dslreports logo
site
 
    All Forums Hot Topics Gallery
spc

spacer




how-to block ads


Search Topic:
uniqs
1337
share rss forum feed

DoS Attack: ICMP Scan

I keep getting hit with this and causing my connections to drop until the router is restarted. Anyone else been seeing this one?

[DoS Attack: ICMP Scan] from source 207.127.20.213


EGeezer
zichrona livracha
Premium
join:2002-08-04
Midwest
kudos:8
Reviews:
·Callcentric
207.127.20.213

OrgName: Washington Saratoga Boces
OrgId: WSB-3
Address: 10 LaCrosse Street
City: Hudson Falls
StateProv: NY
PostalCode: 12839-1412
Country: US
--
Buckle Up. It makes it harder for the aliens to suck you out of your car.


Steve
I know your IP address
Consultant
join:2001-03-10
Foothill Ranch, CA
kudos:5

1 recommendation

reply to ahhhhhAfrin
This is intended for everybody but the OP.

It's not unheard of for an utterly unknown person to claim unwanted attention from a single IP address to post a note in a security forum, prompting a swift and helpful reaction from the troops of said security forum.

This has, in the past, directed unwanted attention to that single IP from multiple IPs of forum members.

In some (but not all) cases, this attention is unwarranted; who knows the name for this phenomenon?

Hint: it involves the word "distributed"


FFH5
Premium
join:2002-03-03
Tavistock NJ
kudos:5
reply to ahhhhhAfrin
Does your router have port scan and DoS protection built-in? If so, have you left it active? I also have "respond to ping on Internet port" turned off. And have NAT filtering on the Secure setting. The router log shows occasional DoS attacks & port scans, but the router never locks up or needs a reboot with the above settings. My router is a Netgear, but other makes should have similar settings.
--
A democracy cannot exist as a permanent form of government. It can only exist until the voters discover that they can vote themselves money from the public treasury.


Juggernaut
Irreverent or irrelevant?
Premium
join:2006-09-05
Kelowna, BC
kudos:2

2 recommendations

reply to Steve
So, "The Streisand Effect" is wrong?


Steve
I know your IP address
Consultant
join:2001-03-10
Foothill Ranch, CA
kudos:5

1 recommendation

said by Juggernaut:

So, "The Streisand Effect" is wrong?

Let's review:
Barbra posts her IP address: Streisand Effect
Barbra's jilted lover posts Barbra's IP address: DDoS

Got it?


Juggernaut
Irreverent or irrelevant?
Premium
join:2006-09-05
Kelowna, BC
kudos:2

1 recommendation

Yea, but Barbra denied she had an IP in the first place!


ashrc4
Premium
join:2009-02-06
australia
reply to Steve
said by Steve:

This is intended for everybody but the OP.

It's not unheard of for an utterly unknown person to claim unwanted attention from a single IP address to post a note in a security forum, prompting a swift and helpful reaction from the troops of said security forum.

This has, in the past, directed unwanted attention to that single IP from multiple IPs of forum members.

In some (but not all) cases, this attention is unwarranted; who knows the name for this phenomenon?

Presently the no.'s here looking at each individual IP hardley constitutes a DDOS.

Secondly Who is "Barbra" in these instances usually. An IP DDOSing a
renewable IP tends to point to a rouge IP as the culprit.
If they managed to be DDOSed not so bad.... A legit out fit being DDOSed by BBR members doing a few look-up's....naaw.
--
Paradigm Shift beta test pilot. "Dying to defend one's small piece of suburb...Give me something global...STAT!


Steve
I know your IP address
Consultant
join:2001-03-10
Foothill Ranch, CA
kudos:5
said by ashrc4:

Secondly Who is "Barbra" in these instances usually.

said by this thread :

Barbra posts her IP address: Streisand Effect

Hint: click the link.


antdude
A Ninja Ant
Premium,VIP
join:2001-03-25
United State
kudos:4
Reviews:
·Time Warner Cable
reply to Juggernaut
said by Juggernaut:

Yea, but Barbra denied she had an IP in the first place!

Not even 127.0.0.1?


Juggernaut
Irreverent or irrelevant?
Premium
join:2006-09-05
Kelowna, BC
kudos:2

2 recommendations

Well, she is a bit 'loopy'. anyways...


norwegian
Premium
join:2005-02-15
Outback
reply to Steve
said by Steve:

This is intended for everybody but the OP.

It's not unheard of for an utterly unknown person to claim unwanted attention from a single IP address to post a note in a security forum, prompting a swift and helpful reaction from the troops of said security forum.

This has, in the past, directed unwanted attention to that single IP from multiple IPs of forum members.

In some (but not all) cases, this attention is unwarranted; who knows the name for this phenomenon?

Hint: it involves the word "distributed"

Well I must admit no reply off the OP suggest you are right.
--
The only thing necessary for the triumph of evil is for good men to do nothing - Edmund Burke



cableties
Premium
join:2005-01-27
I second Steve's deduction.
If I was on TWC (RR.Com), it would likely be DHCP,
so rebooting the modem gets new IP and (likely) no ICMP hit.
And I would be following up to my post, if anyone helped or posted.

Streisand Effect indeed...learn something new here all the time!
--
Splat


rcdailey
Dragoonfly
Premium
join:2005-03-29
Rialto, CA

1 recommendation

reply to antdude
Homeless IP: 0.0.0.0