hola queria comentarles que mi firewall me notifica de los siguientes ataques que recibi...algui
en podria aclararme que son estos ataques y de donde vienen......
01/05/2008 12:54:09 p.m. Detected DNS cache poisoning attack 218.197.64.8:53
01/05/2008 12:54:08 p.m. Detected DNS cache poisoning attack 218.197.64.8:53
01/05/2008 12:53:48 p.m. Detected DNS cache poisoning attack 218.197.64.8:53
01/05/2008 12:53:18 p.m. Detected DNS cache poisoning attack 218.197.64.8:53
01/05/2008 12:48:34 p.m. Detected DNS cache poisoning attack 218.197.64.8:53
01/05/2008 12:48:29 p.m. Detected DNS cache poisoning attack 218.197.64.8:53
01/05/2008 12:47:22 p.m. Detected DNS cache poisoning attack 218.197.64.8:53
01/05/2008 12:46:28 p.m. Detected DNS cache poisoning attack 218.197.64.8:53
01/05/2008 12:46:19 p.m. Detected DNS cache poisoning attack 219.148.162.31:53
01/05/2008 12:42:57 p.m. Detected DNS cache poisoning attack 218.197.64.8:53
01/05/2008 12:42:51 p.m. Detected DNS cache poisoning attack 140.111.111.1:53
01/05/2008 12:42:12 p.m. Detected DNS cache poisoning attack 218.197.64.8:53
01/05/2008 12:40:06 p.m. Detected DNS cache poisoning attack 218.197.64.8:53
01/05/2008 12:40:00 p.m. Detected DNS cache poisoning attack 140.111.111.1:53
01/05/2008 12:38:18 p.m. Detected DNS cache poisoning attack 218.197.64.8:53
01/05/2008 12:38:17 p.m. Detected DNS cache poisoning attack 218.197.64.8:53
01/05/2008 12:36:43 p.m. Detected DNS cache poisoning attack 218.197.64.8:53
01/05/2008 12:36:43 p.m. Detected DNS cache poisoning attack 218.197.64.8:53
01/05/2008 12:33:52 p.m. Detected DNS cache poisoning attack 218.197.64.8:53
01/05/2008 12:33:34 p.m. Detected DNS cache poisoning attack 218.197.64.8:53
01/05/2008 12:33:30 p.m. Detected DNS cache poisoning attack 87.10.250.146:53
01/05/2008 12:32:28 p.m. Detected DNS cache poisoning attack 218.197.64.8:53
01/05/2008 12:28:19 p.m. Detected DNS cache poisoning attack 140.111.111.1:53
01/05/2008 12:26:19 p.m. Detected DNS cache poisoning attack 140.111.111.1:53
01/05/2008 12:25:42 p.m. Detected DNS cache poisoning attack 140.111.111.1:53
01/05/2008 12:20:46 p.m. Detected DNS cache poisoning attack 140.111.111.1:53
lo maximo que averigue de algunas de las direcciones ip que aparecen como atacantes lo hice por medio de la pagina www.dnsstuff.c
om......y me tiro informacion como la siguiente:
% [whois.apnic.net node-2]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
inetnum: 218.197.64.0 - 218.197.79.255
netname: WHIPE-CN
descr: ~}
descr: Wuhan Institute of Physical Education
descr: Wuhan, Hubei 430079, China
country: CN
admin-c: BG42-AP
tech-c: BG42-AP
tech-c: CER-AP
remarks: origin AS4538
mnt-by: MAINT-CERNET-AP
status: ASSIGNED NON-PORTABLE
changed: hostmaster@net.edu.cn 20020322
changed: hm-changed@apnic.net 20040927
source: APNIC
role: CERNET Helpdesk
address: Room 224, Main Building
address: Tsinghua University
address: Beijing 100084, China
country: CN
phone: +86-10-6278-4049
fax-no: +86-10-6278-5933
e-mail: cernet-helpdesk-ip@net.edu.cn
trouble: abuse@net.edu.cn
admin-c: XL1-CN
tech-c: SZ2-AP
nic-hdl: CER-AP
remarks: Point of Contact for admin-c
mnt-by: MAINT-CERNET-AP
changed: cernet-helpdesk-ip@net.edu.cn 20010903
source: APNIC
person: Bingjin Guo
address: Centre of Palaestra and Gymnasium
address: Wuhan Institute of Physical Education
address: Wuhan, Hubei 430079, China
phone: +86-27-87803623
fax-no: +86-27-87802730
e-mail: jlx21@sohu.com
nic-hdl: BG42-AP
mnt-by: MAINT-CERNET-AP
changed: hostmaster@net.edu.cn 20020322
source: APNIC
bueno me gustaria leer sus comentarios...
muchas gracias.
Autor