Router reporting: Detect UDP port scan attack - from MTN

Grant

Honorary Master
Joined
Mar 27, 2007
Messages
69,683
Reaction score
38,200
Location
Behind the grassy knoll
help me understand what is going on here.
firstly, this is a backup router with an MTN sim card, on data contract.

very recently there have been a number of "security alerts":
running traceroute reveals it is MTN attempting to scan UDP ports.

question is why are they scanning UDP ports
&
if the scans were not blocked, what would MTN be doing if they gained access ?

school me !!
Detect UDP port scan attack, and the attack has been blocked, scan packet from 209.212.96.1
Screen Shot 2025-09-28 at 22.17.06.jpg


Screen Shot 2025-09-28 at 22.16.23.jpg

Screen Shot 2025-09-28 at 22.16.53.jpg
 
Its UDP and probably just port 53. Its likely the anycast DNS server, and not something malicious.

If your router told you what ports and how many requests it would help. Right now it looks like twice a day they knock on your UDP port 53 and see if anybody answers.
 
Top
Sign up to the MyBroadband newsletter
X