This topic

Dos Port scanning I don’t recognise the device, a little worried

Pink63 — Sat, 29 Jul 2023 10:09:33 GMT

Hi,

I,ve been experiencing problems with the router, this morning there are a huge number of entries on the event log stating - DoS(Port Scanning): IN=ppp1 OUT= MAC= src=89.248.163.237 DST=81.153.128.218 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=15827 PROTO=TCP SPT=57069 DPT=902 WINDOW=1024 RES=0x00 SYN URGP=0 MARK=0x8000000

I don’t recognise any of the devices, is someone either from inside my home (ie: teenage son} or someone from outside accessing and connecting to the router somehow?

And is there a way I can stop port scanning or is that a necessary procedure?

Thanks in advance from a worried mum.

Re: Dos Port scanning I don’t recognise the device, a little worried

Les-Gibson — Sat, 29 Jul 2023 10:57:14 GMT

I've got 305 such entries in my event log from the last 4 days.

They happen all the time, some may be malicious but mostly they're not and at least your firewall captured them

Re: Dos Port scanning I don’t recognise the device, a little worried

licquorice — Sat, 29 Jul 2023 11:32:42 GMT

That's why you have a firewall.

It's just doing its job, ignore the entries