I have huge problem with my router: Sagem F@st 3202.
Here are some Security log events:
Inbound Traffic | Blocked - Default policy | TCP XX.XX.XX.XXX:80->XX.X.XX.XX:51707 on ppp0 [repeated 3 times, last time on Apr 23 02:32:08 2014]
Inbound Traffic | Blocked - Spoofing protection | IGMP 192.168.4.1->126.96.36.199 on eth2
Inbound Traffic | Blocked | Packet invalid in connection, tcp reset attack is suspected: TCP [repeated 2 times, last time on Apr 23 02:35:02 2014]
The events repeat all the time during last 24 hours.
Could you help me to identify the attack? It would be very helpful to define the attacker. Is it possible that it's some kind of wardriving? Is it a random or planned attempt?