XMAS port scan attack from WAN (rotating I/Ps)

  • 1
  • Problem
  • Updated 2 years ago
  • In Progress
logs show new hits constantly. how can it get through satellite, dish and modem? what can I set to stop this and stonewall it? this contention is another choke and how much throughput on each scan/deny/next scan/....
Photo of Martin Seebach

Martin Seebach

  • 61 Posts
  • 8 Reply Likes
  • aggravated

Posted 2 years ago

  • 1
Photo of Bev

Bev, Champion

  • 3287 Posts
  • 1463 Reply Likes
Are the scans causing loss of connection, or is your router simply blocking them? An older router may be vulnerable, if it's more than 3 or 4 years old and, the best and easiest way to stop it is to get a new router.

If it is a subnet (block) DDOS hit, Viasat's systems will see it and stop it very quickly, if not then, odds are your best solution is a new router or, if you haven't updated your router firmware in a while, that might do the trick.
Photo of Martin Seebach

Martin Seebach

  • 61 Posts
  • 8 Reply Likes
Firmware is current. Router is older and ip addresses showing as source are external. There is one neighbor for at least 5 miles and he has his own viasat service. No houses or people in any line of site from my home. I'm in the middle of our ranch so I can be pretty sure it is not from here.
Photo of Diana

Diana, Viasat Employee

  • 2445 Posts
  • 481 Reply Likes
Martin,  Please send an email to viasatlistens@viasat.com with your account and contact information. We will be happy to look into this for you.  Please include your account and contact information in the email
Photo of michael3245


  • 76 Posts
  • 16 Reply Likes
I have noticed some traffic hitting my external wan. After the vpnfilter was announced. But I am not infected I checked my hardware not on the list. Could be just normal traffic looking for a host to infect. As long as you have a good firewall should be good.