alert kernel: Intrusion - is this bad ?

B

BigBear

Expert Member
Joined
Apr 24, 2008
Messages
2,197
Noticed the following on my D-LINK DSL2750U Logs:

Code: 
Mar 23 17:07:07	daemon	alert	kernel: Intrusion -> IN=ppp0.1 OUT= MAC= SRC=104.236.177.249 DST=197.x.my.IP LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=54321 PROTO=TCP SPT=35676 DPT=53 WINDOW=65535 RES=0x00 SYN URGP=0 MARK=0x8000000
Mar 23 17:07:59	daemon	alert	kernel: Intrusion -> IN=ppp0.1 OUT= MAC= SRC=196.52.43.63 DST=197.x.my.IP LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=1548 PROTO=TCP SPT=43244 DPT=443 WINDOW=1024 RES=0x00 SYN URGP=0 MARK=0x8000000
Mar 23 17:08:30	daemon	alert	kernel: Intrusion -> IN=ppp0.1 OUT= MAC= SRC=103.70.190.76 DST=197.x.my.IP LEN=44 TOS=0x00 PREC=0x00 TTL=241 ID=40274 PROTO=TCP SPT=12823 DPT=5358 WINDOW=14600 RES=0x00 SYN URGP=0 MARK=0x8000000

https://www.whatismyip.com/ip-whois-lookup/

104.236.177.249 - http://www.digitalocean.com
196.52.43.63 - AfriNIC - http://www.afrinic.net
103.70.190.76 - Pink Broadband Service Pvt Ltd
 
You must log in or register to reply here.
Top