|Hi, just wondering if this is a problem or not.|
On our new broadband router connection we've been having some difficulties so I've been keeping a close eye on the router security logs. We have a Belkin F6xxxxx ADSL router.
I've noticed a lot of firewall reports concerning an IP on the network that I've identified as a laptop of a girl I share the house with. The firewall is reporting bursts of SYN Flood both inbound and outbound, Vecna scans and smurf warnings etc. to and from this IP. This IPs on the internet that are being sent to and received from resolve to private IPs on various networks around the world, like in Israel and Russia.
Having talked to her she has little intention of cleaning up her computer and I just found out she has all of her personal security disabled! So obviously there's a problem.
The main thing is, our connection has been dropping a lot since we got it. I'm wondering if we've been getting a denial of service attack? And also what kind of programs may have been causing these problems on her computer, are more attacks getting through the router firewall? And any other information would be great.