denial of service

denial of service
Links: home · search · speed test · login · more ·

Links: Reply New Topic
Forums » Security » Security » denial of service

anon @ 6th Nov 09:21PM:
denial of service

Hey, I currently have a major problem; I am being flooded with pings/packets. I have took several steps to stop it. Changed ip, nic mac; but every time I get a new Ip address it starts again could someone be doing it to my entire area? My router is blocking all of the packet/ping request I think. But my internet slows way down or gets disconnected. If so how do i make it stop or is the only thing i can do is wait it out?
reply

SnowyOne @ 6th Nov 09:50PM:
Re: denial of service

said by fade2blk :

Changed ip, nic mac; but every time I get a new Ip address it starts again could someone be doing it to my entire area?

At that point I'd start checking if there were something that was "calling home" revealing the machines IP.
reply

anon @ 10th Nov 08:12PM:
Re: denial of service

at this point i think something is wrong with my lines. when i ping google i lose 40%+ of packets still. My router shows blocked incoming attemps, but when i directly connect modem to pc comodo does not have any blocked attemps. I have used everything from xp,vista,win7, to linux in the last week to try and see if it will stop. My connection is still poor.

this is my router log, when i direct connect modem to pc comodo shows none of this

[INFO] Sat Jan 31 23:43:20 2004 Blocked incoming TCP connection request from 121.18.13.100:12200 to 24.179.84.78:8085
[INFO] Sat Jan 31 22:50:50 2004 Above message repeated 6 times
[INFO] Sat Jan 31 22:43:55 2004 Blocked incoming TCP connection request from 74.63.225.44:12200 to 24.179.84.78:9000
[INFO] Sat Jan 31 22:43:07 2004 Blocked incoming TCP connection request from 79.125.40.124:41197 to 24.179.84.78:443
[INFO] Sat Jan 31 22:42:06 2004 Blocked incoming TCP connection request from 121.18.13.100:12200 to 24.179.84.78:8085
[INFO] Sat Jan 31 22:24:20 2004 Above message repeated 2 times
[INFO] Sat Jan 31 22:16:31 2004 Blocked incoming TCP connection request from 125.65.112.161:6000 to 24.179.84.78:7212
[INFO] Sat Jan 31 22:16:31 2004 Blocked incoming TCP connection request from 125.65.112.161:6000 to 24.179.84.78:8000
[INFO] Sat Jan 31 22:15:32 2004 Blocked incoming TCP connection request from 121.18.13.100:12200 to 24.179.84.78:8085
[INFO] Sat Jan 31 22:11:48 2004 Blocked incoming TCP connection request from 222.208.183.218:12200 to 24.179.84.78:8000
[INFO] Sat Jan 31 22:06:45 2004 Blocked incoming TCP connection request from 121.18.13.100:12200 to 24.179.84.78:8085
[INFO] Sat Jan 31 22:03:32 2004 Blocked incoming TCP connection request from 61.160.216.187:6000 to 24.179.84.78:8000
[INFO] Sat Jan 31 22:03:32 2004 Blocked incoming TCP connection request from 61.160.216.187:6000 to 24.179.84.78:7212
[INFO] Sat Jan 31 21:57:52 2004 Blocked incoming TCP connection request from 121.18.13.100:12200 to 24.179.84.78:8085
[INFO] Sat Jan 31 21:49:35 2004 Blocked incoming TCP connection request from 95.86.246.228:3475 to 24.179.84.78:28972
[INFO] Sat Jan 31 21:49:32 2004 Above message repeated 1 times
[INFO] Sat Jan 31 21:49:02 2004 Blocked incoming TCP connection request from 121.18.13.100:12200 to 24.179.84.78:8085
[INFO] Sat Jan 31 21:40:17 2004 Above message repeated 1 times
[INFO] Sat Jan 31 21:39:26 2004 Administrator logout
[INFO] Sat Jan 31 21:37:24 2004 Blocked incoming TCP packet from 212.58.15.99:80 to 24.179.84.78:57722 as SYN:ACK received but there is no active connection
[INFO] Sat Jan 31 21:35:46 2004 Blocked incoming TCP connection request from 74.63.225.44:12200 to 24.179.84.78:6588
[INFO] Sat Jan 31 21:33:00 2004 Blocked incoming TCP connection request from 221.195.73.68:6000 to 24.179.84.78:8000
[INFO] Sat Jan 31 21:33:00 2004 Blocked incoming TCP connection request from 221.195.73.68:6000 to 24.179.84.78:7212
[INFO] Sat Jan 31 21:31:32 2004 Blocked incoming TCP connection request from 121.18.13.100:12200 to 24.179.84.78:8085
reply

ironwalker @ 10th Nov 09:19PM:
Re: denial of service

Is that it, or is there more?
reply

tempnexus @ 10th Nov 09:56PM:
Re: denial of service

So far the log is NOT DoS
They are spaced minutes apart...it's chatter.

Check your signal levels, it might be your line and not DoS.
reply

VikingBob @ 10th Nov 10:56PM:
Re: denial of service

I'd hardly call that "flooded." As tempnexus says, look elsewhere for the connection issues.

A true DoS would have your router choking on it's own logs - many, many hits per SECOND. What you've posted there is nothing. It wouldn't bog down a dial-up connection.

Edited to add... Using your average P2P program will net you from 2000 to over 10,000 inbound connection attempts per hour, but your connection will (or should) still be usable.
reply

anon @ 10th Nov 11:09PM:
Re: denial of service

My current signal

Downstream
Receive Power 7.1 dBmV
Signal to Noise ratio 39.8 dB

Upstream
Frequency 31 MHz
Transmit Power 31.0 dBmV
reply

tempnexus @ 10th Nov 11:47PM:
Re: denial of service

»Comcast High Speed Internet FAQ »What should my Signal Levels be?

Signals look good.

Maybe there is some upgrade work being done at your neighborhood.
reply