Solved Log entry on router has [DoS Attack: RST Scan] What is it?

Gateway / E-6100
April 20, 2013 at 15:09:43
Specs: Windows XP Pro, P4 3.2 HT 2 GB Ram.
I have a Netgear N300 Wireless ADSL+ Modem Router model DGN2200v3. I look in the logs I see.

[DoS attack: RST Scan] from source: 206.161.219.210:80, Saturday, April 20,2013 12:56:29
[DoS attack: ACK Scan] from source: 95.211.29.3:80, Saturday, April 20,2013 10:17:38
[DoS attack: ACK Scan] from source: 199.34.228.53:80, Saturday, April 20,2013 09:36:31
[DoS attack: ACK Scan] from source: 95.211.29.3:80, Saturday, April 20,2013 08:46:22
[DoS attack: ACK Scan] from source: 37.59.18.81:21002, Saturday, April 20,2013 05:48:30

What could be going on? Should I be concerned?


See More: Log entry on router has [DoS Attack: RST Scan] What is it?

Report •


#1
April 21, 2013 at 08:25:23
✔ Best Answer
Denial of service attack

Report •

#2
April 21, 2013 at 13:27:40
Your firewall is doing its stuff and has presumably prevented this attack so you shouldn't need to worry.

Just the same, it would be worth checking that all your ports are stealthed, using the "Shields Up" or "PC Flank" test.

Always pop back and let us know the outcome - thanks


Report •

#3
April 22, 2013 at 05:25:16
Why are they doing this? Do they have nothing else to do?

Report •

Related Solutions

#4
April 22, 2013 at 08:53:13
Re #3
Maybe, but they can also be criminal gangs who will then ask for money to get your computer working again (which they never do).

Always pop back and let us know the outcome - thanks


Report •

#5
April 22, 2013 at 19:05:28
Oh I see. I would never give them money. I know better.

Report •

#6
May 5, 2013 at 19:32:01
This is still going on. Is there anything I can do about this? The reason I ask is because all of a sudden my internet will get slow. I looked at the log right when it was slow. It showed a DoS Attack. Could this be anything to do with my direct TV reciver being connected to my router? It was hooked up like that to get the VOD from Direct TV. Would contacting my ISP will they do anything? Something has to be done. Really I have been having issues for awhile it seems it started back in January. Im msure ome of you remember me posting about the Gateway E6100 With Windows XP Pro
with some issues I was having. I was helped in getting it cleaned.

Report •

#7
May 5, 2013 at 19:51:15
You can see who these are from by putting the IP addresses (set of four figures before the colon) in the search here:
http://whois.arin.net/ui
(the figure after the colon is the port).

Still can't see why if they are being blocked they should slow your system. It could just be coincidence.

Did you do the Shields Up test to see if your ports were stealthed (showing green)?
https://www.grc.com/x/ne.dll?bh0bkyd2

Always pop back and let us know the outcome - thanks


Report •

#8
May 5, 2013 at 19:53:14
I did the Shields up and it said I was safe.

Report •

#9
May 5, 2013 at 19:57:06
It is happiening too much to be coincidence.
I just tried a test at pc flank and it said too many connections.

Report •

#10
May 6, 2013 at 08:04:10
There is current reported problem on PC Flank which trots out "too many connections" so disregard that.

Not sure what you mean by safe. Were all the ports stealthed (green) in Shields Up? If so then you are not even visible to outsiders so they can't possibly be getting through. They are just polling for open ports using computers and your router is aware of that fact.

If your ports are not stealthed but closed, they know you are there but they still can't get through.

If they are open then they didn't ought to be and you have problems.

Always pop back and let us know the outcome - thanks


Report •


Ask Question