Gateway log alert

Discussion in 'other security issues & news' started by arrowsmithmidwest, Feb 1, 2005.

Thread Status:
Not open for further replies.
  1. arrowsmithmidwest

    arrowsmithmidwest Registered Member

    Joined:
    May 12, 2004
    Posts:
    165
    Location:
    Midwest
    Hi all,

    I found this in my Netgear ADSL modem router gateway log.


    11:09:49 [DOS]IN=ppp0 OUT= MAC= SRC=24.2.137.185 DST=202.72.150.170 LEN=82 TOS=0x00 PREC=0xE0 TTL=97 ID=65199 PROTO=UDP SPT=6349 DPT=6346 LEN=62


    Our WAN performance has dropped significantly, i checked out ports 6349, 6346 and them seem to be for file sharing programs, but behind our firewall, we don't have any of those P2P programs.

    Any idea's?

    And also anyone know how i can block those ports with my type of router.

    Cheers
     
  2. Jimbob1989

    Jimbob1989 Registered Member

    Joined:
    Oct 18, 2004
    Posts:
    2,529
    I believe DOS attacks are not unusual to see in your router log, I have a netgear router and see them all the time. Do you use file sharing programs because if you do, I have found it can significantly increase the rate at which people attack your pc as your IP address is visible to more people at one time.

    Jimbob
     
  3. arrowsmithmidwest

    arrowsmithmidwest Registered Member

    Joined:
    May 12, 2004
    Posts:
    165
    Location:
    Midwest
    not really, though i am running a web server behind that firewall.
     
  4. Jimbob1989

    Jimbob1989 Registered Member

    Joined:
    Oct 18, 2004
    Posts:
    2,529
    Servers may be the same as if your hosting a server, someone may be able to get your ip address by pinging the server name.

    Jimbob
     
Loading...
Thread Status:
Not open for further replies.