I'll torch his IP and see whats coming out of it. On Fri, Oct 3, 2014 at 10:58 PM, Bill Prince < [email protected]> wrote:
> We recently had an incident with a Dlink router participating with a DDoS > attack. All the outgoing traffic was on port 1900, so it made it easy to > identify. Firmware upgrade fixed it. > > bp > > > On 10/3/2014 7:38 PM, RickG wrote: > >> I've got a customer complaining about intermittent speed issues and short >> cut off's on his connection. My MT box shows he has a high connection >> rate. >> I also noticed in the logs on my Netgear router that his IP shows with the >> following message: [DoS attack: Smurf] attack packets in last 20 sec from >> ip [10.10.45.103], Friday, Oct 03,2014 16:05:51 >> I assume he has a virus but he says he has run virus scans on all his >> computers and devices. I'm not sure what to tell him next. Any ideas? >> -------------- next part -------------- >> An HTML attachment was scrubbed... >> URL: <http://mail.butchevans.com/pipermail/mikrotik/ >> attachments/20141003/74df16e8/attachment.html> >> _______________________________________________ >> Mikrotik mailing list >> [email protected] >> http://mail.butchevans.com/mailman/listinfo/mikrotik >> >> Visit http://blog.butchevans.com/ for tutorials related to Mikrotik >> RouterOS >> >> > _______________________________________________ > Mikrotik mailing list > [email protected] > http://mail.butchevans.com/mailman/listinfo/mikrotik > > Visit http://blog.butchevans.com/ for tutorials related to Mikrotik > RouterOS > -- -RickG KyWiFi -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://mail.butchevans.com/pipermail/mikrotik/attachments/20141003/125a1f52/attachment.html> _______________________________________________ Mikrotik mailing list [email protected] http://mail.butchevans.com/mailman/listinfo/mikrotik Visit http://blog.butchevans.com/ for tutorials related to Mikrotik RouterOS
