Your forum username:
Do you already have an account?
Forgot your password?
  • Log in or Sign up


    Welcome to Sky User - The Unofficial Support Forum for everything Sky! - Proudly helping over 65k members.


    Advertisement

    Page 1 of 2 12 LastLast
    Results 1 to 10 of 13

    DoS attacks and then drop-out

    This is a discussion on DoS attacks and then drop-out within the Sky Broadband help forums, part of the Sky Broadband help and support category; Hi this is what has appeared in my log today, I get these occasioanlly when my sisters goes onto messenger ...

    1. #1
      itype's Avatar
      itype is offline Sky User Member
      Exchange: Basingstoke, THBZ
      Broadband ISP: Sky Fibre Unlimited
      Router: Sky Hub SR101
      Sky TV: Sky+HD box
      Join Date
      Oct 2007
      Location
      Hampshire
      Posts
      315
      Thanks
      12
      Thanked 3 Times in 2 Posts

      DoS attacks and then drop-out

      Hi this is what has appeared in my log today, I get these occasioanlly when my sisters goes onto messenger and I know for a fact that it comes from one of my sisters mates.

      Wed, 2007-10-24 14:41:39 - TCP Packet - Source:82.0.182.200,1924 Destination:90.???.???.??,1123 - [DOS]
      Wed, 2007-10-24 14:41:39 - TCP Packet - Source:82.0.182.200,1927 Destination:90.???.???.??,1123 - [DOS]
      Wed, 2007-10-24 14:41:39 - TCP Packet - Source:82.0.182.200,1925 Destination:90.???.???.??,1123 - [DOS]
      Wed, 2007-10-24 14:41:39 - TCP Packet - Source:82.0.182.200,1928 Destination:90.???.???.??,1123 - [DOS]
      This same IP address appears in my router occasionally. I have reset my router many a time and obtained new IP adresses. I have contact SKY and all they could say was "we can't handle that here"...I know for fact you can because they are my ISP. They passed me onto Netgear who passed me back to sky and then told me to contact Microsoft. What the HELL does microsoft have to do with the issue.

      I have NO malware, spyware or virus on my PC as I have scanned many times. What do you guys have to day. The connection drops out sometimes of which I assuming is die to the large amount of DoS attacks. The DoS business has started happening only other the last month.

      Enough said.


    2. Advertisement
    3. #2
      James67's Avatar
      James67 is offline Sky User Member
      Exchange:
      Broadband ISP: Other ISP
      Router: Non Sky Router
      Sky TV: Freesat
      Join Date
      Sep 2007
      Posts
      1,789
      Thanks
      0
      Thanked 2 Times in 2 Posts
      Blog Entries
      3

      Re: DoS attacks and then drop-out

      I doubt very much whether a single machine on a cable connection can bring down a broadband connection. They might slow you down a bit, but not bring it down entirely. You're seeing cause and effect where there is none.

      But if you want to stop this "attack", you need to contact the company which is providing the attacker's Internet service, not Sky. In this case it's Virgin Media you need to contact. The RIPE database gives this information:
      remarks: -------------------------------------------------------
      remarks: For abuse notifications please -
      remarks: file an online case @ NetReport - Virgin Media
      remarks: +44 1633 710142 (Voicemail Only)
      remarks: -------------------------------------------------------
      They'll contact their customer with advice on how to resolve this problem (information about Virus software etc) and a warning that if they fail to stop it, their Internet service will be terminated.

      It won't solve your dropout problems though.

    4. #3
      itype's Avatar
      itype is offline Sky User Member
      Exchange: Basingstoke, THBZ
      Broadband ISP: Sky Fibre Unlimited
      Router: Sky Hub SR101
      Sky TV: Sky+HD box
      Join Date
      Oct 2007
      Location
      Hampshire
      Posts
      315
      Thanks
      12
      Thanked 3 Times in 2 Posts

      Re: DoS attacks and then drop-out

      I have handed in the complaint to NTL AKA Virgin Media.

      Hopefully something will get done about this.

      Thank you, the drop outs are pretty random....will see what happens but it happens every few days. It never used to though.

    5. #4
      Isitme's Avatar
      Isitme is offline Sky User Moderator
      Exchange: Bannockburn
      Broadband ISP: Sky Fibre Unlimited
      Router: Sky Hub SR102
      Sky TV: Sky+ HD
      Join Date
      Dec 2006
      Location
      Central Scotland
      Posts
      34,131
      Thanks
      64
      Thanked 1,641 Times in 1,602 Posts

      Re: DoS attacks and then drop-out

      Strangely enough Who is my ISP reports this as being in a hedge beside a railway line near Reading

      It just shows that this service is not very accurate, or perhaps NTL have an underground bunker there

      TomD


      Please note the views and recommendations in my posts are my own and in no way reflect the views of SkyUser.


      Useful Utilites

      http://www.nirsoft.net/utils/wifi_information_view.html/ TCPOptimiser /Test Socket

      Note - When downloading always select the Custom install or you will end up with stuff you don't want.





    6. #5
      itype's Avatar
      itype is offline Sky User Member
      Exchange: Basingstoke, THBZ
      Broadband ISP: Sky Fibre Unlimited
      Router: Sky Hub SR101
      Sky TV: Sky+HD box
      Join Date
      Oct 2007
      Location
      Hampshire
      Posts
      315
      Thanks
      12
      Thanked 3 Times in 2 Posts

      Re: DoS attacks and then drop-out

      I have had another set through (I am certain they are through Messenger from one of her contacts, ? my IP).

      Wed, 2007-10-24 21:48:36 - TCP Packet - Source:86.152.119.243,62152 Destination:90.???.???.??,1314 - [DOS]
      Wed, 2007-10-24 21:48:36 - TCP Packet - Source:86.152.119.243,62153 Destination:90.???.???.??,1314 - [DOS]
      Wed, 2007-10-24 21:48:36 - TCP Packet - Source:86.152.119.243,62154 Destination:90.???.???.??,1314 - [DOS]
      Wed, 2007-10-24 21:48:36 - TCP Packet - Source:86.152.119.243,62156 Destination:90.???.???.??,1314 - [DOS]
      Wed, 2007-10-24 21:48:36 - TCP Packet - Source:86.152.119.243,62157 Destination:90.???.???.??,1314 - [DOS]
      This time it is telling me it comes from BT. I use Ripe Who is for my IP address and they seem OK. I am recording all the DoS attacks in notepad for reference.
      Last edited by itype; 25-10-07 at 12:30 PM.

    7. #6
      James67's Avatar
      James67 is offline Sky User Member
      Exchange:
      Broadband ISP: Other ISP
      Router: Non Sky Router
      Sky TV: Freesat
      Join Date
      Sep 2007
      Posts
      1,789
      Thanks
      0
      Thanked 2 Times in 2 Posts
      Blog Entries
      3

      Re: DoS attacks and then drop-out

      Was it just 5 packets, or is that just a sample of a sustained run of connection attempts? If it's just 5 packets, it's really nothing to worry about. In fact if all you're getting is a handful of message like this a few times a day, I wouldn't even bother reporting them. Those messages are in effect say, "someone tried to gain unauthorised access to you network, but don't worry, the router blocked them".

      I have a server installed at an Internet datacentre where it is exposed to the full ravages of the Internet. It has a packet filter which blocks and logs attempted unauthorised acccesses. I get some kind of an attack sometimes as often as every 30 seconds and for it to go 20 minutes without an attack is pretty rare. It's got to the point where I might have to reconfigure the filter so that it doesn't log attempts to access Windows Networking facilities because they're so frequent and they'd never succeed on my server anyway because it doesn't actually run Windows.

    8. #7
      itype's Avatar
      itype is offline Sky User Member
      Exchange: Basingstoke, THBZ
      Broadband ISP: Sky Fibre Unlimited
      Router: Sky Hub SR101
      Sky TV: Sky+HD box
      Join Date
      Oct 2007
      Location
      Hampshire
      Posts
      315
      Thanks
      12
      Thanked 3 Times in 2 Posts

      Re: DoS attacks and then drop-out

      This is what I got from my the router log today when my sister went on messenger:

      Thu, 2007-10-25 22:03:05 - TCP Packet - Source:86.153.24.84,62600 Destination:90.???.???.??,1370 - [DOS]
      Thu, 2007-10-25 22:03:05 - TCP Packet - Source:86.153.24.84,62601 Destination:90.???.???.??,1370 - [DOS]
      Thu, 2007-10-25 22:03:05 - TCP Packet - Source:86.153.24.84,62602 Destination:90.???.???.??,1370 - [DOS]
      Thu, 2007-10-25 22:03:05 - TCP Packet - Source:86.153.24.84,62603 Destination:90.???.???.??,1370 - [DOS]
      Thu, 2007-10-25 22:03:05 - TCP Packet - Source:86.153.24.84,62604 Destination:90.???.???.??,1370 - [DOS]
      Thu, 2007-10-25 22:03:08 - TCP Packet - Source:86.153.24.84,62598 Destination:90.???.???.??,1370 - [DOS]
      Thu, 2007-10-25 22:03:08 - TCP Packet - Source:86.153.24.84,62599 Destination:90.???.???.??,1370 - [DOS]
      Thu, 2007-10-25 22:03:08 - TCP Packet - Source:86.153.24.84,62600 Destination:90.???.???.??,1370 - [DOS]
      Thu, 2007-10-25 22:03:08 - TCP Packet - Source:86.153.24.84,62601 Destination:90.???.???.??,1370 - [DOS]
      Thu, 2007-10-25 22:03:08 - TCP Packet - Source:86.153.24.84,62602 Destination:90.???.???.??,1370 - [DOS]
      Thu, 2007-10-25 22:03:14 - TCP Packet - Source:86.153.24.84,62600 Destination:90.???.???.??,1370 - [DOS]
      Thu, 2007-10-25 22:03:14 - TCP Packet - Source:86.153.24.84,62601 Destination:90.???.???.??,1370 - [DOS]
      Thu, 2007-10-25 22:03:14 - TCP Packet - Source:86.153.24.84,62602 Destination:90.???.???.??,1370 - [DOS]
      Thu, 2007-10-25 22:03:14 - TCP Packet - Source:86.153.24.84,62603 Destination:90.???.???.??,1370 - [DOS]
      Thu, 2007-10-25 22:03:14 - TCP Packet - Source:86.153.24.84,62604 Destination:90.???.???.??,1370 - [DOS]
      Thu, 2007-10-25 22:03:28 - UDP Packet - Source:86.153.24.84,62719 Destination:90.???.???.??,1376 - [DOS]
      Thu, 2007-10-25 22:03:28 - UDP Packet - Source:86.153.24.84,62720 Destination:90.???.???.??,1376 - [DOS]
      Thu, 2007-10-25 22:03:28 - UDP Packet - Source:86.153.24.84,62721 Destination:90.???.???.??,1376 - [DOS]
      Thu, 2007-10-25 22:03:28 - UDP Packet - Source:86.153.24.84,62722 Destination:90.???.???.??,1376 - [DOS]
      Thu, 2007-10-25 22:03:28 - UDP Packet - Source:86.153.24.84,62723 Destination:90.???.???.??,1376 - [DOS]
      Thu, 2007-10-25 22:59:51 - TCP Packet - Source:86.149.172.63,56000 Destination:90.???.???.??,2079 - [DOS]
      Thu, 2007-10-25 22:59:51 - TCP Packet - Source:86.149.172.63,56001 Destination:90.???.???.??,2079 - [DOS]
      Thu, 2007-10-25 22:59:51 - TCP Packet - Source:86.149.172.63,56002 Destination:90.???.???.??,2079 - [DOS]
      Thu, 2007-10-25 22:59:51 - TCP Packet - Source:86.149.172.63,56003 Destination:90.???.???.??,2079 - [DOS]
      Thu, 2007-10-25 22:59:51 - TCP Packet - Source:86.149.172.63,56004 Destination:90.???.???.??,2079 - [DOS]
      LOTS more than usual.
      Last edited by itype; 26-10-07 at 12:01 AM.

    9. #8
      James67's Avatar
      James67 is offline Sky User Member
      Exchange:
      Broadband ISP: Other ISP
      Router: Non Sky Router
      Sky TV: Freesat
      Join Date
      Sep 2007
      Posts
      1,789
      Thanks
      0
      Thanked 2 Times in 2 Posts
      Blog Entries
      3

      Re: DoS attacks and then drop-out

      Is that it? Seriously, mate, stop worrying about it. That's nothing. Total number of unauthorised attempts on my server:
      • 25 October - 9731
      • 24 October - 5704
      • 23 October - 17419
      • 22 October - 15860
      • 21 October - 8394
      • 20 October - 6874
      • 19 October - 2515
      There is nothing, and I mean nothing alarming about the log records you're seeing.

    10. #9
      itype's Avatar
      itype is offline Sky User Member
      Exchange: Basingstoke, THBZ
      Broadband ISP: Sky Fibre Unlimited
      Router: Sky Hub SR101
      Sky TV: Sky+HD box
      Join Date
      Oct 2007
      Location
      Hampshire
      Posts
      315
      Thanks
      12
      Thanked 3 Times in 2 Posts

      Re: DoS attacks and then drop-out

      So, these DoS attacks will NOT cause my router and internet connection to fail?

      Hmmm, will see what happens in a few days. Would love to get the new router though.

    11. #10
      James67's Avatar
      James67 is offline Sky User Member
      Exchange:
      Broadband ISP: Other ISP
      Router: Non Sky Router
      Sky TV: Freesat
      Join Date
      Sep 2007
      Posts
      1,789
      Thanks
      0
      Thanked 2 Times in 2 Posts
      Blog Entries
      3

      Re: DoS attacks and then drop-out

      God no, the router labelling this entries as denial-of-service attacks is a bit misleading, because you need to be getting thousands of these things per second, continuously, before you start loosing service. And even then all that'll happen is your connection will slow down to the point where it's basically unusable, it won't actually drop the connection.

     

     
    Page 1 of 2 12 LastLast

    Tags for this Thread

    Posting Permissions

    • You may not post new threads
    • You may not post replies
    • You may not post attachments
    • You may not edit your posts
    •  
    SkyUser - Copyright © 2006-2017. SatDish and NewsreadeR | SkyUser is in no way affiliated with Sky Broadband / BSkyB
    RIPA NOTICE: NO CONSENT IS GIVEN FOR INTERCEPTION OF PAGE TRANSMISSION