Results 1 to 3 of 3

Thread: DOS attacks?

  1. #1
    Plutonium Lounger Leif's Avatar
    Join Date
    Dec 2000
    Location
    U.K.
    Posts
    14,010
    Thanks
    0
    Thanked 0 Times in 0 Posts

    DOS attacks?

    Anyone think of a good reason why we suddenly appear to be under attack, with our Netgear router sending batches of alerts every 20-30 minutes or so as below. Normally I'd get one of these maybe once a day, but the last 24 hours have gone mad...<pre>TCP Packet - Source:66.120.47.82,17556 Destination:xxx.xxx.xxx.xxx,445 - [DOS]
    TCP Packet - Source:66.120.47.82,17557 Destination:xxx.xxx.xxx.xxx,3127 - [DOS]</pre>

    We'll get around 10-20 coming in from one IP address, all quiet for a while, then another batch from another address....

    (xxx.xxx.xxx.xxx being our own IP address)

  2. #2
    Plutonium Lounger
    Join Date
    Nov 2001
    Posts
    10,550
    Thanks
    0
    Thanked 7 Times in 7 Posts

    Re: DOS attacks?

    According to Symantec, that looks like the Welchia worm trying to infect you.

  3. #3
    Plutonium Lounger Leif's Avatar
    Join Date
    Dec 2000
    Location
    U.K.
    Posts
    14,010
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: DOS attacks?

    Aha! Thank you....

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •