cancel
Showing results for 
Search instead for 
Did you mean: 

DoS attack: ACK Scan, whats does this mean ?

St3
Aspiring Champion
Posts: 2,608
Thanks: 498
Fixes: 5
Registered: 13-07-2012

DoS attack: ACK Scan, whats does this mean ?

This is taken from my new netgear N 300 router that i got yesterday.
This is the one here http://www.amazon.co.uk/Netgear-Wireless-N-Router-Modem-connections/dp/B003FS40KU/ref=sr_1_2?ie=UTF8...
[DoS attack: ACK Scan] from source: 84.93.230.186:80, Saturday, October 27,2012 20:42:24      

removed most of it now as its ok now Wink
7 REPLIES
Community Veteran
Posts: 38,460
Thanks: 1,028
Fixes: 62
Registered: 15-06-2007

Re: DoS attack: ACK Scan, whats does this mean ?

I had a load of those and they were all innocuous so I stopped it logging them
St3
Aspiring Champion
Posts: 2,608
Thanks: 498
Fixes: 5
Registered: 13-07-2012

Re: DoS attack: ACK Scan, whats does this mean ?

hmm ok i guess its somthing maybe just to monitor just incase
Community Veteran
Posts: 38,460
Thanks: 1,028
Fixes: 62
Registered: 15-06-2007

Re: DoS attack: ACK Scan, whats does this mean ?

The problem with monitoring it is that the router log has a finite size and those reports rapidly fill it
http://community.plus.net/forum/index.php/topic,98237.0.html/
Plusnet Staff
Plusnet Staff
Posts: 6,346
Thanks: 31
Fixes: 5
Registered: 26-11-2011

Re: DoS attack: ACK Scan, whats does this mean ?

Ok. I've had a quick look through the IP addresses that appear to be hitting you.
173.252.101.18 - This IP address belongs to Facebook. I assume this is a website that you have been on.
This information can be found at: http://www.whois.net/ip-address-lookup/
If you type in the IP addresses on the list you will see that a lot of them are from general websites that you have been on.
After the IP address you'll see a prefix such as: 173.252.101.18:80 This little section shows that Port 80 is being used. (Port 80 is used for HTTP - AKA: Web Browsing.
I don't think there is anything to worry about, perhaps your router just being a little over protective and logging everything, which, it is well within it's right to do for you.
Just for your piece of mind IP Address: 84.93.230.186:80 is Plusnet as you have been on these forums, every time you move from page to page on the forums you'll most likely see a hit on the list you've provided there.
If you've any further questions, let me know Smiley
Chris Pettitt
Cloud Environments Engineer
St3
Aspiring Champion
Posts: 2,608
Thanks: 498
Fixes: 5
Registered: 13-07-2012

Re: DoS attack: ACK Scan, whats does this mean ?

cheers i feel you have helped enough im at rest bow Wink Enjoy the rest of your weekend.
Community Veteran
Posts: 19,101
Thanks: 443
Fixes: 21
Registered: 31-08-2007

Re: DoS attack: ACK Scan, whats does this mean ?

He'll be able to blame his missus for facebook  Grin  Grin
Thanks for all that Chris, that saved me a task, your Out of Office hours help is very very much appreciated.
And thanks Jim for your info that is helpful as well, it explained it very clearly and saved me from digging.
St3
Aspiring Champion
Posts: 2,608
Thanks: 498
Fixes: 5
Registered: 13-07-2012

Re: DoS attack: ACK Scan, whats does this mean ?

i feel its me who need to thank everyone ... Thanks again Smiley