cancel
Showing results for 
Search instead for 
Did you mean: 

Should I be worried?

Mav
Moderator
Moderator
Posts: 22,359
Thanks: 4,724
Fixes: 514
Registered: ‎06-04-2007

Should I be worried?

Just checked the Event Log of my router and saw the following couple of yellow warnings (replaced part of my IP with xxx.xxx).
Quote
Warning Nov 17 16:01:48 IDS scan parser : tcp port scan: 67.222.111.117 scanned at least 10 ports at 212.159.xxx.xxx (1 of 1) : 67.222.111.117 212.159.xxx.xxx 0040 TCP 80->63331 [...R..] seq 3261653144 win 0

Quote
Warning Nov 17 15:56:34 IDS scan parser : tcp port scan: 80.239.205.105 scanned at least 10 ports at 212.159.xxx.xxx. (1 of 1) : 80.239.205.105 212.159.xxx.xxx 0040 TCP 80->60113 [...R..] seq 187857696 win 0

And a couple of red ones:
Quote
Error Nov 17 15:57:33 FIREWALL replay check (1 of 1): Protocol: ICMP Src ip: 195.211.223.18 Dst ip: 212.159.xxx.xxx Type: Destination Unreachable Code: Fragmentation Needed and Don't Fragment was Set

Quote
Error Nov 17 15:55:50 IDS dos parser : udp flood (1 of 1) : 192.168.1.10 8.8.8.8 0067 UDP 51372->53

Is this because someone has attempted access and has been stopped?

Forum Moderator and Customer
Courage is resistance to fear, mastery of fear, not absence of fear - Mark Twain
He who feared he would not succeed sat still

3 REPLIES 3
ejs
Aspiring Hero
Posts: 5,442
Thanks: 631
Fixes: 25
Registered: ‎10-06-2010

Re: Should I be worried?

The first two are probably from normal web browsing, perhaps a server was too slow to respond, or there was congestion somewhere and packets queued up for a long time, and when the packets eventually turn up (perhaps all at once), the router is no longer expecting them, so the firewall blocks them.
Quote
Error    Nov 17 15:55:50  IDS dos parser : udp flood (1 of 1) : 192.168.1.10 8.8.8.8 0067 UDP 51372->53

Looks like you were trying to do too many DNS lookups (to a google DNS server) too fast.
Mav
Moderator
Moderator
Posts: 22,359
Thanks: 4,724
Fixes: 514
Registered: ‎06-04-2007

Re: Should I be worried?

I did a have a problem earlier whereby a few sites were timing out - not sure why. Can't remember the time this happened. Could that have been the cause of the errors?

Forum Moderator and Customer
Courage is resistance to fear, mastery of fear, not absence of fear - Mark Twain
He who feared he would not succeed sat still

ejs
Aspiring Hero
Posts: 5,442
Thanks: 631
Fixes: 25
Registered: ‎10-06-2010

Re: Should I be worried?

Yes.