XMAS port scan attack from WAN (rotating I/Ps)

  • 1
  • Problem
  • Updated 7 days ago
  • In Progress
logs show new hits constantly. how can it get through satellite, dish and modem? what can I set to stop this and stonewall it? this contention is another choke and how much throughput on each scan/deny/next scan/....
Photo of Martin Seebach

Martin Seebach

  • 22 Posts
  • 2 Reply Likes
  • aggravated

Posted 2 weeks ago

  • 1
Photo of Bev

Bev, Champion

  • 3009 Posts
  • 1250 Reply Likes
Are the scans causing loss of connection, or is your router simply blocking them? An older router may be vulnerable, if it's more than 3 or 4 years old and, the best and easiest way to stop it is to get a new router.

If it is a subnet (block) DDOS hit, Viasat's systems will see it and stop it very quickly, if not then, odds are your best solution is a new router or, if you haven't updated your router firmware in a while, that might do the trick.
Photo of Martin Seebach

Martin Seebach

  • 22 Posts
  • 2 Reply Likes
Firmware is current. Router is older and ip addresses showing as source are external. There is one neighbor for at least 5 miles and he has his own viasat service. No houses or people in any line of site from my home. I'm in the middle of our ranch so I can be pretty sure it is not from here.
Photo of Diana

Diana, Viasat Employee

  • 2154 Posts
  • 384 Reply Likes
Martin,  Please send an email to viasatlistens@viasat.com with your account and contact information. We will be happy to look into this for you.  Please include your account and contact information in the email
Photo of michael3245

michael3245

  • 28 Posts
  • 3 Reply Likes
I have noticed some traffic hitting my external wan. After the vpnfilter was announced. But I am not infected I checked my hardware not on the list. Could be just normal traffic looking for a host to infect. As long as you have a good firewall should be good.