0

The log of my router display such a message:

IP SPOOFING ATTACK:IN=eth1.3900 OUT= MAC=5c:XXXXXXXXXXXXX SRC=192.168.1.10 DST=85.XXXXXXXXXX LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=5750 PROTO=TCP SPT=6859 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0

What I don't understand is the SRC address: it's in my LAN but I have no device with this IP ! Explanation ?
Shall I protect my system stronger ?

  • Do you have a machine on your network that has a matching MAC address? Is Eth1.3900 a wired or wireless ethernet interface? – Nevin Williams Feb 18 '17 at 21:38
  • The only five first numbers (5c ...) are identical to my Zyxel router mac address. eth1.3900 is a wired ethernet interface. – Bertaud Feb 18 '17 at 23:22

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.