topic Re: Ping attacks from the outside in Network Security https://community.cisco.com/t5/network-security/ping-attacks-from-the-outside/m-p/909455#M960702 <HTML><HEAD></HEAD><BODY><P>so is the ip addresses I'm seeing valid then or is it being masked? Is there somewhere I can report this or do anything besides be happy that my firewall is blocking the attempts? </P></BODY></HTML> Thu, 25 Oct 2007 18:58:53 GMT wgranada1 2007-10-25T18:58:53Z Ping attacks from the outside https://community.cisco.com/t5/network-security/ping-attacks-from-the-outside/m-p/909453#M960698 <P>Good day</P><P></P><P>I'm not sure if this is true or not but on my monitoring messages for my firewall I notice a log of deny udp/icmp packets coming from the same 3-4 ip addresses. this has been going on for about an hour now what can I do to stop that? Is someone running a port scan trying to break into my firewall?</P> Mon, 11 Mar 2019 11:30:52 GMT https://community.cisco.com/t5/network-security/ping-attacks-from-the-outside/m-p/909453#M960698 wgranada1 2019-03-11T11:30:52Z Re: Ping attacks from the outside https://community.cisco.com/t5/network-security/ping-attacks-from-the-outside/m-p/909454#M960700 <HTML><HEAD></HEAD><BODY><P>ping/port scans are a dime a dozen on the Internet. That doesn't mean they should be taken lightly though, as they are usually the sign of some sort of reconnaissance attack. As long as your firewall is blocking them, that is fine. If you have something in front of your firewall that can block pings, you can block them before they even hit your firewall.</P></BODY></HTML> Thu, 25 Oct 2007 18:51:34 GMT https://community.cisco.com/t5/network-security/ping-attacks-from-the-outside/m-p/909454#M960700 srue 2007-10-25T18:51:34Z Re: Ping attacks from the outside https://community.cisco.com/t5/network-security/ping-attacks-from-the-outside/m-p/909455#M960702 <HTML><HEAD></HEAD><BODY><P>so is the ip addresses I'm seeing valid then or is it being masked? Is there somewhere I can report this or do anything besides be happy that my firewall is blocking the attempts? </P></BODY></HTML> Thu, 25 Oct 2007 18:58:53 GMT https://community.cisco.com/t5/network-security/ping-attacks-from-the-outside/m-p/909455#M960702 wgranada1 2007-10-25T18:58:53Z Re: Ping attacks from the outside https://community.cisco.com/t5/network-security/ping-attacks-from-the-outside/m-p/909456#M960704 <HTML><HEAD></HEAD><BODY><P>hi there , being happy the firewall is doing the job of blocking unsolicited host is just not enough as a network admin. Just think of a stranger nocking your home door for two hours three or four hours, you would definately seek to find out more and take some action. This is something you would record and log and not just let it go but watch your logs, one thing you could do is to take notes of that external host IP addres and find which ISP is providing the IP address, you could search "whois" database , that,will provide you with which ISP is the IP block under and report to abuse records on the ISP side. </P></BODY></HTML> Thu, 25 Oct 2007 19:25:33 GMT https://community.cisco.com/t5/network-security/ping-attacks-from-the-outside/m-p/909456#M960704 JORGE RODRIGUEZ 2007-10-25T19:25:33Z Re: Ping attacks from the outside https://community.cisco.com/t5/network-security/ping-attacks-from-the-outside/m-p/909457#M960705 <HTML><HEAD></HEAD><BODY><P>Yeah I've already found out who, well at least which ISP it is coming from and reported it already. Just was wondering if there was anything else I can do besides that.</P><P>Thank you for the info though</P></BODY></HTML> Thu, 25 Oct 2007 19:30:55 GMT https://community.cisco.com/t5/network-security/ping-attacks-from-the-outside/m-p/909457#M960705 wgranada1 2007-10-25T19:30:55Z Re: Ping attacks from the outside https://community.cisco.com/t5/network-security/ping-attacks-from-the-outside/m-p/909458#M960706 <HTML><HEAD></HEAD><BODY><P>it is good practice to have anothe device in front of pix as srue indicated in post so that these attacks do not hit your outside interface firewall. </P></BODY></HTML> Thu, 25 Oct 2007 20:33:59 GMT https://community.cisco.com/t5/network-security/ping-attacks-from-the-outside/m-p/909458#M960706 JORGE RODRIGUEZ 2007-10-25T20:33:59Z