[WebAfrica] UDP scan attack being received from Telfree

[tp3to]

Hi Guys

I've pick up some unusual activity in my Rain router's security logs.

Seems like the router periodically receive scan attacks from "41.73.58.65". Searching this IP reveals that its from Tellfree?

Is this something to be concerned about? Anything searching for open ports seems suspicious in my opinion...

There are also some articles regarding Tellfree that also doesn't put them in good light. https://techcentral.co.za/vodacom-sues-telfree-for-r54m/43288/

 

[stricken]

Welcome to the Internet. Happens all the time. Some IPs more than others.

 

[itareanlnotani]

Also particularly worthless is the warning.

What port(s)? was that trying to connect to. One whole packet a day too, such outright abuse </sarcasm off>

 

[Napalm]

Well, the router picks it up at least...

I also get it...

2017-08-14 05:08:14 Security Warning Detect UDP port scan attack, scan packet from 107.155.141.131
2017-08-13 21:08:07 Security Warning Detect UDP port scan attack, scan packet from 199.195.254.112
2017-08-13 13:08:39 Security Warning Detect UDP port scan attack, scan packet from 195.154.237.34
2017-08-13 06:04:26 Security Warning Detect UDP port scan attack, scan packet from 51.15.12.217
2017-08-12 21:06:42 Security Warning Detect UDP port scan attack, scan packet from 212.83.182.167

 

[tp3to]

Thanks for the replies.

I didn't really pick up so many scans when using adsl so I thought it to be suspicious. But as you say, luckily it is being picked up and blocked.

 

[Inky1980]

Yeah I get the same on my router and I'm using Webafrica. Would love to know what it is.

 

[Inky1980]

Bump

 

[TheeAndre]

Welcome to the Internet. Happens all the time. Some IPs more than others.

Lol. "Some IPs more than others."

 

[walt chen]

same here, happening every day. but why ?

 

[Inky1980]

same here, happening every day. but why ?

I phoned Webafrica and in a nutshell was told not to worry about it.....comforting.