*Security Alerts*

[mumbles27]

Hi all

recent started getting security alerts emailed from my DG834PN router saying:

TCP Packet - Source:111.250.73.101,64437 Destination:81.178.143.192,36419 - [DOS]

getting a lot now. weeks ago i turned off remote Management of my Router and started opening a few ports to get DYNDNS to work. I never got it to work so turned off remote management of my router. any idea what is happening here?

[jmizoguchi]

DoS - Denial of Service

Traffic is blocked by the firewall of the router

whois 111.250.73.101
#
# Query terms are ambiguous. The query is assumed to be:
# "n 111.250.73.101"
#
# Use "?" to get help.
#

#
# The following results may also be obtained via:
# http://whois.arin.net/rest/nets;q=11...se&ext=netref2
#

NetRange: 111.0.0.0 - 111.255.255.255
CIDR: 111.0.0.0/8
OriginAS:
NetName: APNIC-AP
NetHandle: NET-111-0-0-0-1
Parent:
NetType: Allocated to APNIC
Comment: This IP address range is not registered in the ARIN database.
Comment: For details, refer to the APNIC Whois Database via
Comment: WHOIS.APNIC.NET or http://wq.apnic.net/apnic-bin/whois.pl
Comment: ** IMPORTANT NOTE: APNIC is the Regional Internet Registry
Comment: for the Asia Pacific region. APNIC does not operate networks
Comment: using this IP address range and is not able to investigate
Comment: spam or abuse reports relating to these addresses. For more
Comment: help, refer to http://www.apnic.net/apnic-info/whoi...e-and-spamming
RegDate: 2008-11-12
Updated: 2010-07-30
Ref: http://whois.arin.net/rest/net/NET-111-0-0-0-1

OrgName: Asia Pacific Network Information Centre
OrgId: APNIC
Address: PO Box 3646
City: South Brisbane
StateProv: QLD
PostalCode: 4101
Country: AU
RegDate:
Updated: 2012-01-24
Ref: http://whois.arin.net/rest/org/APNIC

ReferralServer: whois://whois.apnic.net

OrgTechHandle: AWC12-ARIN
OrgTechName: APNIC Whois Contact
OrgTechPhone: +61 7 3858 3188
OrgTechEmail: search-apnic-not-arin@apnic.net
OrgTechRef: http://whois.arin.net/rest/poc/AWC12-ARIN

OrgAbuseHandle: AWC12-ARIN
OrgAbuseName: APNIC Whois Contact
OrgAbusePhone: +61 7 3858 3188
OrgAbuseEmail: search-apnic-not-arin@apnic.net
OrgAbuseRef: http://whois.arin.net/rest/poc/AWC12-ARIN

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#

% [whois.apnic.net node-3]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

inetnum: 111.240.0.0 - 111.255.255.255
netname: HINET-NET
descr: CHTD, Chunghwa Telecom Co.,Ltd.
descr: No.21-3, Sec.1, Hsin-Yi Rd.
descr: Taipei Taiwan 100
country: TW
admin-c: FC76-AP
tech-c: HN27-AP
status: ALLOCATED PORTABLE
mnt-by: MAINT-TW-TWNIC
mnt-lower: MAINT-TW-TWNIC
changed: hm--changed@apnic.net 20090723
source: APNIC

person: Fu-Kuei Chung
address: Internet Service Department,
address: Data Communication Business Group, Chunghwa Telecom Co., Ltd.
address: Data-Comm Bldg, No. 21, Sec 1, Hsin-Yi Rd.
address: Taipei, Taiwan 100
country: TW
phone: +886 2 2344 4709
phone: +886 2 2344 3007
fax-no: +886 2 2396 0399
fax-no: +886 2 2344 2513
e-mail: fkchung@ms1.hinet.net
nic-hdl: FC76-AP
mnt-by: MAINT-TW-TWNIC
changed: hostmaster@twnic.net 20001230
source: APNIC

person: HINET Network-Adm
address: CHTD, Chunghwa Telecom Co., Ltd.
address: No. 21, Sec. 21, Hsin-Yi Rd.,
address: Taipei Taiwan 100
country: TW
phone: +886 2 2322 3495
phone: +886 2 2322 3442
phone: +886 2 2344 3007
fax-no: +886 2 2344 2513
fax-no: +886 2 2395 5671
e-mail: network-adm@hinet.net
nic-hdl: HN27-AP
remarks: same as TWNIC nic-handle HN184-TW
mnt-by: MAINT-TW-TWNIC
changed: hostmaster@twnic.net 20110822
source: APNIC

inetnum: 111.250.0.0 - 111.250.127.255
netname: HINET-NET
descr: Taipei Taiwan
country: TW
admin-c: HN184-TW
tech-c: HN184-TW
mnt-by: MAINT-TW-TWNIC
remarks: This information has been partially mirrored by APNIC from
remarks: TWNIC. To obtain more specific information, please use the
remarks: TWNIC whois server at whois.twnic.net.
changed: network-adm@hinet.net 20100428
status: ASSIGNED NON-PORTABLE
source: TWNIC

person: HINET
address: Taipei Taiwan
country: TW
e-mail: network-adm@hinet.net
nic-hdl: HN184-TW
changed: hostmaster@twnic.net.tw 20000721
source: TWNIC

typical traffic from China.

traffic is blocked so you are okay.