Kernel Intrusion?

[MichaelFalconer]

Hi guys,

I may not be the most technically minded guy here, but just checking on my router this morning, and found a good few of these kernel intrusion logs on the router... (also not sure if this is the right place to ask this)

kernel: Intrusion -> IN=ppp0.1 OUT= MAC= SRC=104.236.164.182 DST=105.227.111.7 LEN=40 TOS=0x10 PREC=0x00 TTL=240 ID=54321 PROTO=TCP SPT=43544 DPT=7001 WINDOW=65535 RES=0x00 SYN URGP=0 MARK=0x8000000

Question I have is, what port can I block to prevent this? Read up somewhere on here about port 445, but I have no idea what that will do.
Not sure if it’s just kids in the neighborhood trying to connect or if there’s something more serious going on? Or if I can just ignore it.

This is on a Telkom D-Link DSL-G225 router.

Thanks.

 

[gregmcc]

It looks like script kiddies on the net just scanning for open ports. In your case port 7001 (Weblogic)

Presuming you don't have this port open via port forwarding then you should be safe. There will most likely be tons of these attempts throughout the day (ssh, http etc)

Just attempts at finding open ports.