Reply
Highlighted
N/A
Posts: 0
Registered: ‎2011-09-07

repeated ICMP_echo_req in log?

Hi,
I'm starting to see nearly every 15-20minutes messages like this in my WNDR4000 log:
Service blocked: ICMP_echo_req] from source 178.126.149.247, Monday, Feb 06,2012 04:01:15

but with varying source. Mostly US IP's, but some in the UK and this one in Belarus when spot checking. This seemed to start sometime late last week.

Questions:
1) the router's doing it's job and blocking some unwanted attention, yes?
2) since it's from outside my LAN it's clearly a hack attempt, yes?

I'm running the router with NAT open and SPI/Dos and port scanning off. Is this dangerous, if someone's knocking at the door?

Thanks,
jeff
Contributor
Posts: 21
Registered: ‎2008-09-28

Re: repeated ICMP_echo_req in log?

im getting the same thing with my N900 WNDR4500

[Service blocked: ICMP_echo_req] from source 203.178.148.19.

also i did a trace route on this IP and hmm its a very strange place

https://ipdb.at/ip/203.178.148.19

IP address is numbered 203.178.148.19. This IP address is related to Japan. IP Country code is JP. ISP of this address is "KDDI Research & Development Laboratories, Inc.

also according to the logs someone keeps trying to remote access my PC via port 58949 ?? so i blocked access to this port on all IP range in the blocked services tab
Discussion Stats
  • 1 reply
  • 4769 views
  • 0 kudos
  • 2 in conversation
Top Contributors