1,391 reputation
834
bio website
location
age
visits member for 3 years, 6 months
seen Oct 28 at 12:49

Feb
27
comment Logwatch - Being probed by own network router?
Thanks, so all in all something somewhere is just doing a simple scan hack or something, and its not something internally that I am doing to set it off? Since its only 1-3 attempts once in a while and no sign of a successful attack it does not seem to be anything to worry about. The best I can do is to block those IPs and see what else I can do to harden the server then?
Feb
27
revised Logwatch - Being probed by own network router?
added 103 characters in body
Feb
27
revised Logwatch - Being probed by own network router?
added more
Feb
27
comment Logwatch - Being probed by own network router?
I edited and will award the bounty if you can make sense of this for me. Today I received an entry that a known hack was attempted 1 time from X.X.X.X. The IP listed is a global IP, not the routers IP. Why would it show up this time as global but other outside attacks would show up as the routers ip?
Feb
27
comment Logwatch - Being probed by own network router?
The table is unpopulated until something makes a connection. For example my phone. Its not inside the router but once it connects to the server (inside the network) its MAC is registered in that table. Wouldn't another outside device do the same thing? Going to read the links thanks again!...Then again unless the phone only registered in the table when I connected to wifi otherwise it never would have registered? Like i said going to read the links :)
Feb
26
comment Logwatch - Being probed by own network router?
Yes that table was from my router. The MAC of no other machine/device except stuff I own is listed in the router. So this would mean something one of my devices is doing to something to set of an attack or a false positive?
Feb
26
comment Logwatch - Being probed by own network router?
The only info in logwatch is what was stated in the question. It just says my routers ip (.1) attempted a known hack X amount of times. There is no info except that. I have upped the sensitivity of logwatch a few days after i posted the question, but I have not been "attacked" again. I will post any more info if something shows up. If it was another computer somewhere wouldn't its MAC be listed within the table I posted?
Feb
25
revised Logwatch - Being probed by own network router?
deleted 1 characters in body
Feb
25
comment Logwatch - Being probed by own network router?
Edited to add more info
Feb
25
revised Logwatch - Being probed by own network router?
added more info
Feb
25
comment Logwatch - Being probed by own network router?
Yes I am forwarding the port. When i look at the IPs that have made a connection to the router the only IPs present are ones from my home PCs, and the one that is linked with my phone. Could my phone for some reason be considered bad to the router?
Feb
25
comment Logwatch - Being probed by own network router?
Thanks for the links I have already used them. I should have mentioned I have hardened the server before I posted the question. But why would the attacker show up as my local IP address (the router) and not anohter global IP address? Also this is the only data that is showing regarding the "hack attempt". +1 for responding! Thanks!
Feb
24
revised Logwatch - Being probed by own network router?
edited body
Feb
24
awarded  Promoter
Feb
24
comment HP Netbook - Cracked screen, accessing bios, external monitor?
pound the F keys, one of them opens bios :)
Feb
23
awarded  Citizen Patrol
Feb
23
comment How much RAM can a 32bit OS support?
It's 4 GB but I am assuming depending on the machine and what else it needs memory for you can get different numbers displayed. See the answers here (superuser.com/questions/27086/…)
Feb
23
comment Moving a Mac Tower Cross-Country
Buckle it up Shotgun style, with a pillow and a cup of coffee
Feb
23
awarded  Civic Duty
Feb
23
revised Can I use Microsoft IMAGEX.exe to save a image from entire disk?
fixed typos