• RSS
  • Twitter
  • FaceBook

Security Forums

Log in

FAQ | Search | Usergroups | Profile | Register | RSS | Posting Guidelines | Recent Posts

Router Security Logs

Users browsing this topic:0 Security Fans, 0 Stealth Security Fans
Registered Security Fans: None
Post new topic   Reply to topic   Printer-friendly version    Networking/Security Forums Index -> Firewalls // Intrusion Detection - External Security

View previous topic :: View next topic  
Author Message
dk4210
Just Arrived
Just Arrived


Joined: 01 May 2010
Posts: 0


Offline

PostPosted: Sat May 01, 2010 10:24 pm    Post subject: Router Security Logs Reply with quote

Hey Guys,

I checked my security log in my router and I see this below. Does any one know what I can do about this? I have noticed that my internet has slowed down.. Please advise..


Sat May 1 12:15:07 2010
=>Found attack from 87.112.118.170.
Source port is 1063 and destination port is 80 which use the TCP protocol.
Sat May 1 12:15:07 2010
=>Found attack from 79.72.20.43.
Source port is 52485 and destination port is 15685 which use the TCP protocol.
Sat May 1 12:15:07 2010
=>Found attack from 87.220.39.159.
Source port is 49867 and destination port is 443 which use the TCP protocol.
Sat May 1 12:15:37 2010
=>Found attack from 87.112.118.170.
Source port is 1063 and destination port is 80 which use the TCP protocol.
Sat May 1 12:15:37 2010
=>Found attack from 79.72.20.43.
Source port is 52485 and destination port is 15685 which use the TCP protocol.
Sat May 1 12:15:37 2010
=>Found attack from 87.220.39.159.
Source port is 49867 and destination port is 443 which use the TCP protocol.
Sat May 1 12:19:13 2010
=>Found attack from 216.249.79.118.
Source port is 3137 and destination port is 51183 which use the TCP protocol.
Sat May 1 12:20:14 2010
=>Found attack from 91.192.88.3.
Source port is 40853 and destination port is 50629 which use the TCP protocol.
Sat May 1 12:33:38 2010
=>Found attack from 70.44.192.174.
Source port is 2522 and destination port is 56546 which use the TCP protocol.
Sat May 1 12:43:25 2010
=>Found attack from 65.197.244.165.
Source port is 60569 and destination port is 52635 which use the TCP protocol.
Sat May 1 12:43:55 2010
=>Found attack from 97.86.20.177.
Source port is 1807 and destination port is 80 which use the TCP protocol.
Sat May 1 12:43:55 2010
=>Found attack from 97.96.2.52.
Source port is 56962 and destination port is 443 which use the TCP protocol.
Sat May 1 12:44:25 2010
=>Found attack from 196.215.46.200.
Source port is 59092 and destination port is 56198 which use the TCP protocol.
Sat May 1 12:44:55 2010
=>Found attack from 196.215.46.200.
Source port is 59092 and destination port is 56198 which use the TCP protocol.
Sat May 1 12:46:27 2010
=>Found attack from 196.215.46.200.
Source port is 59650 and destination port is 56198 which use the TCP protocol.
Sat May 1 12:53:40 2010
=>Found attack from 70.44.192.174.
Source port is 2697 and destination port is 56546 which use the TCP protocol.
Sat May 1 12:59:20 2010
=>Found attack from 97.86.25.62.
Source port is 51796 and destination port is 80 which use the TCP protocol.
Sat May 1 12:59:20 2010
=>Found attack from 12.70.19.19.
Source port is 49605 and destination port is 443 which use the TCP protocol.
Sat May 1 13:01:23 2010
=>Found attack from 70.24.204.227.
Source port is 54632 and destination port is 51183 which use the TCP protocol.
Sat May 1 13:01:53 2010
=>Found attack from 70.24.204.227.
Source port is 54632 and destination port is 51183 which use the TCP protocol.
Sat May 1 13:09:04 2010
=>Found attack from 125.60.241.226.
Source port is 12047 and destination port is 50629 which use the TCP protocol.
Sat May 1 13:09:04 2010
=>Found attack from 89.43.157.247.
Source port is 64796 and destination port is 50629 which use the TCP protocol.
Sat May 1 13:09:04 2010
=>Found attack from 68.56.47.204.
Source port is 51081 and destination port is 50629 which use the TCP protocol.
Sat May 1 13:09:04 2010
=>Found attack from 76.28.235.170.
Source port is 51044 and destination port is 50629 which use the TCP protocol.
Sat May 1 13:09:04 2010
=>Found attack from 89.242.39.205.
Source port is 26025 and destination port is 50629 which use the TCP protocol.
Sat May 1 13:09:04 2010
=>Found attack from 173.80.111.79.
Source port is 59573 and destination port is 50629 which use the TCP protocol.
Sat May 1 13:09:04 2010
=>Found attack from 188.51.82.186.
Source port is 12616 and destination port is 50629 which use the TCP protocol.
Sat May 1 13:09:04 2010
=>Found attack from 92.142.108.111.
Source port is 61557 and destination port is 50629 which use the TCP protocol.
Sat May 1 13:09:04 2010
=>Found attack from 99.26.87.52.
Source port is 64466 and destination port is 50629 which use the TCP protocol.
Sat May 1 13:09:04 2010
=>Found attack from 151.23.169.159.
Source port is 64602 and destination port is 50629 which use the TCP protocol.
Sat May 1 13:09:04 2010
=>Found attack from 139.142.158.42.
Source port is 61531 and destination port is 50629 which use the TCP protocol.
Sat May 1 13:09:04 2010
=>Found attack from 90.197.107.13.
Source port is 57624 and destination port is 50629 which use the TCP protocol.
Sat May 1 13:09:04 2010
=>Found attack from 84.103.182.78.
Source port is 33256 and destination port is 50629 which use the TCP protocol.
Sat May 1 13:09:04 2010
=>Found attack from 207.180.131.57.
Source port is 61364 and destination port is 50629 which use the TCP protocol.
Sat May 1 13:09:34 2010
=>Found attack from 139.142.158.42.
Source port is 61531 and destination port is 50629 which use the TCP protocol.
Sat May 1 13:09:34 2010
=>Found attack from 81.97.178.100.
Source port is 52612 and destination port is 50629 which use the TCP protocol.
Sat May 1 13:09:34 2010
=>Found attack from 84.103.182.78.
Source port is 33256 and destination port is 50629 which use the TCP protocol.
Sat May 1 13:09:34 2010
=>Found attack from 94.5.175.178.
Source port is 63915 and destination port is 50629 which use the TCP protocol.
Sat May 1 13:09:34 2010
=>Found attack from 68.148.18.71.
Source port is 60915 and destination port is 50629 which use the TCP protocol.
Sat May 1 13:09:34 2010
=>Found attack from 76.90.205.93.
Source port is 61537 and destination port is 50629 which use the TCP protocol.
Sat May 1 13:09:34 2010
=>Found attack from 68.147.44.111.
Source port is 62115 and destination port is 50629 which use the TCP protocol.
Sat May 1 13:09:34 2010
=>Found attack from 65.118.102.6.
Source port is 64621 and destination port is 50629 which use the TCP protocol.
Sat May 1 13:09:34 2010
=>Found attack from 87.249.10.61.
Source port is 54152 and destination port is 50629 which use the TCP protocol.
Sat May 1 13:09:34 2010
=>Found attack from 216.105.209.218.
Source port is 63500 and destination port is 50629 which use the TCP protocol.
Sat May 1 13:09:34 2010
=>Found attack from 122.3.128.74.
Source port is 55284 and destination port is 50629 which use the TCP protocol.
Sat May 1 13:09:34 2010
=>Found attack from 97.118.3.208.
Source port is 51856 and destination port is 50629 which use the TCP protocol.
Sat May 1 13:09:34 2010
=>Found attack from 74.161.50.45.
Source port is 54777 and destination port is 50629 which use the TCP protocol.
Sat May 1 13:09:34 2010
=>Found attack from 69.181.52.4.
Source port is 49249 and destination port is 50629 which use the TCP protocol.
Sat May 1 13:09:34 2010
=>Found attack from 217.44.132.219.
Source port is 53404 and destination port is 50629 which use the TCP protocol.
Sat May 1 13:09:34 2010
=>Found attack from 95.237.9.197.
Source port is 55837 and destination port is 50629 which use the TCP protocol.
Sat May 1 13:09:34 2010
=>Found attack from 212.129.110.7.
Source port is 1511 and destination port is 50629 which use the TCP protocol.
Sat May 1 13:09:34 2010
=>Found attack from 85.73.50.3.
Source port is 27687 and destination port is 50629 which use the TCP protocol.
Sat May 1 13:10:04 2010
=>Found attack from 87.201.173.176.
Source port is 63616 and destination port is 50629 which use the TCP protocol.
Sat May 1 13:10:04 2010
=>Found attack from 69.181.52.4.
Source port is 49249 and destination port is 50629 which use the TCP protocol.
Sat May 1 13:10:04 2010
=>Found attack from 174.88.24.46.
Source port is 49921 and destination port is 50629 which use the TCP protocol.
Sat May 1 13:10:04 2010
=>Found attack from 85.74.31.208.
Source port is 56745 and destination port is 50629 which use the TCP protocol.
Sat May 1 13:10:04 2010
=>Found attack from 87.163.141.132.
Source port is 49684 and destination port is 50629 which use the TCP protocol.
Sat May 1 13:10:04 2010
=>Found attack from 60.242.94.5.
Source port is 62515 and destination port is 50629 which use the TCP protocol.
Sat May 1 13:10:04 2010
=>Found attack from 70.70.227.160.
Source port is 39539 and destination port is 50629 which use the TCP protocol.
Sat May 1 13:10:04 2010
=>Found attack from 115.117.35.158.
Source port is 1511 and destination port is 50629 which use the TCP protocol.
Sat May 1 13:10:04 2010
=>Found attack from 74.141.102.80.
Source port is 56320 and destination port is 50629 which use the TCP protocol.
Sat May 1 13:10:04 2010
=>Found attack from 24.80.234.15.
Source port is 4524 and destination port is 50629 which use the TCP protocol.
Sat May 1 13:10:04 2010
=>Found attack from 92.118.34.39.
Source port is 49817 and destination port is 50629 which use the TCP protocol.
Sat May 1 13:10:04 2010
=>Found attack from 74.136.118.178.
Source port is 52358 and destination port is 50629 which use the TCP protocol.
Sat May 1 13:10:04 2010
=>Found attack from 85.220.23.12.
Source port is 64010 and destination port is 50629 which use the TCP protocol.
Sat May 1 13:10:04 2010
=>Found attack from 82.241.19.147.
Source port is 58822 and destination port is 50629 which use the TCP protocol.
Sat May 1 13:10:04 2010
=>Found attack from 95.178.195.168.
Source port is 31619 and destination port is 50629 which use the TCP protocol.
Sat May 1 13:10:04 2010
=>Found attack from 88.168.176.176.
Source port is 55692 and destination port is 50629 which use the TCP protocol.
Sat May 1 13:10:04 2010
=>Found attack from 67.225.75.54.
Source port is 53604 and destination port is 50629 which use the TCP protocol.
Sat May 1 13:10:04 2010
=>Found attack from 96.19.244.211.
Source port is 65213 and destination port is 50629 which use the TCP protocol.
Sat May 1 13:10:04 2010
=>Found attack from 109.93.108.240.
Source port is 23140 and destination port is 50629 which use the TCP protocol.
Sat May 1 13:10:04 2010
=>Found attack from 99.239.9.221.
Source port is 4963 and destination port is 50629 which use the TCP protocol.
Sat May 1 13:10:04 2010
=>Found attack from 212.50.106.208.
Source port is 61508 and destination port is 50629 which use the TCP protocol.
Sat May 1 13:10:34 2010
=>Found attack from 84.228.36.232.
Source port is 51804 and destination port is 50629 which use the TCP protocol.
Sat May 1 13:10:34 2010
=>Found attack from 67.225.75.54.
Source port is 53604 and destination port is 50629 which use the TCP protocol.
Sat May 1 13:10:34 2010
=>Found attack from 114.76.120.156.
Source port is 50830 and destination port is 50629 which use the TCP protocol.
Sat May 1 13:10:34 2010
=>Found attack from 109.93.108.240.
Source port is 23140 and destination port is 50629 which use the TCP protocol.
Sat May 1 13:10:34 2010
=>Found attack from 97.92.167.0.
Source port is 4976 and destination port is 50629 which use the TCP protocol.
Sat May 1 13:10:34 2010
=>Found attack from 86.7.6.164.
Source port is 58680 and destination port is 50629 which use the TCP protocol.
Sat May 1 13:10:34 2010
=>Found attack from 75.155.74.96.
Source port is 59537 and destination port is 50629 which use the TCP protocol.
Sat May 1 13:10:34 2010
=>Found attack from 212.50.106.208.
Source port is 61508 and destination port is 50629 which use the TCP protocol.
Sat May 1 13:10:34 2010
=>Found attack from 203.87.176.19.
Source port is 49352 and destination port is 50629 which use the TCP protocol.
Sat May 1 13:10:34 2010
=>Found attack from 124.148.109.70.
Source port is 3451 and destination port is 50629 which use the TCP protocol.
Sat May 1 13:10:34 2010
=>Found attack from 68.48.10.142.
Source port is 62063 and destination port is 50629 which use the TCP protocol.
Sat May 1 13:10:34 2010
=>Found attack from 98.22.241.109.
Source port is 64090 and destination port is 50629 which use the TCP protocol.
Sat May 1 13:10:34 2010
=>Found attack from 80.60.86.235.
Source port is 58556 and destination port is 50629 which use the TCP protocol.
Sat May 1 13:10:34 2010
=>Found attack from 93.32.236.190.
Source port is 2127 and destination port is 50629 which use the TCP protocol.
Sat May 1 13:10:34 2010
=>Found attack from 90.218.84.25.
Source port is 54734 and destination port is 50629 which use the TCP protocol.
Sat May 1 13:10:34 2010
=>Found attack from 81.196.76.88.
Source port is 45918 and destination port is 50629 which use the TCP protocol.
Sat May 1 13:10:34 2010
=>Found attack from 87.212.50.160.
Source port is 4505 and destination port is 50629 which use the TCP protocol.
Sat May 1 13:10:34 2010
=>Found attack from 115.84.131.2.
Source port is 7455 and destination port is 50629 which use the TCP protocol.
Sat May 1 13:10:34 2010
=>Found attack from 41.140.252.17.
Source port is 63129 and destination port is 50629 which use the TCP protocol.
Sat May 1 13:10:34 2010
=>Found attack from 41.136.162.85.
Source port is 56731 and destination port is 50629 which use the TCP protocol.
Sat May 1 13:10:34 2010
=>Found attack from 69.156.3.18.
Source port is 53403 and destination port is 50629 which use the TCP protocol.
Sat May 1 13:10:34 2010
Back to top
View user's profile Send private message
operat0r2
Just Arrived
Just Arrived


Joined: 26 Apr 2010
Posts: 0


Offline

PostPosted: Fri May 14, 2010 3:28 pm    Post subject: Reply with quote

you need to define 'attack' wtf does that mean ... anyway you are contently under attack ..
Back to top
View user's profile Send private message Visit poster's website
Fire Ant
Trusted SF Member
Trusted SF Member


Joined: 27 Jun 2008
Posts: 3
Location: London

Offline

PostPosted: Fri May 14, 2010 7:25 pm    Post subject: Reply with quote

Quote:
Does any one know what I can do about this?
Yes, nothing.

Don't worry about it. Your PC is under attack every minute of every day the same as everyone else.

Fire Ant
Back to top
View user's profile Send private message
progjm
Just Arrived
Just Arrived


Joined: 19 Aug 2003
Posts: 0


Offline

PostPosted: Fri Jun 04, 2010 4:22 pm    Post subject: Reply with quote

Looks like someone is running a port scan on your router. As far as the internet slowing down have you ran a check for spyware lately?
Back to top
View user's profile Send private message
njan
Trusted SF Member
Trusted SF Member


Joined: 02 May 2005
Posts: 9
Location: Scotland, UK

Offline

PostPosted: Fri Jun 04, 2010 10:50 pm    Post subject: Reply with quote

A lot of the packets logged have the same ephemeral destination port numbers (50629, 56198), but a range of source IP addresses. This is typical of p2p traffic like bittorrent; are you sure you or someone with access to the same network isn't running a p2p client? This would account for both the traffic logged and the slowdown.
Back to top
View user's profile Send private message Visit poster's website AIM Address Yahoo Messenger MSN Messenger
SecurityTrend
Just Arrived
Just Arrived


Joined: 21 Jul 2010
Posts: 0


Offline

PostPosted: Wed Jul 21, 2010 8:10 am    Post subject: Reply with quote

As mentioned earlier, port probing happens frequently.

One small easy tip is to reset your connection (ie: switch router off/on). If you have a dynamic IP and a new IP is assigned, then anyone probing at the time may be lost.
Back to top
View user's profile Send private message
Display posts from previous:   

Post new topic   Reply to topic   Printer-friendly version    Networking/Security Forums Index -> Firewalls // Intrusion Detection - External Security All times are GMT + 2 Hours
Page 1 of 1


 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum

Community Area

Log in | Register