New
#1
DDoS Attack, Changed IPs Still Under Attack
I'm being DDoS attacked. My ping was been spiking from 50 to 250+. I've tried changing my IP multiple times and I still was attacked (Note: I own 3 computers and 1 tablet). I've tried disabling startup processes, av scans, and basic rootkit scans and found nothing. However, after I uninstalled Akamai Net Session Downloader, FlashGet, and Tornado Force 2 (a chinese version of the game "Soldier Front 2"), it seems as though the attacks stopped. I'm not sure if they will come back or of something is infected but I'd appreciate some help to make sure everything is fine and not infected. EDIT: I'm still seeing these attacks pop up in the logs
This is what my NETGEAR Router was showing in the logs:
[admin login] from source 192.168.0.3, Friday, June 14,2013 18:25:12
[DoS attack: ACK Scan] from source: 208.47.185.65:80, Friday, June 14,2013 18:24:12
[DoS attack: ACK Scan] from source: 69.168.106.22:80, Friday, June 14,2013 18:22:58
[DoS attack: RST Scan] from source: 50.17.180.125:80, Friday, June 14,2013 18:11:49
[DoS attack: ACK Scan] from source: 208.47.185.65:80, Friday, June 14,2013 18:09:37
[DoS attack: ACK Scan] from source: 208.47.185.65:80, Friday, June 14,2013 18:09:11
[DoS attack: ACK Scan] from source: 69.168.106.22:80, Friday, June 14,2013 18:08:00
[DHCP IP: (192.168.0.4)] to MAC address 00:26:2D:3A:44:7D, Friday, June 14,2013 18:01:50
[DoS attack: ACK Scan] from source: 208.47.185.65:80, Friday, June 14,2013 17:55:51
[DoS attack: ACK Scan] from source: 208.47.185.65:80, Friday, June 14,2013 17:55:27
[DoS attack: ACK Scan] from source: 69.168.106.22:80, Friday, June 14,2013 17:54:19
[DoS attack: ACK Scan] from source: 208.47.184.200:80, Friday, June 14,2013 17:53:48
[DoS attack: RST Scan] from source: 50.17.180.125:80, Friday, June 14,2013 17:47:42
[DoS attack: ACK Scan] from source: 208.47.185.65:80, Friday, June 14,2013 17:44:46
[DHCP IP: (192.168.0.3)] to MAC address E0:46:9A:A5:580, Friday, June 14,2013 17:40:49
[Time synchronized with NTP server time-g.netgear.com] Friday, June 14,2013 17:40:12
[Internet connected] IP address: 184.1.219.253, Friday, June 14,2013 17:39:37
[Internet disconnected] Friday, June 14,2013 17:39:29
[DoS attack: RST Scan] from source: 206.190.57.61:443, Friday, June 14,2013 17:39:23
Last edited by Nitsua; 15 Jun 2013 at 20:55.