[ Date Index ] [ Thread Index ] [ <= Previous by date / thread ] [ Next by date / thread => ]
At a guess I'd say someone is port-scanning you and mixing in dummy scans from spoofed IPs Its a fairly standard technique, hackers using apps like Nmap often mix dummies with real probes. Alternatively someone may be trying to firewalk your router to determine what ports are blocked by AC's or policies. Steph 2008/11/1 Simon WD Robert <simon.robert@xxxxxxxxxxxxx>: > Hi > > I have had a number of warnings from my router. All the messages have > the same format, a bunch TCP packets, all from the same IP (different IP > for each warning message) followed by a UDP packet from a nother IP. Any > ideas what's being attempted? > > I'm not particularly worried, I've run a port scan and everything is > stealthed and unresponsive, but I'd like to know. > > Simon > -- > info@xxxxxxxxxxxxxxxxxxxxxx > www.oldhouse-cottage.co.uk > > > -- > The Mailing List for the Devon & Cornwall LUG > http://mailman.dclug.org.uk/listinfo/list > FAQ: http://www.dcglug.org.uk/linux_adm/list-faq.html > -- -----BEGIN GEEK CODE BLOCK----- Version: 3.1 GCS/S d- s+:+ a+ C+++ U+++ P L++ E W++ N+ K- w--$ O— M- V— L++++>$ PS+++ PE Y++ PGP++ t+ 5+++ X- R+ tv- b DI++ D++ G e* h+ r++ y? ------END GEEK CODE BLOCK------ -- The Mailing List for the Devon & Cornwall LUG http://mailman.dclug.org.uk/listinfo/list FAQ: http://www.dcglug.org.uk/linux_adm/list-faq.html