cancel
Showing results for 
Search instead for 
Did you mean: 

DoS attack: ACK Scan, whats does this mean ?

St3
All Star
Posts: 2,391
Thanks: 383
Fixes: 2
Registered: 13-07-2012

DoS attack: ACK Scan, whats does this mean ?

This is taken from my new netgear N 300 router that i got yesterday.
This is the one here http://www.amazon.co.uk/Netgear-Wireless-N-Router-Modem-connections/dp/B003FS40KU/ref=sr_1_2?ie=UTF8...
[DoS attack: ACK Scan] from source: 84.93.230.186:80, Saturday, October 27,2012 20:42:24      

removed most of it now as its ok now Wink
Win 10
i7 7700k
GTX 970
7 REPLIES
Community Veteran
Posts: 38,207
Thanks: 898
Fixes: 54
Registered: 15-06-2007

Re: DoS attack: ACK Scan, whats does this mean ?

I had a load of those and they were all innocuous so I stopped it logging them
St3
All Star
Posts: 2,391
Thanks: 383
Fixes: 2
Registered: 13-07-2012

Re: DoS attack: ACK Scan, whats does this mean ?

hmm ok i guess its somthing maybe just to monitor just incase
Win 10
i7 7700k
GTX 970
Community Veteran
Posts: 38,207
Thanks: 898
Fixes: 54
Registered: 15-06-2007

Re: DoS attack: ACK Scan, whats does this mean ?

The problem with monitoring it is that the router log has a finite size and those reports rapidly fill it
http://community.plus.net/forum/index.php/topic,98237.0.html/
Plusnet Staff
Plusnet Staff
Posts: 6,346
Thanks: 31
Fixes: 5
Registered: 26-11-2011

Re: DoS attack: ACK Scan, whats does this mean ?

Ok. I've had a quick look through the IP addresses that appear to be hitting you.
173.252.101.18 - This IP address belongs to Facebook. I assume this is a website that you have been on.
This information can be found at: http://www.whois.net/ip-address-lookup/
If you type in the IP addresses on the list you will see that a lot of them are from general websites that you have been on.
After the IP address you'll see a prefix such as: 173.252.101.18:80 This little section shows that Port 80 is being used. (Port 80 is used for HTTP - AKA: Web Browsing.
I don't think there is anything to worry about, perhaps your router just being a little over protective and logging everything, which, it is well within it's right to do for you.
Just for your piece of mind IP Address: 84.93.230.186:80 is Plusnet as you have been on these forums, every time you move from page to page on the forums you'll most likely see a hit on the list you've provided there.
If you've any further questions, let me know Smiley
Chris Pettitt
Cloud Environments Engineer
St3
All Star
Posts: 2,391
Thanks: 383
Fixes: 2
Registered: 13-07-2012

Re: DoS attack: ACK Scan, whats does this mean ?

cheers i feel you have helped enough im at rest bow Wink Enjoy the rest of your weekend.
Win 10
i7 7700k
GTX 970
Community Veteran
Posts: 19,090
Thanks: 428
Fixes: 21
Registered: 31-08-2007

Re: DoS attack: ACK Scan, whats does this mean ?

He'll be able to blame his missus for facebook  Grin  Grin
Thanks for all that Chris, that saved me a task, your Out of Office hours help is very very much appreciated.
And thanks Jim for your info that is helpful as well, it explained it very clearly and saved me from digging.
St3
All Star
Posts: 2,391
Thanks: 383
Fixes: 2
Registered: 13-07-2012

Re: DoS attack: ACK Scan, whats does this mean ?

i feel its me who need to thank everyone ... Thanks again Smiley
Win 10
i7 7700k
GTX 970