1

Check the screenshot of my router firewall log below, I can see traffic originating from strange IP addresses to my public address.

What are these?

I've just setup this router few hours ago, am I being hacked or part of DoS attack?

firewall log

  • so what is the port no. of these ip's and the status Established or listening or what ?? – auth private Sep 4 '15 at 17:17
  • The internet is FULL of botnets scanning every IP, I have discovered 74,000 so far. In 2 days 40,000 probes reached my ip. Don't have any open in bound port and move on with your life. – cybernard Sep 18 '15 at 0:49
1

These are probably the attempts of some P2P software, like Bittorrent, Skype ... See also Why are packets constantly being sent to international ISPs?

  • 1
    Thanks is this bad or good? should i be worry about this? i'm not running any P2P stuff at the moment – user1419170 Sep 3 '15 at 9:11
  • @user1419170: no need to worry about these. Apart from that todays hacks usually cannot be detected by simple packet filter firewalls on a router since these attacks are at the application level, i.e. drive-by-downloads etc. And if this would be DoS attack you would probably notice it because your internet would get really slow. And you would probably get lots of packets per second and not one every few second. – Steffen Ullrich Sep 3 '15 at 9:12

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.