Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Should I be worried?
Topic Options
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
- Plusnet Community
- :
- Forum
- :
- Help with my Plusnet services
- :
- Broadband
- :
- Should I be worried?
Should I be worried?
17-11-2012 6:36 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
Just checked the Event Log of my router and saw the following couple of yellow warnings (replaced part of my IP with xxx.xxx).
And a couple of red ones:
Is this because someone has attempted access and has been stopped?
Quote Warning Nov 17 16:01:48 IDS scan parser : tcp port scan: 67.222.111.117 scanned at least 10 ports at 212.159.xxx.xxx (1 of 1) : 67.222.111.117 212.159.xxx.xxx 0040 TCP 80->63331 [...R..] seq 3261653144 win 0
Quote Warning Nov 17 15:56:34 IDS scan parser : tcp port scan: 80.239.205.105 scanned at least 10 ports at 212.159.xxx.xxx. (1 of 1) : 80.239.205.105 212.159.xxx.xxx 0040 TCP 80->60113 [...R..] seq 187857696 win 0
And a couple of red ones:
Quote Error Nov 17 15:57:33 FIREWALL replay check (1 of 1): Protocol: ICMP Src ip: 195.211.223.18 Dst ip: 212.159.xxx.xxx Type: Destination Unreachable Code: Fragmentation Needed and Don't Fragment was Set
Quote Error Nov 17 15:55:50 IDS dos parser : udp flood (1 of 1) : 192.168.1.10 8.8.8.8 0067 UDP 51372->53
Is this because someone has attempted access and has been stopped?
Forum Moderator and Customer
Courage is resistance to fear, mastery of fear, not absence of fear - Mark Twain
He who feared he would not succeed sat still
Message 1 of 4
(1,308 Views)
3 REPLIES 3
Re: Should I be worried?
17-11-2012 6:54 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
The first two are probably from normal web browsing, perhaps a server was too slow to respond, or there was congestion somewhere and packets queued up for a long time, and when the packets eventually turn up (perhaps all at once), the router is no longer expecting them, so the firewall blocks them.
Looks like you were trying to do too many DNS lookups (to a google DNS server) too fast.
Quote Error Nov 17 15:55:50 IDS dos parser : udp flood (1 of 1) : 192.168.1.10 8.8.8.8 0067 UDP 51372->53
Looks like you were trying to do too many DNS lookups (to a google DNS server) too fast.
Message 2 of 4
(459 Views)
Re: Should I be worried?
17-11-2012 9:52 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
I did a have a problem earlier whereby a few sites were timing out - not sure why. Can't remember the time this happened. Could that have been the cause of the errors?
Forum Moderator and Customer
Courage is resistance to fear, mastery of fear, not absence of fear - Mark Twain
He who feared he would not succeed sat still
Message 3 of 4
(459 Views)
Re: Should I be worried?
17-11-2012 10:08 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
Yes.
Message 4 of 4
(459 Views)
Topic Options
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page