How did they hack my modem?

[donn_edwards]

isnt 165.165.x.x the capped IP range ?

It doesn't sop you from sending traffic to other 165.x.x.x modems, because they are all "behind" the capping system. There are no caps between users, only between us and the "outside".

 

[stoke]

And they charge you a premium for such crap service.

It took me 6 hours to try to find out if I could chain with SAIX's cache server.
I used 0800 500 200 as well, and the entire 6 hours was spent on speakerphone, including my 30 minute lunch, came back - yup, same stupid insane tune playing.

My blood boils.

 

[Jack Goa]

hehe. try sorting out account problems with them, hehe

 

[donn_edwards]

I am sorry to report that everyone is doing a "pass the buck" exercise and blaming everyone else. In the meantime my modem log looks like this:

>>>

09/01/2005 16:36:38> Firewall:Winnuke detected,from 165.165.247.204 to 165.165.129.227
09/01/2005 17:42:03> Firewall:Winnuke detected,from 220.221.151.231 to 165.165.129.227
09/01/2005 19:42:21> Firewall:Winnuke detected,from 165.165.242.139 to 165.165.129.227
09/01/2005 20:57:14> Firewall:Winnuke detected,from 165.165.150.87 to 165.165.129.227
09/01/2005 21:39:32> Firewall:Winnuke detected,from 4.228.63.172 to 165.165.129.227
09/01/2005 23:38:28> Firewall:Winnuke detected,from 165.165.150.87 to 165.165.129.227
09/02/2005 00:37:20> Firewall:Winnuke detected,from 165.165.242.139 to 165.165.129.227
09/02/2005 03:00:32> Firewall:Winnuke detected,from 165.165.150.87 to 165.165.129.227
09/02/2005 06:29:45> Firewall:Winnuke detected,from 165.165.150.87 to 165.165.129.227
09/02/2005 08:02:53> Firewall:Winnuke detected,from 165.165.242.139 to 165.165.129.227
09/02/2005 09:13:10> Firewall:Winnuke detected,from 165.165.242.139 to 165.165.129.227
09/02/2005 09:17:19> Firewall:Winnuke detected,from 165.165.220.23 to 165.165.129.227
09/02/2005 10:11:19> Firewall:Winnuke detected,from 165.165.186.193 to 165.165.129.227
09/02/2005 12:43:18> Firewall:Winnuke detected,from 165.165.250.65 to 165.165.129.227
09/02/2005 13:36:37> Firewall:Winnuke detected,from 165.165.183.68 to 165.165.129.227
09/02/2005 14:40:46> Firewall:Winnuke detected,from 68.162.242.119 to 165.165.129.227
09/02/2005 16:30:00> Firewall:Winnuke detected,from 165.165.173.110 to 165.165.129.227
09/02/2005 19:56:40> Firewall:Winnuke detected,from 165.165.232.110 to 165.165.129.227
09/02/2005 22:16:46> Firewall:Winnuke detected,from 165.165.232.110 to 165.165.129.227
09/03/2005 00:38:25> Firewall:Winnuke detected,from 165.165.232.110 to 165.165.129.227
09/03/2005 02:12:26> Firewall:Winnuke detected,from 165.165.232.110 to 165.165.129.227
09/03/2005 03:26:54> Firewall:Winnuke detected,from 81.202.200.172 to 165.165.129.227
09/03/2005 05:40:24> Firewall:Winnuke detected,from 165.165.232.110 to 165.165.129.227
09/03/2005 07:11:02> Firewall:Winnuke detected,from 80.222.126.184 to 165.165.129.227
09/03/2005 08:41:10> Firewall:Winnuke detected,from 165.165.232.110 to 165.165.129.227
09/03/2005 09:24:38> Firewall:Winnuke detected,from 165.165.228.70 to 165.165.129.227
09/03/2005 09:42:06> Firewall:Winnuke detected,from 165.165.228.70 to 165.165.129.227
09/03/2005 11:17:28> Firewall:Winnuke detected,from 165.165.232.110 to 165.165.129.227
09/03/2005 12:14:24> Firewall:Winnuke detected,from 165.165.232.110 to 165.165.129.227
09/03/2005 12:54:31> Firewall:Winnuke detected,from 165.165.242.190 to 165.165.129.227
09/03/2005 13:06:06> Firewall:Winnuke detected,from 165.165.232.110 to 165.165.129.227
09/03/2005 14:50:37> Firewall:Winnuke detected,from 165.165.232.110 to 165.165.129.227
09/03/2005 16:14:41> Firewall:Winnuke detected,from 165.165.232.110 to 165.165.129.227
09/03/2005 17:34:57> Firewall:Winnuke detected,from 165.165.232.110 to 165.165.129.227
09/03/2005 17:43:21> Firewall:Winnuke detected,from 165.165.161.4 to 165.165.129.227
09/04/2005 02:23:32> Firewall:Winnuke detected,from 165.141.212.156 to 165.165.129.227
09/04/2005 07:41:44> Firewall:Winnuke detected,from 165.165.230.58 to 165.165.129.227
09/04/2005 11:42:47> Firewall:Winnuke detected,from 62.159.39.178 to 165.165.129.227
09/04/2005 14:32:03> Firewall:Winnuke detected,from 165.165.196.242 to 165.165.129.227
09/04/2005 15:02:10> Firewall:Winnuke detected,from 165.165.83.136 to 165.165.129.227
09/04/2005 17:04:20> Firewall:Winnuke detected,from 141.152.244.64 to 165.165.129.227
09/04/2005 20:05:09> Firewall:Winnuke detected,from 165.165.205.112 to 165.165.129.227
09/04/2005 20:39:19> Firewall:SYN Flood detected,from 84.53.146.14 to 10.100.10.2
09/05/2005 07:35:04> Firewall:Winnuke detected,from 165.165.237.54 to 165.165.129.227
09/05/2005 09:15:28> Firewall:Winnuke detected,from 165.165.185.179 to 165.165.129.227
09/05/2005 09:44:15> Firewall:Winnuke detected,from 165.165.160.225 to 165.165.129.227
09/05/2005 10:14:04> Firewall:Winnuke detected,from 165.165.194.118 to 165.165.129.227
09/05/2005 10:48:34> Firewall:Winnuke detected,from 165.165.237.54 to 165.165.129.227
09/05/2005 11:21:52> Firewall:Winnuke detected,from 165.165.237.54 to 165.165.129.227
09/05/2005 12:33:11> Firewall:Winnuke detected,from 165.165.237.54 to 165.165.129.227
09/05/2005 13:06:42> Firewall:Winnuke detected,from 165.165.17.185 to 165.165.129.227
09/05/2005 13:17:44> Firewall:Winnuke detected,from 165.165.219.6 to 165.165.129.227
09/05/2005 13:59:24> Firewall:Winnuke detected,from 165.165.237.54 to 165.165.129.227

 

[donn_edwards]

In the last week my modem has been attacked 128 times. I'm tired of paying for this bandwidth and waiting for MWEB and SAIX to do nothing. I got a message saying they're "aware of the problem". Thanks for nothing.

 

[donn_edwards]

Good day

Thank for forwarding the firewall logs. I have forwarded them to the SAIX Abuse administrators to investigate, trace and action accordingly.

Note that the very nature of a 24/7 broadband connection inevitably attacts worm distribution traffic. Your connection has the same IP address for a minimum of 24 hours. My personal ADSL firewall has detected scans, probes etc. at least one per minute since I connected to ADSL two years ago. There is nothing unusual about this. Company servers for example have to block hundreds or thousands of intrusion attempts hourly.

This is the reality of a permanent internet connection.

Kind regards
Richard Vice
Security & Abuse Administrator
Tel: + 27 021 5968830
Fax: + 27 021 5968915
[email protected]
[email protected]

MWEB Head Office, Private Bag X001, N1 City, Cape Town, South Africa, 7463
www.mweb.co.za

MWEB: SA's trusted and reliable Internet Service Provider. Just Like That.

They ignore the problem. Just Like That.

Thanks for nothing, MWEB

 

[justinct]

Why dont you turn ur pc off when ur not there?
Will save some bandwidth aswell?
I realise i am missing the point you are making, but i am just asking cos i am getting dsl soon and dont want the same problems...

 

[Arcadies]

They ignore the problem. Just Like That.

Thanks for nothing, MWEB

LOL LOL LOL LOL well said