Reply to thread

Message

<blockquote data-quote="blackice" data-source="post: 990020" data-attributes="member: 79035">This looks like notifications of detected activity that was dropped by the firewall. And a few recommendations to change your password etc. If the router logged an event it probably didn’t compromise you. More worrisome are indications of compromise with no warnings. Unwanted outside connections, VPNs setup that you didn’t do, that sort of thing. The dropped SAMBA requests are interesting if you aren’t using SAMBA for anything. Port scans happen all day to everyone, no need to panic, unless you had web access from the WAN enabled. Then you are probably going to get hammered with brute force attacks or some compromise at some point. Just don’t expose anything to the internet that you don’t have to. You may want a personally owned router you have more control over.Edit: the one thing of interest is the spoofing attack from 192.168.1.1 since that is your router’s address. There is the potential you have a compromised device on your network. If you are really worried about it there are several options for personally owned routers.</blockquote>

[QUOTE="blackice, post: 990020, member: 79035"] This looks like notifications of detected activity that was dropped by the firewall. And a few recommendations to change your password etc. If the router logged an event it probably didn’t compromise you. More worrisome are indications of compromise with no warnings. Unwanted outside connections, VPNs setup that you didn’t do, that sort of thing. The dropped SAMBA requests are interesting if you aren’t using SAMBA for anything. Port scans happen all day to everyone, no need to panic, unless you had web access from the WAN enabled. Then you are probably going to get hammered with brute force attacks or some compromise at some point. Just don’t expose anything to the internet that you don’t have to. You may want a personally owned router you have more control over. Edit: the one thing of interest is the spoofing attack from 192.168.1.1 since that is your router’s address. There is the potential you have a compromised device on your network. If you are really worried about it there are several options for personally owned routers. [/QUOTE]

Verification