Hello, hope you can help me out here.
For the past week (but not before) I’ve noticed around 50 intrusion attempts every day, which seem to happen for a few minutes every hour. It seems to be something to do with my router, but I really haven’t the slightest clue what is happening, if I should be worried and what I can do to fix it.
My logs are all the same:
Application / Action / Protocol / Source IP / Source Port / Destination IP / Destination Port
Windows Operating System / Blocked / ICMP / 192.168.10.1 / Type(3) / 192.168.10.2 / Type(1)
Each hour, about ten of these come up in my log. Then it goes quiet for another hour.
Also, every so often I get the following too:
Application / Action / Protocol / Source IP / Source Port / Destination IP / Destination Port
Windows Operating System / Blocked / UDP / 192.168.10.4 / 137 / 192.168.10.255 / 137
This happens when the internet is on or off - makes no difference (by “off”, I mean the modem is on standby).
I’ve scanned my PC with both anti virus and anti malware programmes, and it seems fine. Since it’s not going to an outside IP address I assume it’s something to do with my Modem or Router trying to do something?
So can anyone please help me out here? What does the above mean? Is it something I should be worried about? How can I fix it?
Many thanks guys.