cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Highlighted
Contributor
720 Views
Message 1 of 11

Help understanding something please.

I edited out my IP address. What does all this mean. The IP address is from China. 

 

 
02:52:01, 12 Oct. DoS(Port Scanning): IN=ppp1 OUT= MAC= src=221.192.199.50 DST=IP LEN=40 TOS=0x00 PREC=0x00 TTL=108 ID=256 PROTO=TCP SPT=39441 DPT=8000 WINDOW=512 RES=0x00 SYN UR
02:52:01, 12 Oct. DoS(Port Scanning): IN=ppp1 OUT= MAC= src=221.192.199.50 DST=IP
02:52:01, 12 Oct. DoS(Port Scanning): IN=ppp1 OUT= MAC= src=221.192.199.50 DST=IP LEN=40 TOS=0x00 PREC=0x00 TTL=108 ID=256 PROTO=TCP SPT=39441 DPT=1337 WINDOW=512 RES=0x00 SYN URGP=0 MARK=0x8000000
02:52:01, 12 Oct. DoS(Port Scanning): IN=ppp1 OUT= MAC= src=221.192.199.50 DST=IP LEN=40 TOS=0x00 PREC=0x00 TTL=
02:52:01, 12 Oct. DoS(Port
02:52:01, 12 Oct. DoS(Port Scanning): IN=ppp1 OUT= MAC= src=221.192.199.50 DST=IP LEN=40 TOS=0x00 PREC=0x00 TTL=108 ID=256 PROTO=TCP SPT=39441 DPT=9999 WINDOW=512 RES=0x00 SYN URGP=0 MARK=0x8000000
02:52:01, 12 Oct. DoS(Port Scanning): IN=ppp1 OUT= MAC= src=221.192.199.50 DST=IP LEN=40 TOS=0x00 PREC=0x00 TTL=108 ID=256 PROTO=TCP SPT=3944
02:52:01, 12 Oct. DoS(Port Scanning): IN=ppp1 OUT= MAC=
02:52:01, 12 Oct. DoS(Port Scanning): IN=ppp1 OUT= MAC= src=221.192.199.50 DST=IP LEN=40 TOS=0x00 PREC=0x00 TTL=109 ID=256 PROTO=TCP SPT=39441 DPT=808 WINDOW=512 RES=0x00 SYN URGP=0 MARK=0x8000000
02:52:01, 12 Oct. DoS(Port Scanning): IN=ppp1 OUT= MAC= src=221.192.199.50 DST=IP LEN=40 TOS=0x00 PREC=0x00 TTL=109 ID=256 PROTO=TCP SPT=39441 DPT=3130 WINDOW=512 RES=0x
02:52:01, 12 Oct. DoS(Port Scanning): IN=ppp1 OUT= MAC= src=221.192.199.50 DST=IP
02:52:01, 12 Oct. DoS(Port Scanning): IN=ppp1 OUT= MAC= src=221.192.199.50 DST=IP LEN=40 TOS=0x00 PREC=0x00 TTL=109 ID=256 PROTO=TCP SPT=39441 DPT=63000 WINDOW=512 RES=0x00 SYN URGP=0 MARK=0x8000000
02:52:01, 12 Oct. DoS(Port Scanning): IN=ppp1 OUT= MAC= src=221.192.199.50 DST=IP LEN=40 TOS=0x00 PREC=0x00 TTL=109 ID=256 PROTO=TCP SPT=39441 DPT=8085 WINDOW=512 RES=0x00 SYN URGP=0 MARK=0x8000000

0 Ratings
10 REPLIES 10
Highlighted
Distinguished Sage
Distinguished Sage
713 Views
Message 2 of 11

Re: Help understanding something please.

It means your firewall is doing its job.

0 Ratings
Highlighted
Contributor
711 Views
Message 3 of 11

Re: Help understanding something please.

Also my IP is listed on a spam site, on multiple spam sites? whats going on with that.
0 Ratings
Highlighted
Distinguished Sage
Distinguished Sage
706 Views
Message 4 of 11

Re: Help understanding something please.

that can happen  just reset your router and you should get a different ip address - probably unplug wait a few minutes and then reconnect



If you like a post, or want to say thanks for a helpful answer, please click on the Ratings 'Thumbs up' on left hand side.
If someone answers your question correctly please let other members know by clicking on ’Mark as Accepted Solution’.
0 Ratings
Highlighted
Contributor
679 Views
Message 5 of 11

Re: Help understanding something please.

Thank you for your kind responses imjolly and Liquoirice, Just a final question. I do know that it's my firewall doing its job but it's come across as a port scan, usually it registers as a DoS(Updolock) or something along those lines. 

 

 

Does anything seem out of the ordinary with this, the IP seems to be coming from China 

0 Ratings
Highlighted
Distinguished Sage
Distinguished Sage
674 Views
Message 6 of 11

Re: Help understanding something please.

as alreday said it is your firewall doing it's job and protecting router and you



If you like a post, or want to say thanks for a helpful answer, please click on the Ratings 'Thumbs up' on left hand side.
If someone answers your question correctly please let other members know by clicking on ’Mark as Accepted Solution’.
0 Ratings
Highlighted
Distinguished Guru
661 Views
Message 7 of 11

Re: Help understanding something please.


@Monster432 wrote:

Thank you for your kind responses imjolly and Liquoirice, Just a final question. I do know that it's my firewall doing its job but it's come across as a port scan, usually it registers as a DoS(Updolock) or something along those lines. 

 

 

Does anything seem out of the ordinary with this, the IP seems to be coming from China 


If you connect anything to the internet, then it will get scanned constantly.  That's perfectly normal, and has been going on for years.

 

It will be a mixture of nosy automated systems scanning the internet just to see what's out there, and viruses looking for new machines to infect.  The Hub's firewall blocks all of them unless you specifically open ports.

0 Ratings
Highlighted
Contributor
636 Views
Message 8 of 11

Re: Help understanding something please.

I see thanks that makes a bit more sense. Another message that seemed to crop up is this?

 

Port forwarding rule added via UPnP/TR064. Protocol: UDP, external ports:

 

 

 

along with a set of rules and a external port use from an IP address belonging to an IPAD my family member possess. Any idea what this is. Sorry for bothering again

0 Ratings
Highlighted
Distinguished Guru
627 Views
Message 9 of 11

Re: Help understanding something please.

Most likely an app (probably a game) wants to establish communication with a server.

 

Normally, the Hub firewall will block all incoming packets unless they are responses to previous requests.  But this doesn't work well with some applications where the server needs to send updates from time to time, or systems that use peer-to-peer networking.

 

UPnP (Universal Plug & Play) is a system where devices on the home network can ask the router (the Hub in this case) to open specific ports and route any incoming messages on that port to that device.

0 Ratings
Highlighted
Contributor
622 Views
Message 10 of 11

Re: Help understanding something please.

I see thank you for the information. she was trying to do a skype call with a friend at the time, would that have caused it?

0 Ratings