DOS atattack from my printer !!!

dukester

157 posts

Master Geek

Subscriber

Topic # 110135 3-Oct-2012 19:19
My NETGEAR DGND3700 keeps issuing Security Alert [0A:EF:87] messages. [DOS Attack] : 2 [IP Spoof] packets detected in last 20 seconds, source ip [192.168.0.2]. This IP address is my Brother HL-4150 CDN printer. Why is this happening? Should I be concerned.

13306 posts

Uber Geek

Trusted

Vodafone NZ

Subscriber

Reply # 695769 3-Oct-2012 19:22
False positive Systems Engineer Vodafone NZ http://forum.vodafone.co.nz

1484 posts

Uber Geek

Trusted

ExtensITy Group

Reply # 695772 3-Oct-2012 19:24
Its the Chinese government planting software in your printer when it was assembled. They're taking over the world one printer at a time. Professional IT Solutions at an Affordable Price.

BDFL
43725 posts

Uber Geek

Administrator

Trusted

Geekzone

Subscriber

Reply # 695774 3-Oct-2012 19:28
I think it's probably the router giving false positives. [NSFW music; second Office Space scene I post today] Mauricio Freitas (Geekzone Admin, Devil's Advocate, my blog, technology disclosure, my tweets, Web Performance Optimization) Geekzone Price comparison \| Amazon Kindle order page \| How to get the best out of Geekzone \| New Zealand IT Jobs \| Geekzone News \| Jinglebugs

don@i.am.a.can.do.kiwi.nz
3132 posts

Uber Geek

Subscriber

Reply # 695775 3-Oct-2012 19:30
boby55: Its the Chinese government planting software in your printer when it was assembled. They're taking over the world one printer at a time. That's so getting less and less funny, though it's not the Chinese who scare me the most. I've seen the size of cameras on phones, my TV has a net port on it and the front of the TV is all plastic, like I'd have a clue if there's a camera hiding behind the plastic! New PVR has more computing power than my last laptop upgrade and also sits facing us all in the living room and is also connected to the net. Promote New Zealand - Get yourself a .kiwi.nz domain name!!! Check out mine - i.am.a.can.do.kiwi.nz

368 posts

Ultimate Geek

Reply # 696335 4-Oct-2012 19:01
My guess is that if you set the IP address as static and disabled all the network access retry types (default is auto) and IPv6 if not used, then the repetitive and determined network connection algorithm may rescind it's attack on your network. I would say something witty, ....but....I've got nothing.

1602 posts

Uber Geek

Trusted

Subscriber

Reply # 696536 5-Oct-2012 01:42
We were warned a few years ago by some security expert on slashdot about botnets within printers - and with ipv6 and the smart kitchen, it is highly likely that your fridge and toaster will at some point, try and kill you. But for now i agree with the above, probably a false positive. Ray Taylor Napier, NZ www.taylorcommunications.co.nz

368 posts

Ultimate Geek

Reply # 696915 5-Oct-2012 19:19
raytaylor: We were warned a few years ago by some security expert on slashdot about botnets within printers - and with ipv6 and the smart kitchen, it is highly likely that your fridge and toaster will at some point, try and kill you. But for now i agree with the above, probably a false positive. Yes. And we know the toaster has been sitting there thinking about this for at least 10 years now with it's wee Java brain. It must have a lot of information on us by now. http://www.reghardware.com/2008/09/11/wacky_toaster/ But until I read on my toast there's a problem with my printer, I'll agree with the above, probably a false positive.