under attack or nothing to worry about?

Destination · 13 Jun 2010 at 18:53

Firewall log:
Sun Jun 13 18:49:05 2010 1 Blocked by DoS protection 10.5.128.1
Sun Jun 13 18:49:22 2010 1 Blocked by DoS protection 10.5.128.1
Sun Jun 13 18:49:22 2010 1 Blocked by DoS protection 10.5.128.1
Sun Jun 13 18:50:16 2010 1 Blocked by DoS protection 10.5.128.1
Sun Jun 13 18:50:16 2010 1 Blocked by DoS protection 10.5.128.1
Sun Jun 13 18:50:31 2010 1 Blocked by DoS protection 10.5.128.1
Sun Jun 13 18:50:31 2010 1 Blocked by DoS protection 10.5.128.1
Sun Jun 13 18:51:05 2010 1 Blocked by DoS protection 10.5.128.1

taken from my firewall log
where exactly is 10.5.128.1

Camoe · 13 Jun 2010 at 21:08

that looks like user specified lan ip to me.

Destination · 13 Jun 2010 at 22:52

all the lan stuff is 198. afaik
router is based out of 198.x.x.1 and this computer .2 wifes .3 wdtv .4 etc

What could be using that IP?
Maybe i am misunderstanding how IPs are assigned.

AbsenceJam · 13 Jun 2010 at 22:58

Ignore anything in router logs, always drivel.. That's a local address anyway.

Camoe · 13 Jun 2010 at 23:35

See

nothing to worry about mate.. as long as its blocking it i wouldnt be worried

PistolPete · 14 Jun 2010 at 03:00

Not a Liverpool Virgin Media customer by any chance?

Destination · 14 Jun 2010 at 10:26

Belfast VM customer actually

PistolPete · 15 Jun 2010 at 20:28

Odd, as that address is (or maybe now was) a UBR for Liverpool.

matthab · 15 Jun 2010 at 20:42

OrgName: Internet Assigned Numbers Authority
OrgID: IANA
Address: 4676 Admiralty Way, Suite 330
City: Marina del Rey
StateProv: CA
PostalCode: 90292-6695
Country: US

NetRange: 10.0.0.0 - 10.255.255.255
CIDR: 10.0.0.0/8
NetName: PRIVATE-ADDRESS-ABLK-RFC1918-IANA-RESERVED
NetHandle: NET-10-0-0-0-1
Parent:
NetType: IANA Special Use
NameServer: BLACKHOLE-1.IANA.ORG
NameServer: BLACKHOLE-2.IANA.ORG
Comment: This block is used as private address space.
Comment: Addresses from this block can be used by
Comment: anyone without any need to coordinate with
Comment: IANA or an Internet registry. Addresses from
Comment: this block are used in multiple, separately
Comment: operated networks.
Comment: This block was assigned by the IETF in the
Comment: Best Current Practice document, RFC 1918
Comment: which can be found at:
Comment: http://www.rfc-editor.org/rfc/rfc1918.txt
RegDate:
Updated: 2010-03-15

OrgAbuseHandle: IANA-IP-ARIN
OrgAbuseName: Internet Corporation for Assigned Names and Number
OrgAbusePhone: +1-310-301-5820
OrgAbuseEmail: [email protected]

OrgTechHandle: IANA-IP-ARIN
OrgTechName: Internet Corporation for Assigned Names and Number
OrgTechPhone: +1-310-301-5820
OrgTechEmail: [email protected]

# ARIN WHOIS database, last updated 2010-06-14 20:00

I wouldnt worry about it unless you suddenly get thousands and i mean upwards 30,000. It looks like to me to be a false positive.