Thread: Blocked DoS attack?
View Single Post
Old 07-04-2006, 19:47   #2
James Henry
Permanently Banned
 
James Henry's Avatar
 
Join Date: Apr 2006
Posts: 562
James Henry is just so famous around these partsJames Henry is just so famous around these partsJames Henry is just so famous around these partsJames Henry is just so famous around these partsJames Henry is just so famous around these partsJames Henry is just so famous around these partsJames Henry is just so famous around these partsJames Henry is just so famous around these partsJames Henry is just so famous around these partsJames Henry is just so famous around these partsJames Henry is just so famous around these partsJames Henry is just so famous around these partsJames Henry is just so famous around these partsJames Henry is just so famous around these partsJames Henry is just so famous around these parts
Re: Blocked DoS attack?
Quote:
Originally Posted by byron_hinson
I seem to have the following in my log all day long and have done for weeks

Fri Apr 7 18:26:07 2006 1 Blocked by DoS protection 10.128.196.1
Fri Apr 7 18:26:11 2006 1 Blocked by DoS protection 10.128.196.1
Fri Apr 7 18:26:20 2006 1 Blocked by DoS protection 10.128.196.1
Fri Apr 7 18:26:37 2006 1 Blocked by DoS protection 10.128.196.1

I have checked out the IP and nothing seems to come back - is this an NTL thing or is it an actual attack and if so - who can I report it to as its been going on for weeks and weeks.
You're an MS MVP and don't know what a private (IE non-routable, not part of the internet so not going to have any records on it, RFC1918, etc) IP address looks like?

That's your default gateway, the DoS protection is probably reporting broadcasts that have been stopped. Try a traceroute it'll be the first hop you see.

No actual attack there, if possible exempt it from the DoS protection.
James Henry is offline   Reply With Quote