Ask a question
Reply
Padawan
MarcusWWW
Posts: 68
Registered: ‎24-06-2010

DoS Attack: ACK Scan on router log?

I've been getting a lot of these messages

 

DoS Attack: ACK Scan] from source: 212.250.162.12, port 80, Thursday, February 24,2011 20:05:22

 

Hostname: ISP: Organization:
git-dmz4-css-4b-vip07.network.virginmedia.net
Virgin Media
Virgin Media

 

DoS Attack: ACK Scan] from source: 92.238.96.29, port 80, Thursday, February 24,2011 19:53:34

 

this ip shows up when I check as

 

Hostname: ISP: Organization:
shop.virginmedia.com
Virgin Media
KNOWSLEY VLAN

 

What is causing this?

Please use plain text.
Expert Opinionator
Paul_M
Posts: 2,218
Registered: ‎18-03-2010

Re: DoS Attack: ACK Scan on router log?

Hi MarcusWWW,

The top one is our load balancer.  For the second one it looks like this could be from a pop up advert.  What were you doing on the internet at the time of it happening?

Thanks

Paul
Help & Support Forum Team


If someone's helped you out say thanks by clicking on the Kudos Star. If someone's solved your problem, why not mark their message as an Accepted Solution? You can also help other users find useful posts by Tagging them with keywords.

If you are new to the forum, please remember to search the forum before posting your question.
Please use plain text.
Padawan
MarcusWWW
Posts: 68
Registered: ‎24-06-2010

Re: DoS Attack: ACK Scan on router log?

i'm just booting up & going to my browsers home page.

 

Still getting these in the router log files.

Please use plain text.
Freakishly Helpful
DABhand
Posts: 1,347
Registered: ‎17-04-2010

Re: DoS Attack: ACK Scan on router log?

An ACK scan is a scan that checks to see if a port is filtered or unfiltered, usually its a way of checking a firewall exists and what its rulesets are.

 

Why the mod says its an advert... is err laughable :smileytongue:

Please use plain text.