service blocked

have this on my router logs about every hour

[DHCP IP: (192.168.0.0)] to MAC address :::::, Friday, Jul 29,2016 14:58:29
[Service blocked: ICMP_echo_req] from source 198.20.99.130, Friday, Jul 29,2016 14:51:39
anyone know whats causing this

I don't know if this helps .

Have you got pings enabled or disabled on your router?

In reply to a post by goatty2:

[DHCP IP: (192.168.0.0)] to MAC address :::::, Friday, Jul 29,2016 14:58:29
[Service blocked: ICMP_echo_req] from source 198.20.99.130, Friday, Jul 29,2016 14:51:39
anyone know whats causing this

An infected machine on an ISP in the USA, probably has a botnet agent on it. Its trying to ping your IP (probably along with a few hundred thousand) and your router is logging the fact it did not reply.

This is about as interesting as dead flies on your windscreen when driving down the motorway. Ignore it or disable the logging about not responding to ICMP echo packets (ping).

viz: https://en.wikipedia.org/wiki/Internet_background_noise

Separately if your router lets you (BT home hubs do not) then you might find that allowing your router to be pingable from the internet means you get better streaming performance. Many router vendors turn off ping response (ICMP echo) in a mistaken belief this improves security, which it does not.

pings are disabled

No problem then .

If you haven't looked already, I've always found Steve Gibson's site useful. A quick overview of your Modem/router security can be tested by his website GRC.com. There are various tools, but "Shields Up" is quite a good starting point.
https://www.grc.com/intro.htm

in a mistaken belief this improves security, which it does not.

Care to elaborate? I can think of many reasons why it is a good security measure to have it disabled...

I have seen ICMP being used as a tunnel for a remote shell plenty of times. Network admins just see the traffic as harmless ping and ignore it.

just done the tests on grc.com and my computer is in stealth mode and has very good security

In reply to a post by ukhardy07:

Care to elaborate? I can think of many reasons why it is a good security measure to have it disabled...

Search path-mtu discovery for more.

I have seen ICMP being used as a tunnel for a remote shell plenty of times. Network admins just see the traffic as harmless ping and ignore it.

I didn't say allow ICMP (echo) through your firewall, just respond to an echo from the external interface. Blocking echo responses does not stop malicious people finding your device. Just look at nmap for two minutes, you can SYN scan a subnet in a few minutes and find all the hosts that are connected even when they don't respond to ICMP ECHO packets.

ICMP ECHO is extremely useful for diagnostics, not least the thinkbroadband BQM