I have been using a Netgear DG8346G v3 router for some time but lately
I have been receiving security alerts. Here are some examples.
TCP Packet - Source:61.139.105.163 Destination:84.13.171.190 - [PORT SCAN]
TCP Packet - Source:61.139.105.163 Destination:89.242.150.73 - [PORT SCAN]
TCP Packet - Source:61.139.105.163 Destination:89.243.200.57 - [PORT SCAN]
TCP Packet - Source:61.139.105.163 Destination:89.242.150.73 - [PORT SCAN]
Using Whois gives for the Source:
% [whois.apnic.net node-1]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
inetnum: 61.139.105.128 - 61.139.105.191
netname: ZIGONG-SCINFO-GOV
descr: Zigong Sciences Informations Academe
descr: ZiGong,Sichuan
descr: PR China
country: CN
And for the Destination:
% Note: This output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '89.241.0.0 - 89.243.255.255'
inetnum: 89.241.0.0 - 89.243.255.255
netname: OPAL-DSL
descr: Opal Telecom DSL
country: GB
admin-c: PM58-RIPE
admin-c: GD1052-RIPE
tech-c: PM58-RIPE
tech-c: GD1052-RIPE
status: ASSIGNED PA
mnt-by: OPAL-MNT
source: RIPE # Filtered
person: Phill Magill
address: Opal Telecommunications Plc
address: Northbank Industrial Estate
address: Irlam
address: Manchester
address: M44 5BL
address: United Kingdom
phone: +44 161 222-2000
fax-no: +44 161 222-2008
e-mail: pmagill@???
nic-hdl: PM58-RIPE
mnt-by: OPAL-source: RIPE # Filtered
person: Gavin Ditchfield
address: Opal Telecommunications Plc
address: Northbank Industrial Estate
address: Irlam
address: Manchester
Should I be worried about this or does it show the router is doing its job?
Thanks in advance.
--
Clive Woodfine
