Re: about my dlink DI-804hv

["Nicolas Nicolau" <mensakez.alertas () gmail com>]

Hi rober...
I think you don't have any problem... is normal if you have this log.
Normaly the people make scan many ips... and the ports are scanned
you no have dangerus. the 445 is a windows proccess system...
the 6881 is a port of the azureus. the port 1027 I don't know now...
but this night I see it... but i remember... that is other process system.

microsoft-ds      445/tcp
bittorent            6881/udp (azureus)

(now in spanish)
Hola rober..
yo pienso que no tienes ningun problem... normalmente se relazan escaneos
por personas a multiples ips... Los puertos que te han escaneado no son
peligrosos...
y a parte por lo visto tienes el firewall activado en el router. El puerto
445
es un proceso de sistema de windows y el 6881 pertenece al programa azureus
o
red bittorent. El puerto 1027 no lo recuerdo ahora mismo esta noche lo miro
pero si no me equivoco es un proceso de sistema tambie. Asi que no te
preocupes...

----- Original Message ----- 
From: "Robert T" <roberto.torres.aguayo () gmail com>
To: <security-basics () securityfocus com>
Sent: Friday, November 04, 2005 4:05 AM
Subject: about my dlink DI-804hv


hi everyone

a few days ago my router  d-link DI-804hv, started failing, today i
got access to the log and it´ shows lots of records like this:
"""
03 de Noviembre de 2005 08:52:27 p.m. Blocked access attempt from
84.48.59.185:27446 to UDP port 6881
Jueves, 03 de Noviembre de 2005 08:52:32 p.m. Blocked access attempt
from 221.211.255.9:34482 to UDP port 1027
Jueves, 03 de Noviembre de 2005 08:52:34 p.m. Blocked access attempt
from 201.128.243.234:3361 to TCP port 445
"""
It´s posible that somebody tried to re-configure or gain access  of my
DI-804hv, and because of that the performance of my router fails???

i don´t have rules configured execpt the ones that comes with the
configuration....

Thanks ind advanced


--
RoberTukoTheBest