Cable Modem Log

[KilluminatiStyle]

Skimming through my modem log today I saw TONS of entries like this:

Aug/17/2007 09:09:53 SYN Flood Attack Detect Packet Dropped

and quite a few like this:

----------------------------------------------------SOURCE-----------DESTINATION
Aug/14/2007 18:41:02 Ping of Death Detect 69.0.26.11:32905 216.254.255.9:40372 Packet Dropped

Is this something I should be concerned with? Should I contact my ISP?

[mbossman2]

not surprising. it has gotten so easy to launch attacks these days (but also just as easy to defeat the common ones).

If your connection is being interfered with (speed wise) I would but otherwise just ignore it. your modem does - it just drops the packets.

whoever is doing it will eventually get bored and move onto another target or their own ISP will pick up on it

[KilluminatiStyle]

Well I'm going to keep an eye on it then. I've got several full pages in the log that have nothing but the "SYN Flood Attacks".

I recall awhile back I was getting some "TWINGE" attacks too. Someone doesn't like me.

**EDIT**

Also just wanted to add that my internet speed is actually 2MB faster than it should be \o/

I'm signed up with PrairieWave Communications and initially it was only a 5mb line, but I was always getting just over 10mb

Shortly after I signed up with them I got a letter in the mail saying that they had upgraded their system and that I was now receiving 8mb, but I still get just over 10mb.

[KilluminatiStyle]

Also, not sure if this could be related... but I have my router setup to assign addresses starting at 192.168.1.110

However, all of my PC's seem to be getting 192.168.1.116 or higher. Seems kinda strange to me. I thought that it would start at the first available address?

[mairving]

The problem with looking at logs is that they often cause unneccessary paranoia. Many 'attacks' that you see in the logs aren't really directed at you. Most are done on whole blocks of IP addresses just looking for some vulnerabilities. If you reported them to your ISP they wouldn't do anything.

[mojo]

Originally Posted by KilluminatiStyle Also, not sure if this could be related... but I have my router setup to assign addresses starting at 192.168.1.110 However, all of my PC's seem to be getting 192.168.1.116 or higher. Seems kinda strange to me. I thought that it would start at the first available address?

Depending on the router it may hand out IPs "backwards" starting at the top of the range you have given it. Most linux based routers will do this. So if the top of you range was 192.168.1.130 and the router has seen around 10 computers in its entire lifetime, you won't get down to 192.168.1.110 until it sees more computers and needs to use those numbers.

[toomyg]

Originally Posted by KilluminatiStyle Skimming through my modem log today I saw TONS of entries like this: Aug/17/2007 09:09:53 SYN Flood Attack Detect Packet Dropped and quite a few like this: ----------------------------------------------------SOURCE-----------DESTINATION Aug/14/2007 18:41:02 Ping of Death Detect 69.0.26.11:32905 216.254.255.9:40372 Packet Dropped Is this something I should be concerned with? Should I contact my ISP?

I used to have a router by SMC sure it's the same as a DSL mobem that if I watched videos on line it would return flood attacks in it's logs every time BUT everything worked just fine I learned as stated in other post to ignore them.