Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Scary Stuff in My Router Log
Topic Options
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
- Plusnet Community
- :
- Forum
- :
- Help with my Plusnet services
- :
- Broadband
- :
- Scary Stuff in My Router Log
Scary Stuff in My Router Log
02-02-2012 2:43 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
I have my router (Netgear DG834G) set up to email me logs every few days. But recently I've been seeing some worrying things in the form of a "NETGEAR *Security Alert* [b2:ec:c5]" One email from this morning contains this:
UDP Packet - Source:82.39.72.122,6146 Destination:87.XXXXXXXX - [DOS]
TCP Packet - Source:68.53.159.141,3870 Destination:87.XXXXXXX - [DOS]
UDP Packet - Source:24.222.6.190,10070 Destination:87.XXXXXXX - [DOS]
The 87. "i think" is my IP address? so I didnt include it in the message. One from last night had about 20 of these.
What is this? Does it mean someone is trying to access my PC...should I be worried? It has only recently started, I havent seen it before in the nearly 7 years i've had the router.
UDP Packet - Source:82.39.72.122,6146 Destination:87.XXXXXXXX - [DOS]
TCP Packet - Source:68.53.159.141,3870 Destination:87.XXXXXXX - [DOS]
UDP Packet - Source:24.222.6.190,10070 Destination:87.XXXXXXX - [DOS]
The 87. "i think" is my IP address? so I didnt include it in the message. One from last night had about 20 of these.
What is this? Does it mean someone is trying to access my PC...should I be worried? It has only recently started, I havent seen it before in the nearly 7 years i've had the router.
Message 1 of 6
(1,370 Views)
5 REPLIES 5
Re: Scary Stuff in My Router Log
02-02-2012 2:55 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
I believe it is an indication that your Netgear firewall is successfully doing its job of blocking attempted DOS attacks (I get short bursts of them from time to time and then none for weeks on end...........)
Message 2 of 6
(804 Views)
Re: Scary Stuff in My Router Log
02-02-2012 2:56 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
Message 3 of 6
(804 Views)
Re: Scary Stuff in My Router Log
02-02-2012 2:58 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
You can get that if you have used a p2p program recently and its turned off, anyone that has had a connection to your pc will have your IP saved until its flushed over time. So you will get repeated attempts for its attempts to handshake looking for a connection.
But anyway have a look in your routers security settings for "Block Ping from Internet" or similar and enable it., as by those logs if you are not a p2p user then it could be someone is using infected pc's trying to find an insecure router/pc/webserver to infect. If they can't See your router they can't.
But anyway have a look in your routers security settings for "Block Ping from Internet" or similar and enable it., as by those logs if you are not a p2p user then it could be someone is using infected pc's trying to find an insecure router/pc/webserver to infect. If they can't See your router they can't.
FTTP 500 regrade from Tues 28th November
Message 4 of 6
(804 Views)
Re: Scary Stuff in My Router Log
02-02-2012 3:01 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
Quote from: _Adam_Walker_ I'd only be concerned if these start to appear on a regular basis, they do seem to be from different origins with the first IP being on Virgin Media's network.
They do appear regularly Several dozen since December. I had 5 email logs from the router yesterday, with about 100 of those in total.
I've never used p2p, you mean fileshareing?
Message 5 of 6
(804 Views)
Re: Scary Stuff in My Router Log
02-02-2012 4:52 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
Yes file sharing, but you can be using it and not know it. Some games when patching offload the bandwidth on to your connection, steam uses it for near enough all its games if you don't turn it off. Plus a recent update to flash player has added a new p2p option, no idea where it is used but its there for a reason.
FTTP 500 regrade from Tues 28th November
Message 6 of 6
(804 Views)
Topic Options
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
- Plusnet Community
- :
- Forum
- :
- Help with my Plusnet services
- :
- Broadband
- :
- Scary Stuff in My Router Log