from my router logs:

[DoS Attack: ACK Scan] from source: 208.68.240.18, port 80, Saturday, December 24,2011 00:42:29


there are a lot of them and tracert shows:

Tracing route to boinc2.ssl.berkeley.edu [208.68.240.18]
over a maximum of 30 hops:

1 <1 ms <1 ms <1 ms READYSHARE [192.168.1.1]
2 8 ms 5 ms 7 ms 10.28.0.1
3 53 ms 15 ms 6 ms 72.240.0.207
4 14 ms 15 ms 18 ms cer-edge-17.inet.qwest.net [208.47.34.193]
5 16 ms 14 ms 15 ms chp-brdr-04.inet.qwest.net [67.14.8.234]
6 14 ms 15 ms 15 ms te6-2-10G.ar3.chi2.gblx.net [208.178.58.137]
7 64 ms 78 ms 64 ms Hurrican-Electric-LLC.Port-channel100.ar3.SJC2.gblx.net [64.214.174.246]
8 71 ms 74 ms 74 ms 10gigabitethernet3-2.core1.pao1.he.net [72.52.92.69]
9 66 ms 75 ms 64 ms 64.71.140.42
10 106 ms 116 ms 107 ms 208.68.243.254
11 113 ms 106 ms 108 ms boinc2.ssl.berkeley.edu [208.68.240.18]


ANY IDEAS as to why my router rejects this?

does this cause any type of outage or you can't connect to a specific site? I've seen the [DoS Attack] come up in my logs and I don't think it's anything major

I also checked the IP on multiple DNSBLs and it comes up clean (unless it's a brand new threat)..

is not listed in bl.spamcop.net
is not listed in pbl.spamhaus.org
is not listed in cbl.abuseat.org
is not listed in IP.v4BL.org
is not listed in sbl.spamhaus.org
is not listed in xbl.spamhaus.org

source

ANY IDEAS as to why my router rejects this?

The SETI@home Servers are:

208.68.240.13 download
208.68.240.16 upload
208.68.240.18 download
208.68.240.20 scheduler

They never contact your computer on their own,
only after your BOINC contacts them they (may) respond.

If the response is too late (connection dropped/timeout at your computer)
your router may think that this too late response is some kind of "attack".

---

 


- ALF - "Find out what you don't do well ..... then don't do it!" :)