Several times a week my firewall goes off with this warning...
Date: 12/11/2004 Time: 10:54:29
Attempted Intrusion "Welchia_ICMP_Scan" against your machine was detected and blocked.
Intruder: 204.210.130.133(4096).
Protocol: ICMP.
Attacked Port: echo(7).
The address that it was sent from is always the same. I ran a whois from several sites and it comes back Road Runner in New York state. I contacted them and never get anything but an automatic reply to my e-mail.
What can I do to stop this?
Thanks
David
"Welchia_ICMP_Scan"
Started by
rhomeeyeball
, Dec 11 2004 11:11 AM
1 reply to this topic
#2
Tuxedo Jack
-
- Expert
-
- 1,758 posts
Creator of TuxPE, a Cat5-o'-9-Tails, Etherkillers, and more
Posted 11 December 2004 - 08:23 PM
You can't, short of taking down the offending user's machine. Time Warner doesn't give a damn about bots on their WAN - believe me, I've called and complained vocally several times.
Signature file is under revision. This will be back shortly.
