DOS

Wed, 2010-06-16 07:34:35 - TCP Packet - Source:85.104.3.103,3873 Destination: - [DOS]
Wed, 2010-06-16 07:34:35 - TCP Packet - Source:85.101.19.202,2229 Destination: - [DOS]
Wed, 2010-06-16 07:34:35 - TCP Packet - Source:81.215.226.107,3449 Destination: - [DOS]
Wed, 2010-06-16 07:34:35 - TCP Packet - Source:81.214.66.143,4014 Destination: - [DOS]
Wed, 2010-06-16 07:34:35 - TCP Packet - Source:88.228.64.92,2718 Destination: - [DOS]

Came across the above in Netgear router logs for the first time, does anything need to be done?

Domain name e.g. dsl.static81215226107.ttnet.net.tr > link




Edit > good idea ....... done.

Edited by Apprentice (Thu 17-Jun-10 09:12:59)

You might want to edit your own IP address out of those log entries...

Post deleted by gomezz

Looks like port 23 scanning,

how do i know that?
trust me

if you want, you can check your port 23 status at Shields up over at grc.com

their scan will probably tell you:

Text
1 2	Port    Status  23     Stealth  Telnet

you can do a Google search: port 23 scanning
for more info such as this

GRC Port Authority Report created on UTC: 2010-06-17 at 19:08:05

Results from scan of ports: 0, 21-23, 25, 79, 80, 110, 113, 
                            119, 135, 139, 143, 389, 443, 445, 
                            1002, 1024-1030, 1720, 5000

    0 Ports Open
    0 Ports Closed
   26 Ports Stealth
---------------------
   26 Ports Tested

ALL PORTS tested were found to be: STEALTH.

TruStealth: PASSED - ALL tested ports were STEALTH,
                   - NO unsolicited packets were received,
                   - NO Ping reply (ICMP Echo) was received.

Thanks for the reply

It's a port scan from a Turk Telecom user. If you want to waste some time:
[email protected]