|
22-08-2007, 14:54
|
#1 | ||
|
The Last Airbender
Join Date: Jun 2006
Location: Pigmopad
Posts: 11,915
|
Router Security Alert Logs
Anything to worry about?
Quote:
Quote:
__________________
|
||
|
|
|
22-08-2007, 15:02
|
#2 |
|
Screaming Orgasm
Join Date: Jul 2006
Location: Newbury
Posts: 15,194
|
I don't worry about incoming things unless they're causing damage or disruption (never happened, touch wood). Regularly pick up random password attacks on Linux and Blaster-style attacks on Windows, but none of them get past the logs.
However, if unexpected stuff is outgoing (particularly email), that's a sign of trouble. |
|
|
|
|
22-08-2007, 15:04
|
#3 |
|
The Last Airbender
Join Date: Jun 2006
Location: Pigmopad
Posts: 11,915
|
All incoming. The outgoing emails are the router emailing me
__________________
|
|
|
|
|
22-08-2007, 15:06
|
#4 |
|
The Stig
Join Date: Jun 2006
Location: Swad!
Posts: 10,713
|
Just the state of the web at the moment - attacks flying around all over the shop. That and spam email.
__________________
apt-get moo |
|
|
|
|
22-08-2007, 15:24
|
#5 | |
|
The Last Airbender
Join Date: Jun 2006
Location: Pigmopad
Posts: 11,915
|
Just had another email come through...
Quote:
__________________
|
|
|
|
|
|
22-08-2007, 15:25
|
#6 |
|
The Stig
Join Date: Jun 2006
Location: Swad!
Posts: 10,713
|
Even then it would only be a problem if your router was NAT'ing the standard ports across
__________________
apt-get moo |
|
|
|
|
22-08-2007, 15:29
|
#7 |
|
Screaming Orgasm
Join Date: Jul 2006
Location: Newbury
Posts: 15,194
|
Yup - VNC is a known exploitable software (if not up-to-date or secured), so it's hardly surprising bots are going after that.
I very rarely even look any more and don't bother emailing logs. There's so much background noise and bots looking for holes that don't exist that it's a waste of my time, but then, I don't have a business to worry about with the potential downtime costs of that. Last edited by Mark; 22-08-2007 at 15:32. |
|
|
|
|
22-08-2007, 15:35
|
#8 |
|
The Stig
Join Date: Jun 2006
Location: Swad!
Posts: 10,713
|
It's the same here Mark. Smaller clients never look at them unless they have reason to suspect something, and larger clients spend a lot of money on monitoring software/services to analyse the data for them.
__________________
apt-get moo |
|
|
|
 |
| Thread Tools | |
| Display Modes | |
|
|
Linear Mode
