My network setup is as follows:
ISP's cable modem <-> My router <-> devices (includes VoIP router).
Looking through my router's logs, i came across the following under the "dropped" section:
Thu Sep 5 17:42:35 2013
klogd: Drop PING request from 119.63.199.69.
Thu Sep 5 17:42:34 2013
klogd: Drop PING request from 119.63.199.69.
Thu Sep 5 17:40:16 2013
klogd: Drop PING request from 119.63.199.69.
Thu Sep 5 17:40:16 2013
klogd: Drop PING request from 119.63.199.69.
Thu Sep 5 17:08:31 2013
klogd: Drop PING request from 1.61.222.95.
Thu Sep 5 17:08:31 2013
klogd: Drop PING request from 1.61.222.95.
Thu Sep 5 07:27:31 2013
klogd: Drop PING request from 175.148.239.126.
Thu Sep 5 07:27:31 2013
klogd: Drop PING request from 175.148.239.126.
Wed Sep 4 23:16:51 2013
klogd: Drop PING request from 112.116.114.11.
Wed Sep 4 23:16:51 2013
klogd: Drop PING request from 112.116.114.11.
Doing the generic whois, these addresses all trace back to asia (China for the first 3 addresses and then Japan for the last). These pings all occurred at times when no one was actively using devices internal to the network.
What should I make of this? Cause for concern? Should i setup firewall rules to block the address ranges and see what happens?
ISP's cable modem <-> My router <-> devices (includes VoIP router).
Looking through my router's logs, i came across the following under the "dropped" section:
Thu Sep 5 17:42:35 2013
klogd: Drop PING request from 119.63.199.69.
Thu Sep 5 17:42:34 2013
klogd: Drop PING request from 119.63.199.69.
Thu Sep 5 17:40:16 2013
klogd: Drop PING request from 119.63.199.69.
Thu Sep 5 17:40:16 2013
klogd: Drop PING request from 119.63.199.69.
Thu Sep 5 17:08:31 2013
klogd: Drop PING request from 1.61.222.95.
Thu Sep 5 17:08:31 2013
klogd: Drop PING request from 1.61.222.95.
Thu Sep 5 07:27:31 2013
klogd: Drop PING request from 175.148.239.126.
Thu Sep 5 07:27:31 2013
klogd: Drop PING request from 175.148.239.126.
Wed Sep 4 23:16:51 2013
klogd: Drop PING request from 112.116.114.11.
Wed Sep 4 23:16:51 2013
klogd: Drop PING request from 112.116.114.11.
Doing the generic whois, these addresses all trace back to asia (China for the first 3 addresses and then Japan for the last). These pings all occurred at times when no one was actively using devices internal to the network.
What should I make of this? Cause for concern? Should i setup firewall rules to block the address ranges and see what happens?