Jump to content

Спуфинг от провайдера

ne-vlezay80
 Share

Recommended Posts

ne-vlezay80

ne-vlezay80

Posted
Posted

Вот такое в логах домашнего роутера: 


[25175.658383] IP SPOOFING: IN=eth1 OUT= MAC=00:1d:92:29:aa:15:08:d0:9f:d8:fb:40:08:00 SRC=100.64.10.82 DST=100.64.10.82 LEN=44 TOS=0x00 PREC=0x00 TTL=59 ID=42475 PROTO=UDP SPT=16403 DPT=16403 LEN=24
[25175.659051] IP SPOOFING: IN=eth1 OUT= MAC=00:1d:92:29:aa:15:08:d0:9f:d8:fb:40:08:00 SRC=100.64.10.82 DST=100.64.10.82 LEN=44 TOS=0x00 PREC=0x00 TTL=59 ID=41704 PROTO=UDP SPT=60598 DPT=60598 LEN=24
[25175.659916] IP SPOOFING: IN=eth1 OUT= MAC=00:1d:92:29:aa:15:08:d0:9f:d8:fb:40:08:00 SRC=100.64.10.82 DST=100.64.10.82 LEN=44 TOS=0x00 PREC=0x00 TTL=59 ID=19606 PROTO=UDP SPT=54019 DPT=54019 LEN=24
[25175.659967] IP SPOOFING: IN=eth1 OUT= MAC=00:1d:92:29:aa:15:08:d0:9f:d8:fb:40:08:00 SRC=100.64.10.82 DST=100.64.10.82 LEN=44 TOS=0x00 PREC=0x00 TTL=59 ID=25457 PROTO=UDP SPT=16403 DPT=16403 LEN=24
[25175.660233] IP SPOOFING: IN=eth1 OUT= MAC=00:1d:92:29:aa:15:08:d0:9f:d8:fb:40:08:00 SRC=100.64.10.82 DST=100.64.10.82 LEN=44 TOS=0x00 PREC=0x00 TTL=59 ID=55411 PROTO=UDP SPT=54019 DPT=54019 LEN=24
[25175.660840] IP SPOOFING: IN=eth1 OUT= MAC=00:1d:92:29:aa:15:08:d0:9f:d8:fb:40:08:00 SRC=100.64.10.82 DST=100.64.10.82 LEN=44 TOS=0x00 PREC=0x00 TTL=59 ID=60916 PROTO=UDP SPT=16403 DPT=16403 LEN=24
[25175.660930] IP SPOOFING: IN=eth1 OUT= MAC=00:1d:92:29:aa:15:08:d0:9f:d8:fb:40:08:00 SRC=100.64.10.82 DST=100.64.10.82 LEN=44 TOS=0x00 PREC=0x00 TTL=59 ID=59771 PROTO=UDP SPT=54019 DPT=54019 LEN=24
[25175.664106] IP SPOOFING: IN=eth1 OUT= MAC=00:1d:92:29:aa:15:08:d0:9f:d8:fb:40:08:00 SRC=100.64.10.82 DST=100.64.10.82 LEN=44 TOS=0x00 PREC=0x00 TTL=59 ID=61650 PROTO=UDP SPT=60598 DPT=60598 LEN=24
[25175.814036] IP SPOOFING: IN=eth1 OUT= MAC=00:1d:92:29:aa:15:08:d0:9f:d8:fb:40:08:00 SRC=100.64.10.82 DST=100.64.10.82 LEN=44 TOS=0x00 PREC=0x00 TTL=59 ID=24532 PROTO=UDP SPT=60598 DPT=60598 LEN=24
[25178.565112] IP SPOOFING: IN=eth1 OUT= MAC=00:1d:92:29:aa:15:08:d0:9f:d8:fb:40:08:00 SRC=100.64.10.82 DST=100.64.10.82 LEN=44 TOS=0x00 PREC=0x00 TTL=59 ID=4102 PROTO=UDP SPT=54019 DPT=54019 LEN=24
[25178.565157] IP SPOOFING: IN=eth1 OUT= MAC=00:1d:92:29:aa:15:08:d0:9f:d8:fb:40:08:00 SRC=100.64.10.82 DST=100.64.10.82 LEN=44 TOS=0x00 PREC=0x00 TTL=59 ID=1050 PROTO=UDP SPT=54019 DPT=54019 LEN=24
[25178.566967] IP SPOOFING: IN=eth1 OUT= MAC=00:1d:92:29:aa:15:08:d0:9f:d8:fb:40:08:00 SRC=100.64.10.82 DST=100.64.10.82 LEN=44 TOS=0x00 PREC=0x00 TTL=59 ID=51298 PROTO=UDP SPT=54019 DPT=54019 LEN=24
[25178.567047] IP SPOOFING: IN=eth1 OUT= MAC=00:1d:92:29:aa:15:08:d0:9f:d8:fb:40:08:00 SRC=100.64.10.82 DST=100.64.10.82 LEN=44 TOS=0x00 PREC=0x00 TTL=59 ID=50702 PROTO=UDP SPT=16403 DPT=16403 LEN=24
[25178.568171] IP SPOOFING: IN=eth1 OUT= MAC=00:1d:92:29:aa:15:08:d0:9f:d8:fb:40:08:00 SRC=100.64.10.82 DST=100.64.10.82 LEN=44 TOS=0x00 PREC=0x00 TTL=59 ID=52326 PROTO=UDP SPT=16403 DPT=16403 LEN=24
[25178.568217] IP SPOOFING: IN=eth1 OUT= MAC=00:1d:92:29:aa:15:08:d0:9f:d8:fb:40:08:00 SRC=100.64.10.82 DST=100.64.10.82 LEN=44 TOS=0x00 PREC=0x00 TTL=59 ID=38998 PROTO=UDP SPT=16403 DPT=16403 LEN=24
[25178.568284] IP SPOOFING: IN=eth1 OUT= MAC=00:1d:92:29:aa:15:08:d0:9f:d8:fb:40:08:00 SRC=100.64.10.82 DST=100.64.10.82 LEN=44 TOS=0x00 PREC=0x00 TTL=59 ID=41286 PROTO=UDP SPT=60598 DPT=60598 LEN=24
[25178.568728] IP SPOOFING: IN=eth1 OUT= MAC=00:1d:92:29:aa:15:08:d0:9f:d8:fb:40:08:00 SRC=100.64.10.82 DST=100.64.10.82 LEN=44 TOS=0x00 PREC=0x00 TTL=59 ID=58850 PROTO=UDP SPT=60598 DPT=60598 LEN=24
[25178.568785] IP SPOOFING: IN=eth1 OUT= MAC=00:1d:92:29:aa:15:08:d0:9f:d8:fb:40:08:00 SRC=100.64.10.82 DST=100.64.10.82 LEN=44 TOS=0x00 PREC=0x00 TTL=59 ID=8672 PROTO=UDP SPT=60598 DPT=60598 LEN=24
[25180.797086] IP SPOOFING: IN=eth1 OUT= MAC=00:1d:92:29:aa:15:08:d0:9f:d8:fb:40:08:00 SRC=100.64.10.82 DST=100.64.10.82 LEN=44 TOS=0x00 PREC=0x00 TTL=59 ID=60818 PROTO=UDP SPT=60598 DPT=60598 LEN=24
[25180.797194] IP SPOOFING: IN=eth1 OUT= MAC=00:1d:92:29:aa:15:08:d0:9f:d8:fb:40:08:00 SRC=100.64.10.82 DST=100.64.10.82 LEN=44 TOS=0x00 PREC=0x00 TTL=59 ID=62087 PROTO=UDP SPT=60598 DPT=60598 LEN=24
[25180.797283] IP SPOOFING: IN=eth1 OUT= MAC=00:1d:92:29:aa:15:08:d0:9f:d8:fb:40:08:00 SRC=100.64.10.82 DST=100.64.10.82 LEN=44 TOS=0x00 PREC=0x00 TTL=59 ID=4857 PROTO=UDP SPT=16403 DPT=16403 LEN=24
[25180.797785] IP SPOOFING: IN=eth1 OUT= MAC=00:1d:92:29:aa:15:08:d0:9f:d8:fb:40:08:00 SRC=100.64.10.82 DST=100.64.10.82 LEN=44 TOS=0x00 PREC=0x00 TTL=59 ID=48653 PROTO=UDP SPT=16403 DPT=16403 LEN=24
[25180.797861] IP SPOOFING: IN=eth1 OUT= MAC=00:1d:92:29:aa:15:08:d0:9f:d8:fb:40:08:00 SRC=100.64.10.82 DST=100.64.10.82 LEN=44 TOS=0x00 PREC=0x00 TTL=59 ID=39799 PROTO=UDP SPT=16403 DPT=16403 LEN=24
[25180.797918] IP SPOOFING: IN=eth1 OUT= MAC=00:1d:92:29:aa:15:08:d0:9f:d8:fb:40:08:00 SRC=100.64.10.82 DST=100.64.10.82 LEN=44 TOS=0x00 PREC=0x00 TTL=59 ID=22963 PROTO=UDP SPT=60598 DPT=60598 LEN=24
[25180.815198] IP SPOOFING: IN=eth1 OUT= MAC=00:1d:92:29:aa:15:08:d0:9f:d8:fb:40:08:00 SRC=100.64.10.82 DST=100.64.10.82 LEN=44 TOS=0x00 PREC=0x00 TTL=59 ID=6899 PROTO=UDP SPT=54019 DPT=54019 LEN=24
[25180.815744] IP SPOOFING: IN=eth1 OUT= MAC=00:1d:92:29:aa:15:08:d0:9f:d8:fb:40:08:00 SRC=100.64.10.82 DST=100.64.10.82 LEN=44 TOS=0x00 PREC=0x00 TTL=59 ID=31868 PROTO=UDP SPT=54019 DPT=54019 LEN=24
[25180.816479] IP SPOOFING: IN=eth1 OUT= MAC=00:1d:92:29:aa:15:08:d0:9f:d8:fb:40:08:00 SRC=100.64.10.82 DST=100.64.10.82 LEN=44 TOS=0x00 PREC=0x00 TTL=59 ID=35413 PROTO=UDP SPT=54019 DPT=54019 LEN=24
[25183.071302] IP SPOOFING: IN=eth1 OUT= MAC=00:1d:92:29:aa:15:08:d0:9f:d8:fb:40:08:00 SRC=100.64.10.82 DST=100.64.10.82 LEN=44 TOS=0x00 PREC=0x00 TTL=59 ID=53400 PROTO=UDP SPT=16403 DPT=16403 LEN=24
[25183.072376] IP SPOOFING: IN=eth1 OUT= MAC=00:1d:92:29:aa:15:08:d0:9f:d8:fb:40:08:00 SRC=100.64.10.82 DST=100.64.10.82 LEN=44 TOS=0x00 PREC=0x00 TTL=59 ID=64693 PROTO=UDP SPT=60598 DPT=60598 LEN=24
[25183.072978] IP SPOOFING: IN=eth1 OUT= MAC=00:1d:92:29:aa:15:08:d0:9f:d8:fb:40:08:00 SRC=100.64.10.82 DST=100.64.10.82 LEN=44 TOS=0x00 PREC=0x00 TTL=59 ID=37070 PROTO=UDP SPT=54019 DPT=54019 LEN=24
[25183.073046] IP SPOOFING: IN=eth1 OUT= MAC=00:1d:92:29:aa:15:08:d0:9f:d8:fb:40:08:00 SRC=100.64.10.82 DST=100.64.10.82 LEN=44 TOS=0x00 PREC=0x00 TTL=59 ID=25654 PROTO=UDP SPT=16403 DPT=16403 LEN=24
[25183.073331] IP SPOOFING: IN=eth1 OUT= MAC=00:1d:92:29:aa:15:08:d0:9f:d8:fb:40:08:00 SRC=100.64.10.82 DST=100.64.10.82 LEN=44 TOS=0x00 PREC=0x00 TTL=59 ID=3512 PROTO=UDP SPT=54019 DPT=54019 LEN=24
[25183.074191] IP SPOOFING: IN=eth1 OUT= MAC=00:1d:92:29:aa:15:08:d0:9f:d8:fb:40:08:00 SRC=100.64.10.82 DST=100.64.10.82 LEN=44 TOS=0x00 PREC=0x00 TTL=59 ID=21278 PROTO=UDP SPT=16403 DPT=16403 LEN=24
[25183.074806] IP SPOOFING: IN=eth1 OUT= MAC=00:1d:92:29:aa:15:08:d0:9f:d8:fb:40:08:00 SRC=100.64.10.82 DST=100.64.10.82 LEN=44 TOS=0x00 PREC=0x00 TTL=59 ID=15269 PROTO=UDP SPT=60598 DPT=60598 LEN=24
[25183.074896] IP SPOOFING: IN=eth1 OUT= MAC=00:1d:92:29:aa:15:08:d0:9f:d8:fb:40:08:00 SRC=100.64.10.82 DST=100.64.10.82 LEN=44 TOS=0x00 PREC=0x00 TTL=59 ID=36365 PROTO=UDP SPT=54019 DPT=54019 LEN=24
[25183.075271] IP SPOOFING: IN=eth1 OUT= MAC=00:1d:92:29:aa:15:08:d0:9f:d8:fb:40:08:00 SRC=100.64.10.82 DST=100.64.10.82 LEN=44 TOS=0x00 PREC=0x00 TTL=59 ID=16017 PROTO=UDP SPT=60598 DPT=60598 LEN=24
[31519.803615] IP SPOOFING: IN=eth1 OUT= MAC=00:1d:92:29:aa:15:08:d0:9f:d8:fb:40:08:00 SRC=100.64.10.82 DST=100.64.10.82 LEN=44 TOS=0x00 PREC=0x00 TTL=59 ID=62249 PROTO=UDP SPT=16403 DPT=16403 LEN=24
[31519.804181] IP SPOOFING: IN=eth1 OUT= MAC=00:1d:92:29:aa:15:08:d0:9f:d8:fb:40:08:00 SRC=100.64.10.82 DST=100.64.10.82 LEN=44 TOS=0x00 PREC=0x00 TTL=59 ID=30711 PROTO=UDP SPT=16403 DPT=16403 LEN=24
[31519.863969] IP SPOOFING: IN=eth1 OUT= MAC=00:1d:92:29:aa:15:08:d0:9f:d8:fb:40:08:00 SRC=100.64.10.82 DST=100.64.10.82 LEN=44 TOS=0x00 PREC=0x00 TTL=59 ID=640 PROTO=UDP SPT=16403 DPT=16403 LEN=24
[31519.865092] IP SPOOFING: IN=eth1 OUT= MAC=00:1d:92:29:aa:15:08:d0:9f:d8:fb:40:08:00 SRC=100.64.10.82 DST=100.64.10.82 LEN=44 TOS=0x00 PREC=0x00 TTL=59 ID=52566 PROTO=UDP SPT=60037 DPT=60037 LEN=24
[31519.865211] IP SPOOFING: IN=eth1 OUT= MAC=00:1d:92:29:aa:15:08:d0:9f:d8:fb:40:08:00 SRC=100.64.10.82 DST=100.64.10.82 LEN=44 TOS=0x00 PREC=0x00 TTL=59 ID=61304 PROTO=UDP SPT=60037 DPT=60037 LEN=24
[31519.866105] IP SPOOFING: IN=eth1 OUT= MAC=00:1d:92:29:aa:15:08:d0:9f:d8:fb:40:08:00 SRC=100.64.10.82 DST=100.64.10.82 LEN=44 TOS=0x00 PREC=0x00 TTL=59 ID=15691 PROTO=UDP SPT=60037 DPT=60037 LEN=24
[31519.904813] IP SPOOFING: IN=eth1 OUT= MAC=00:1d:92:29:aa:15:08:d0:9f:d8:fb:40:08:00 SRC=100.64.10.82 DST=100.64.10.82 LEN=44 TOS=0x00 PREC=0x00 TTL=59 ID=6815 PROTO=UDP SPT=51083 DPT=51083 LEN=24
[31519.904860] IP SPOOFING: IN=eth1 OUT= MAC=00:1d:92:29:aa:15:08:d0:9f:d8:fb:40:08:00 SRC=100.64.10.82 DST=100.64.10.82 LEN=44 TOS=0x00 PREC=0x00 TTL=59 ID=51957 PROTO=UDP SPT=51083 DPT=51083 LEN=24
[31519.920179] IP SPOOFING: IN=eth1 OUT= MAC=00:1d:92:29:aa:15:08:d0:9f:d8:fb:40:08:00 SRC=100.64.10.82 DST=100.64.10.82 LEN=44 TOS=0x00 PREC=0x00 TTL=59 ID=49356 PROTO=UDP SPT=51083 DPT=51083 LEN=24
[31522.129767] IP SPOOFING: IN=eth1 OUT= MAC=00:1d:92:29:aa:15:08:d0:9f:d8:fb:40:08:00 SRC=100.64.10.82 DST=100.64.10.82 LEN=44 TOS=0x00 PREC=0x00 TTL=59 ID=22839 PROTO=UDP SPT=16403 DPT=16403 LEN=24
[31522.130229] IP SPOOFING: IN=eth1 OUT= MAC=00:1d:92:29:aa:15:08:d0:9f:d8:fb:40:08:00 SRC=100.64.10.82 DST=100.64.10.82 LEN=44 TOS=0x00 PREC=0x00 TTL=59 ID=51198 PROTO=UDP SPT=16403 DPT=16403 LEN=24
[31522.130558] IP SPOOFING: IN=eth1 OUT= MAC=00:1d:92:29:aa:15:08:d0:9f:d8:fb:40:08:00 SRC=100.64.10.82 DST=100.64.10.82 LEN=44 TOS=0x00 PREC=0x00 TTL=59 ID=13851 PROTO=UDP SPT=16403 DPT=16403 LEN=24
[31522.130836] IP SPOOFING: IN=eth1 OUT= MAC=00:1d:92:29:aa:15:08:d0:9f:d8:fb:40:08:00 SRC=100.64.10.82 DST=100.64.10.82 LEN=44 TOS=0x00 PREC=0x00 TTL=59 ID=45297 PROTO=UDP SPT=60037 DPT=60037 LEN=24
[31522.131377] IP SPOOFING: IN=eth1 OUT= MAC=00:1d:92:29:aa:15:08:d0:9f:d8:fb:40:08:00 SRC=100.64.10.82 DST=100.64.10.82 LEN=44 TOS=0x00 PREC=0x00 TTL=59 ID=16018 PROTO=UDP SPT=60037 DPT=60037 LEN=24
[31522.131434] IP SPOOFING: IN=eth1 OUT= MAC=00:1d:92:29:aa:15:08:d0:9f:d8:fb:40:08:00 SRC=100.64.10.82 DST=100.64.10.82 LEN=44 TOS=0x00 PREC=0x00 TTL=59 ID=47883 PROTO=UDP SPT=60037 DPT=60037 LEN=24
[31522.171133] IP SPOOFING: IN=eth1 OUT= MAC=00:1d:92:29:aa:15:08:d0:9f:d8:fb:40:08:00 SRC=100.64.10.82 DST=100.64.10.82 LEN=44 TOS=0x00 PREC=0x00 TTL=59 ID=43916 PROTO=UDP SPT=51083 DPT=51083 LEN=24
[31522.182619] IP SPOOFING: IN=eth1 OUT= MAC=00:1d:92:29:aa:15:08:d0:9f:d8:fb:40:08:00 SRC=100.64.10.82 DST=100.64.10.82 LEN=44 TOS=0x00 PREC=0x00 TTL=59 ID=23556 PROTO=UDP SPT=51083 DPT=51083 LEN=24
[31522.182924] IP SPOOFING: IN=eth1 OUT= MAC=00:1d:92:29:aa:15:08:d0:9f:d8:fb:40:08:00 SRC=100.64.10.82 DST=100.64.10.82 LEN=44 TOS=0x00 PREC=0x00 TTL=59 ID=5647 PROTO=UDP SPT=51083 DPT=51083 LEN=24
[31524.385245] IP SPOOFING: IN=eth1 OUT= MAC=00:1d:92:29:aa:15:08:d0:9f:d8:fb:40:08:00 SRC=100.64.10.82 DST=100.64.10.82 LEN=44 TOS=0x00 PREC=0x00 TTL=59 ID=36107 PROTO=UDP SPT=51083 DPT=51083 LEN=24
[31524.385295] IP SPOOFING: IN=eth1 OUT= MAC=00:1d:92:29:aa:15:08:d0:9f:d8:fb:40:08:00 SRC=100.64.10.82 DST=100.64.10.82 LEN=44 TOS=0x00 PREC=0x00 TTL=59 ID=59062 PROTO=UDP SPT=51083 DPT=51083 LEN=24
[31524.385502] IP SPOOFING: IN=eth1 OUT= MAC=00:1d:92:29:aa:15:08:d0:9f:d8:fb:40:08:00 SRC=100.64.10.82 DST=100.64.10.82 LEN=44 TOS=0x00 PREC=0x00 TTL=59 ID=6985 PROTO=UDP SPT=51083 DPT=51083 LEN=24
[31524.385885] IP SPOOFING: IN=eth1 OUT= MAC=00:1d:92:29:aa:15:08:d0:9f:d8:fb:40:08:00 SRC=100.64.10.82 DST=100.64.10.82 LEN=44 TOS=0x00 PREC=0x00 TTL=59 ID=30363 PROTO=UDP SPT=16403 DPT=16403 LEN=24
[31524.386257] IP SPOOFING: IN=eth1 OUT= MAC=00:1d:92:29:aa:15:08:d0:9f:d8:fb:40:08:00 SRC=100.64.10.82 DST=100.64.10.82 LEN=44 TOS=0x00 PREC=0x00 TTL=59 ID=54651 PROTO=UDP SPT=16403 DPT=16403 LEN=24
[31524.387375] IP SPOOFING: IN=eth1 OUT= MAC=00:1d:92:29:aa:15:08:d0:9f:d8:fb:40:08:00 SRC=100.64.10.82 DST=100.64.10.82 LEN=44 TOS=0x00 PREC=0x00 TTL=59 ID=3534 PROTO=UDP SPT=60037 DPT=60037 LEN=24
[31524.387780] IP SPOOFING: IN=eth1 OUT= MAC=00:1d:92:29:aa:15:08:d0:9f:d8:fb:40:08:00 SRC=100.64.10.82 DST=100.64.10.82 LEN=44 TOS=0x00 PREC=0x00 TTL=59 ID=38838 PROTO=UDP SPT=60037 DPT=60037 LEN=24
[31524.387831] IP SPOOFING: IN=eth1 OUT= MAC=00:1d:92:29:aa:15:08:d0:9f:d8:fb:40:08:00 SRC=100.64.10.82 DST=100.64.10.82 LEN=44 TOS=0x00 PREC=0x00 TTL=59 ID=63622 PROTO=UDP SPT=60037 DPT=60037 LEN=24
[31526.665527] IP SPOOFING: IN=eth1 OUT= MAC=00:1d:92:29:aa:15:08:d0:9f:d8:fb:40:08:00 SRC=100.64.10.82 DST=100.64.10.82 LEN=44 TOS=0x00 PREC=0x00 TTL=59 ID=37187 PROTO=UDP SPT=51083 DPT=51083 LEN=24
[31526.665975] IP SPOOFING: IN=eth1 OUT= MAC=00:1d:92:29:aa:15:08:d0:9f:d8:fb:40:08:00 SRC=100.64.10.82 DST=100.64.10.82 LEN=44 TOS=0x00 PREC=0x00 TTL=59 ID=2956 PROTO=UDP SPT=51083 DPT=51083 LEN=24
[31526.666045] IP SPOOFING: IN=eth1 OUT= MAC=00:1d:92:29:aa:15:08:d0:9f:d8:fb:40:08:00 SRC=100.64.10.82 DST=100.64.10.82 LEN=44 TOS=0x00 PREC=0x00 TTL=59 ID=8198 PROTO=UDP SPT=51083 DPT=51083 LEN=24
[31526.667116] IP SPOOFING: IN=eth1 OUT= MAC=00:1d:92:29:aa:15:08:d0:9f:d8:fb:40:08:00 SRC=100.64.10.82 DST=100.64.10.82 LEN=44 TOS=0x00 PREC=0x00 TTL=59 ID=63773 PROTO=UDP SPT=16403 DPT=16403 LEN=24
[31526.667167] IP SPOOFING: IN=eth1 OUT= MAC=00:1d:92:29:aa:15:08:d0:9f:d8:fb:40:08:00 SRC=100.64.10.82 DST=100.64.10.82 LEN=44 TOS=0x00 PREC=0x00 TTL=59 ID=2573 PROTO=UDP SPT=16403 DPT=16403 LEN=24
[31526.669043] IP SPOOFING: IN=eth1 OUT= MAC=00:1d:92:29:aa:15:08:d0:9f:d8:fb:40:08:00 SRC=100.64.10.82 DST=100.64.10.82 LEN=44 TOS=0x00 PREC=0x00 TTL=59 ID=38243 PROTO=UDP SPT=16403 DPT=16403 LEN=24
[31526.669136] IP SPOOFING: IN=eth1 OUT= MAC=00:1d:92:29:aa:15:08:d0:9f:d8:fb:40:08:00 SRC=100.64.10.82 DST=100.64.10.82 LEN=44 TOS=0x00 PREC=0x00 TTL=59 ID=60531 PROTO=UDP SPT=60037 DPT=60037 LEN=24
[31526.669273] IP SPOOFING: IN=eth1 OUT= MAC=00:1d:92:29:aa:15:08:d0:9f:d8:fb:40:08:00 SRC=100.64.10.82 DST=100.64.10.82 LEN=44 TOS=0x00 PREC=0x00 TTL=59 ID=30529 PROTO=UDP SPT=60037 DPT=60037 LEN=24
[31526.669495] IP SPOOFING: IN=eth1 OUT= MAC=00:1d:92:29:aa:15:08:d0:9f:d8:fb:40:08:00 SRC=100.64.10.82 DST=100.64.10.82 LEN=44 TOS=0x00 PREC=0x00 TTL=59 ID=35920 PROTO=UDP SPT=60037 DPT=60037 LEN=24
[31530.972959] IP SPOOFING: IN=eth1 OUT= MAC=00:1d:92:29:aa:15:08:d0:9f:d8:fb:40:08:00 SRC=100.64.10.82 DST=100.64.10.82 LEN=44 TOS=0x00 PREC=0x00 TTL=59 ID=33558 PROTO=UDP SPT=16403 DPT=16403 LEN=24

Интерфейс провайдера: 


eth1: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500
        inet 100.64.10.82  netmask 255.255.248.0  broadcast 100.64.15.255
        inet6 fe80::21d:92ff:fe29:aa15  prefixlen 64  scopeid 0x20<link>
        ether 00:1d:92:29:aa:15  txqueuelen 1000  (Ethernet)
        RX packets 1549189  bytes 2063158509 (1.9 GiB)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 969974  bytes 130260403 (124.2 MiB)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

 

Что за ерунда!!! Мне кажится, пора менять провайдера.

vlad11

vlad11

Posted
Posted

Думаю, кто-то из клиентов решил взять себе этот IP. Или пересечение IP в сети оператора.

  

CIDR:           100.64.0.0/10
NetName:        SHARED-ADDRESS-SPACE-RFCTBD-IANA-RESERVED
Comment:        Shared Address Space can only be used in Service Provider networks or on routing equipment that is able to do address translation across router interfaces when addresses are identical on two different interfaces.

 

ne-vlezay80

ne-vlezay80

Posted
  • Author
Posted 


# Generated by iptables-save v1.6.0 on Wed Mar 28 15:41:40 2018
*filter
:INPUT ACCEPT [2029:513946]
:FORWARD ACCEPT [22169:12402725]
:OUTPUT ACCEPT [1978:253606]
COMMIT
# Completed on Wed Mar 28 15:41:40 2018
# Generated by iptables-save v1.6.0 on Wed Mar 28 15:41:40 2018
*nat
:PREROUTING ACCEPT [657:46144]
:INPUT ACCEPT [341:24963]
:OUTPUT ACCEPT [774:56552]
:POSTROUTING ACCEPT [26:1357]
-A PREROUTING -s 198.18.120.0/23 -p udp -m udp --dport 53 -j DNAT --to-destination 198.18.120.1:53
-A POSTROUTING -o eth1 -j MASQUERADE
COMMIT
# Completed on Wed Mar 28 15:41:40 2018
# Generated by iptables-save v1.6.0 on Wed Mar 28 15:41:40 2018
*mangle
:PREROUTING ACCEPT [24315:12929951]
:INPUT ACCEPT [2036:514310]
:FORWARD ACCEPT [22169:12402725]
:OUTPUT ACCEPT [1986:254870]
:POSTROUTING ACCEPT [24155:12657595]
:DPI - [0:0]
:DPI_SH - [0:0]
-A PREROUTING -m rpfilter --invert -j LOG --log-prefix "IP SPOOFING: "
-A PREROUTING -m rpfilter --invert -j DROP
-A FORWARD -j DPI
-A FORWARD -j DPI_SH
-A DPI -s 198.18.0.0/15 -d 198.18.0.0/15 -j RETURN
-A DPI -s 198.18.0.0/15 -d 192.168.0.0/15 -j RETURN
-A DPI -s 192.168.0.0/16 -d 198.18.0.0/15 -j RETURN
-A DPI -s 192.168.0.0/16 -d 192.168.0.0/16 -j RETURN
-A DPI -m mark ! --mark 0x1/0x1 -j NFQUEUE --queue-num 0
-A DPI_SH -m mark --mark 0x4/0xfe -j CONNMARK --set-xmark 0x4/0xfe
-A DPI_SH -m mark --mark 0x2/0xfe -j CONNMARK --set-xmark 0x2/0xfe
-A DPI_SH -m connmark --mark 0x2/0xfe -j CLASSIFY --set-class 0001:0011
-A DPI_SH -m connmark --mark 0x4/0xfe -j CLASSIFY --set-class 0001:0012
-A DPI_SH -m mark --mark 0x64/0xfe -j SET --add-set dpi_detect src
-A DPI_SH -m mark --mark 0x64/0xfe -j LOG --log-prefix "INFOROOM DPI: "
COMMIT
# Completed on Wed Mar 28 15:41:40 2018

 

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

×
 Share
Go to topic listing
×
×
  • Create New...
На сайте используются файлы cookie и сервисы аналитики для корректной работы форума и улучшения качества обслуживания. Продолжая использовать сайт, вы соглашаетесь с использованием файлов cookie и с Политикой конфиденциальности.