1

Check the screenshot of my router firewall log below, I can see traffic originating from strange IP addresses to my public address.

What are these?

I've just setup this router few hours ago, am I being hacked or part of DoS attack?

firewall log

WhiteWinterWolf
  • 19,082
  • 4
  • 58
  • 104
user1419170
  • 11
  • 1
  • so what is the **port no.** of these **ip's** and the status `Established` or `listening` or what ?? – auth private Sep 04 '15 at 17:17
  • The internet is FULL of botnets scanning every IP, I have discovered 74,000 so far. In 2 days 40,000 probes reached my ip. Don't have any open in bound port and move on with your life. – cybernard Sep 18 '15 at 00:49

1 Answers1

1

These are probably the attempts of some P2P software, like Bittorrent, Skype ... See also Why are packets constantly being sent to international ISPs?

Community
  • 1
Steffen Ullrich
  • 184,332
  • 29
  • 363
  • 424
  • 1
    Thanks is this bad or good? should i be worry about this? i'm not running any P2P stuff at the moment – user1419170 Sep 03 '15 at 09:11
  • @user1419170: no need to worry about these. Apart from that todays hacks usually cannot be detected by simple packet filter firewalls on a router since these attacks are at the application level, i.e. drive-by-downloads etc. And if this would be DoS attack you would probably notice it because your internet would get really slow. And you would probably get lots of packets per second and not one every few second. – Steffen Ullrich Sep 03 '15 at 09:12