Jump to content


Photo

"Welchia_ICMP_Scan"


  • Please log in to reply
1 reply to this topic

#1 rhomeeyeball

rhomeeyeball

    Member

  • New Member
  • Pip
  • 1 posts

Posted 11 December 2004 - 11:11 AM

Several times a week my firewall goes off with this warning...

Date: 12/11/2004 Time: 10:54:29
Attempted Intrusion "Welchia_ICMP_Scan" against your machine was detected and blocked.
Intruder: 204.210.130.133(4096).
Protocol: ICMP.
Attacked Port: echo(7).

The address that it was sent from is always the same. I ran a whois from several sites and it comes back Road Runner in New York state. I contacted them and never get anything but an automatic reply to my e-mail.

What can I do to stop this?

Thanks
David

#2 Tuxedo Jack

Tuxedo Jack

    Creator of TuxPE, a Cat5-o'-9-Tails, Etherkillers, and more

  • Expert
  • PipPipPipPipPip
  • 1,758 posts

Posted 11 December 2004 - 08:23 PM

You can't, short of taking down the offending user's machine. Time Warner doesn't give a damn about bots on their WAN - believe me, I've called and complained vocally several times.
Signature file is under revision. This will be back shortly.




Member of UNITE
Support SpywareInfo Forum - click the button