Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Router reports a FIN scan from a Plusnet IP address. Should I report it?
Topic Options
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
- Plusnet Community
- :
- Forum
- :
- Help with my Plusnet services
- :
- Broadband
- :
- Re: Router reports a FIN scan from a Plusnet IP ad...
Router reports a FIN scan from a Plusnet IP address. Should I report it?
08-10-2013 3:41 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
I know sometimes these things are false positives (I have a Netgear router), but IP lookup tells me it's owned by PN.
A tortoise? What's that?
You know what a turtle is? Same thing.
You know what a turtle is? Same thing.
Message 1 of 4
(1,527 Views)
3 REPLIES 3
Re: Router reports a FIN scan from a Plusnet IP address. Should I report it?
08-10-2013 6:21 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
What's the IP address? Did it occur around the time you were browsing the plus.net website, these community forums, or accessing some other plusnet server?
Message 2 of 4
(535 Views)
Re: Router reports a FIN scan from a Plusnet IP address. Should I report it?
09-10-2013 11:07 AM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
It probably was, yes. IP is 84.93.230.178 which resolves to community04.servers.plus.net. So when I'm browsing these forums, they kick back and my router identifies it as an attack?
I'll look for one at 11:06 today then...
Ah yes, there it is:
[DoS attack: FIN Scan] attack packets in last 20 sec from ip [84.93.235.226], Wednesday, Oct 09,2013 10:05:56
[DoS attack: FIN Scan] attack packets in last 20 sec from ip [84.93.230.178], Wednesday, Oct 09,2013 10:03:52
(that's GMT of course).
So what gives?
I'll look for one at 11:06 today then...
Ah yes, there it is:
[DoS attack: FIN Scan] attack packets in last 20 sec from ip [84.93.235.226], Wednesday, Oct 09,2013 10:05:56
[DoS attack: FIN Scan] attack packets in last 20 sec from ip [84.93.230.178], Wednesday, Oct 09,2013 10:03:52
(that's GMT of course).
So what gives?
A tortoise? What's that?
You know what a turtle is? Same thing.
You know what a turtle is? Same thing.
Message 3 of 4
(535 Views)
Re: Router reports a FIN scan from a Plusnet IP address. Should I report it?
09-10-2013 12:17 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
Probably related to or the same issue as what I reported in https://community.plus.net/forum/index.php/topic,117757.0.html
The strange thing is, I don't actually see any connections from my computer to 84.93.230.178 and the other community0{1,2,3,4}.servers.plus.net IP addresses when browsing these forums. Yet packets arrive from those IP addresses and so are dropped by the router firewall.
The strange thing is, I don't actually see any connections from my computer to 84.93.230.178 and the other community0{1,2,3,4}.servers.plus.net IP addresses when browsing these forums. Yet packets arrive from those IP addresses and so are dropped by the router firewall.
Message 4 of 4
(535 Views)
Topic Options
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
- Plusnet Community
- :
- Forum
- :
- Help with my Plusnet services
- :
- Broadband
- :
- Re: Router reports a FIN scan from a Plusnet IP ad...