Quote:
|
Originally Posted by setch
Can anybody assist with DoS attacks? My ip was being hit as below
Mon Jan 17 20:26:30 2005 1 Blocked by DoS protection 10.132.79.254
Mon Jan 17 20:26:30 2005 1 Blocked by DoS protection 10.132.79.254
Mon Jan 17 20:26:31 2005 1 Blocked by DoS protection 10.132.79.254
This occurred every minute of the day 24/7. So I have just managed to change my ip to a new one and guess what, my router log is showing attacks from the same ip again.
This is having a serious effect on my web connection. Is this ip an wholesale attack on all NTL ip addresses?
Setch
|
Looks like an issue on the ntl network in your area, as already said, but I am always sceptical about how a firewall reports faulty network activity.
Firewalls are too quick to report ping activity as a DoS attack based on poorly created rules in the firewall script. That's not your fault, its the software.
Hope your problem gets sorted though
Actually, I've seen that IP address before, it could well be a noisy piece of ntl kit, take a look at this trace route from my ntl cable modem:
Tracing route to
www.ntlworld.com [62.253.162.30]
over a maximum of 30 hops:
1 30 ms 10 ms 10 ms
10.226.215.254
2 9 ms 9 ms 9 ms ****-t2cam1-b-ge-wan34-104.inet.ntl.com [80.***.***.***]
3 10 ms 21 ms 9 ms ****-t2core-b-ge-wan61.inet.ntl.com [213.***.***.***]
4 12 ms 21 ms 18 ms win-bb-b-so-220-0.inet.ntl.com [62.253.187.241]
5 13 ms 13 ms 11 ms win-dc-b-v902.inet.ntl.com [62.253.187.226]
6 12 ms 14 ms 22 ms win-dc-a-v901.inet.ntl.com [62.253.160.5]
7 12 ms 14 ms 13 ms
www.ntlworld.com [62.253.162.30]
Yup, looks like your uBR may be causing the firewall activity.