143,3363 
Destination:mio ip,28820 - [DOS]
Sun, 2010-10-17 22:35:17 - TCP Packet - Source:190.235.56.222,19377 
Destination:mio ip,59072 - [DOS]
Sun, 2010-10-17 22:35:17 - TCP Packet - Source:190.235.11.238,121 
Destination:mio ip,35334 - [DOS]
Sun, 2010-10-17 22:35:17 - TCP Packet - Source:190.232.168.28,2463 
Destination:mio ip,61594 - [DOS]
Sun, 2010-10-17 22:35:17 - TCP Packet - Source:190.234.203.149,15980 
Destination:mio ip,36681 - [DOS]
Sun, 2010-10-17 22:35:17 - TCP Packet - Source:175.107.17.143 
Destination:mio ip - [PORT SCAN]
Sun, 2010-10-17 22:35:17 - TCP Packet - Source:190.234.18.113,24473 
Destination:mio ip,52806 - [DOS]
Sun, 2010-10-17 22:35:17 - TCP Packet - Source:190.234.253.114,36993 
Destination:mio ip,62000 - [DOS]
Sun, 2010-10-17 22:35:17 - TCP Packet - Source:190.232.75.50,38829 
Destination:mio ip,26618 - [DOS]
Sun, 2010-10-17 22:35:17 - TCP Packet - Source:175.107.17.143 
Destination:mio ip - [PORT SCAN]
Sun, 2010-10-17 22:35:17 - TCP Packet - Source:190.234.92.118,20200 
Destination:mio ip,16428 - [DOS]
Sun, 2010-10-17 22:35:17 - TCP Packet - Source:190.232.68.107,51266 
Destination:mio ip,7670 - [DOS]
Sun, 2010-10-17 22:35:17 - TCP Packet - Source:175.107.17.143 
Destination:mio ip - [PORT SCAN]
Sun, 2010-10-17 22:35:17 - TCP Packet - Source:190.235.44.26,18840 
Destination:mio ip,39497 - [DOS]
Sun, 2010-10-17 22:35:17 - TCP Packet - Source:190.235.3.28,5801 
Destination:mio ip,34456 - [DOS]
Sun, 2010-10-17 22:35:17 - TCP Packet - Source:175.107.1.182,29056 
Destination:mio ip,42374 - [DOS]
Sun, 2010-10-17 22:35:17 - TCP Packet - Source:175.107.17.143 
Destination:mio ip - [PORT SCAN]
Sun, 2010-10-17 22:35:17 - TCP Packet - Source:190.40.133.158,10390 
Destination:mio ip,12659 - [DOS]
Sun, 2010-10-17 22:35:17 - TCP Packet - Source:190.234.11.98,29136 
Destination:mio ip,30077 - [DOS]
Sun, 2010-10-17 22:35:17 - TCP Packet - Source:190.233.18.66,56026 
Destination:mio ip,8732 - [DOS]
Sun, 2010-10-17 22:35:17 - TCP Packet - Source:190.234.93.120,42590 
Destination:mio ip,59750 - [DOS]
Sun, 2010-10-17 22:35:17 - TCP Packet - Source:190.234.137.226,16002 
Destination:mio ip,35825 - [DOS]
Sun, 2010-10-17 22:35:17 - TCP Packet - Source:190.40.133.158,11645 
Destination:mio ip,32525 - [DOS]
Sun, 2010-10-17 22:35:17 - TCP Packet - Source:190.234.92.172,339 
Destination:mio ip,26021 - [DOS]
Sun, 2010-10-17 22:35:17 - TCP Packet - Source:190.232.75.63,12557 
Destination:mio ip,8599 - [DOS]
Sun, 2010-10-17 22:35:17 - TCP Packet - Source:190.235.82.187,2919 
Destination:mio ip,32292 - [DOS]
Sun, 2010-10-17 22:35:17 - TCP Packet - Source:190.234.195.75,21014 
Destination:mio ip,65176 - [DOS]
Sun, 2010-10-17 22:35:17 - TCP Packet - Source:190.235.38.197,59437 
Destination:mio ip,678 - [DOS]
Sun, 2010-10-17 22:35:17 - TCP Packet - Source:175.107.17.143 
Destination:mio ip - [PORT SCAN]
Sun, 2010-10-17 22:35:17 - TCP Packet - Source:190.232.75.69,14254 
Destination:mio ip,50053 - [DOS]
Sun, 2010-10-17 22:35:17 - TCP Packet - Source:190.40.48.172,28720 
Destination:mio ip,33955 - [DOS]
Sun, 2010-10-17 22:35:17 - TCP Packet - Source:190.234.92.13,13460 
Destination:mio ip,55583 - [DOS]
Sun, 2010-10-17 22:35:17 - TCP Packet - Source:175.107.17.143 
Destination:mio ip - [PORT SCAN]
Sun, 2010-10-17 22:35:17 - TCP Packet - Source:190.233.18.84,48486 
Destination:mio ip,30302 - [DOS]
Sun, 2010-10-17 22:35:17 - TCP Packet - Source:190.235.44.97,61971 
Destination:mio ip,42586 - [DOS]
Sun, 2010-10-17 22:35:17 - TCP Packet - Source:175.107.2.103,10407 
Destination:mio ip,59029 - [DOS]
Sun, 2010-10-17 22:35:17 - TCP Packet - Source:190.235.11.13,48668 
Destination:mio ip,42908 - [DOS]
Sun, 2010-10-17 22:35:17 - TCP Packet - Source:190.234.137.212,34854 
Destination:mio ip,9137 - [DOS]
Sun, 2010-10-17 22:35:17 - TCP Packet - Source:190.234.203.52,14244 
Destination:mio ip,38030 - [DOS]
Sun, 2010-10-17 22:35:17 - TCP Packet - Source:175.107.17.143 
Destination:mio ip - [PORT SCAN]
Sun, 2010-10-17 22:35:17 - TCP Packet - Source:190.235.73.71,26900 
Destination:mio ip,20168 - [DOS]
Sun, 2010-10-17 22:35:17 - TCP Packet - Source:175.107.17.143 
Destination:mio ip - [PORT SCAN]
Sun, 2010-10-17 22:35:17 - TCP Packet - Source:190.234.186.236,44900 
Destination:mio ip,47640 - [DOS]
Sun, 2010-10-17 22:35:17 - TCP Packet - Source:190.234.253.217,47718 
Destination:mio ip,6335 - [DOS]
Sun, 2010-10-17 22:35:17 - TCP Packet - Source:175.107.17.143 
Destination:mio ip - [PORT SCAN]
Sun, 2010-10-17 22:35:17 - TCP Packet - Source:175.107.2.103,64979 
Destination:mio ip,52946 - [DOS]
Sun, 2010-10-17 22:35:17 - TCP Packet - Source:175.107.17.143 
Destination:mio ip - [PORT SCAN]
Sun, 2010-10-17 22:35:17 - TCP Packet - Source:190.234.93.3,53576 
Destination:mio ip,34451 - [DOS]
Sun, 2010-10-17 22:35:17 - TCP Packet - Source:190.40.59.137,49027 
Destination:mio ip,50786 - [DOS]
Sun, 2010-10-17 22:35:17 - TCP Packet - Source:190.232.10.82,5097 
Destination:mio ip,14095 - [DOS]
Sun, 2010-10-17 22:35:17 - TCP Packet - Source:190.235.82.253,33762 
Destination:mio ip,27692 - [DOS]
Sun, 2010-10-17 22:35:17 - TCP Packet - Source:190.235.11.226,18872 
Destination:mio ip,13405 - [DOS]
Sun, 2010-10-17 22:35:17 - TCP Packet - Source:190.232.68.132,30638 
Destination:mio ip,12002 - [DOS]
Sun, 2010-10-17 22:35:17 - TCP Packet - Source:190.234.24.64,54407 
Destination:mio ip,4346 - [DOS]
Sun, 2010-10-17 22:35:17 - TCP Packet - Source:190.233.95.224,59705 
Destination:mio ip,53822 - [DOS]
Sun, 2010-10-17 22:35:17 - TCP Packet - Source:175.107.17.143 
Destination:mio ip - [PORT SCAN]
Sun, 2010-10-17 22:35:17 - TCP Packet - Source:190.234.11.228,10192 
Destination:mio ip,27504 - [DOS]
Sun, 2010-10-17 22:35:17 - TCP Packet - Source:190.234.24.155,37980 
Destination:mio ip,35822 - [DOS]
Sun, 2010-10-17 22:35:17 - TCP Packet - Source:190.234.69.69,64569 
Destination:mio ip,50731 - [DOS]
Sun, 2010-10-17 22:35:17 - TCP Packet - Source:190.233.18.254,6073 
Destination:mio ip,39597 - [DOS]
Sun, 2010-10-17 22:35:17 - TCP Packet - Source:190.234.203.29,62762 
Destination:mio ip,10968 - [DOS]
Sun, 2010-10-17 22:35:17 - TCP Packet - Source:175.107.1.182,6179 
Destination:mio ip,26715 - [DOS]
Sun, 2010-10-17 22:35:17 - TCP Packet - Source:190.235.82.21,12662

 che mi sembra preoccupante, c'� modo di bloccarlo?
Uhm... IP Peruviani e Pakistani sembra che una botnet si sia
affezionata al tuo IP; ritengo poco probabile il fatto che qualcuno
stia veramente portando avanti un attacco DDoS verso il tuo IP
credo invece che possa essere probabile che uno dei sistemi
posti dietro al tuo router possa essere stato compromesso o
abbia "clandestini a bordo", per accertartene, ammesso che tu
abbia una connessione con IP dinamico, prova a spegnere il
router, attendere per 30 minuti e riaccenderlo, a quel punto il tuo
IP pubblico dovrebbe essere diverso; verifica quindi se nei logs
continueranno ad apparire quelle segnalazioni, in tal caso c'�
"qualcosa" sulla tua rete che sta attirando quei bots