Page 1 of 1

Security Log entries

Posted: Tue Apr 20, 2021 8:15 pm
by DILLYP
I've never suffered any kind of security issue before.

On three seperate occasions since about 8th April, I've found entries like this:

Apr 18 23:08:14 kern alert kernel: Intrusion -> TCP packet from [ptm0.1] 45.129.136.15:65532 to <My WAN IP>

at present there are 4 attempts per day for the last 3 days

I've shut the router off for 10 mins to establish a new address

anything else I can or should do?

Re: Security Log entries

Posted: Wed Apr 21, 2021 9:19 am
by billion_fan
DILLYP wrote: Tue Apr 20, 2021 8:15 pm I've never suffered any kind of security issue before.

On three seperate occasions since about 8th April, I've found entries like this:

Apr 18 23:08:14 kern alert kernel: Intrusion -> TCP packet from [ptm0.1] 45.129.136.15:65532 to <My WAN IP>

at present there are 4 attempts per day for the last 3 days

I've shut the router off for 10 mins to establish a new address

anything else I can or should do?
These are blocked attempts, in this day and age it is normal to get port scans or intrusion attempts on your WAN IP, there is nothing you can really do about it. (you can of course change IP, but there will probably be more attempts/scans on your new IP also)

Re: Security Log entries

Posted: Wed Apr 21, 2021 9:59 am
by DILLYP
Thanks BF. That’s reassuring