Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Is plusnet ATTACKING my router???
Topic Options
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
- Plusnet Community
- :
- Forum
- :
- Help with my Plusnet services
- :
- Broadband
- :
- Re: Is plusnet ATTACKING my router???
Is plusnet ATTACKING my router???
08-07-2011 10:10 AM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
Hi Plusnet why are you attacking me?
Looking at my router logs, I can see the 2 following entries
Looking up 212.159.15.8 points me to pih-portal08.servers.plus.net
I'm not that bothered about the attack itself, but why is it happening?
And is anybody else seeing it or am I being singled out?
Cheers
Dave.
Looking at my router logs, I can see the 2 following entries
[DoS attack: FIN Scan] attack packets in last 20 sec from ip [212.159.15.8], Thursday, Jul 07,2011 23:58:09
[DoS attack: ACK Scan] attack packets in last 20 sec from ip [212.159.15.8], Tuesday, Jul 05,2011 09:30:58
Looking up 212.159.15.8 points me to pih-portal08.servers.plus.net
I'm not that bothered about the attack itself, but why is it happening?
And is anybody else seeing it or am I being singled out?
Cheers
Dave.
Message 1 of 3
(1,271 Views)
2 REPLIES 2
Re: Is plusnet ATTACKING my router???
08-07-2011 4:41 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
It is probably just your router being over-zealous with regards to its interpretation of some packets it has seen.
Mathew
Mathew
Message 2 of 3
(414 Views)
Re: Is plusnet ATTACKING my router???
08-07-2011 7:14 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
This is frequently caused by orphan packets. If you open a web page your browser sends requests to a variety of servers for the content ( including the embedded ads, pictures etc.). If you close the browser window before all the responses get back, the router will/may delete the outgoing record from its NAT database. When the requested packets then arrive, the router has no idea why they are arriving and treats them as unsolicited packets - and reports them as a potential attack.
Message 3 of 3
(414 Views)
Topic Options
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
- Plusnet Community
- :
- Forum
- :
- Help with my Plusnet services
- :
- Broadband
- :
- Re: Is plusnet ATTACKING my router???