Security Log entries

Discussions for BiPAC 8900 series: 8900AX-1600, 8900AX-2400, 8900X
Post Reply
DILLYP
Posts: 10
Joined: Tue Jan 12, 2021 6:56 pm

Security Log entries

Post by DILLYP » Tue Apr 20, 2021 8:15 pm

I've never suffered any kind of security issue before.

On three seperate occasions since about 8th April, I've found entries like this:

Apr 18 23:08:14 kern alert kernel: Intrusion -> TCP packet from [ptm0.1] 45.129.136.15:65532 to <My WAN IP>

at present there are 4 attempts per day for the last 3 days

I've shut the router off for 10 mins to establish a new address

anything else I can or should do?

billion_fan
Posts: 5205
Joined: Tue Jul 19, 2011 4:30 pm

Re: Security Log entries

Post by billion_fan » Wed Apr 21, 2021 9:19 am

DILLYP wrote:
Tue Apr 20, 2021 8:15 pm
I've never suffered any kind of security issue before.

On three seperate occasions since about 8th April, I've found entries like this:

Apr 18 23:08:14 kern alert kernel: Intrusion -> TCP packet from [ptm0.1] 45.129.136.15:65532 to <My WAN IP>

at present there are 4 attempts per day for the last 3 days

I've shut the router off for 10 mins to establish a new address

anything else I can or should do?
These are blocked attempts, in this day and age it is normal to get port scans or intrusion attempts on your WAN IP, there is nothing you can really do about it. (you can of course change IP, but there will probably be more attempts/scans on your new IP also)

DILLYP
Posts: 10
Joined: Tue Jan 12, 2021 6:56 pm

Re: Security Log entries

Post by DILLYP » Wed Apr 21, 2021 9:59 am

Thanks BF. That’s reassuring

Post Reply