I've got a D-Link DI-604 router for my small home network. I have it automatically send me the log file when it reaches a certain size. In the last few days, I've been getting a copy of a the log file several times a day. And it's always the same thing:

Feb/09/2004 22:06:32
Drop TCP packet from WAN src:66.65.215.6:62986 dst:162.40.161.66:8980 Rule: Default deny
Feb/09/2004 22:06:32
Drop ICMP packet from WAN src:216.176.95.198:3 dst:162.40.161.66:1 Rule: Default deny
Feb/09/2004 22:06:32
Drop ICMP packet from WAN src:216.176.95.198:3 dst:162.40.161.66:1 Rule: Default deny
Feb/09/2004 22:06:31
Drop ICMP packet from WAN src:216.176.95.198:3 dst:162.40.161.66:1 Rule: Default deny
Feb/09/2004 22:06:30
Drop TCP packet from WAN src:24.192.222.186:4697 dst:162.40.161.66:6346 Rule: Default deny
Feb/09/2004 22:06:28


Of course, the log file is MUCH bigger, but the vast majority of entries are like this. Is this a port scan of somekind? I don't know how to read firewall log files like this. Can anyone shed some light on this for me?

Thanks,
Chris


Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com

Reply via email to