Please help, gateway router receiving odd pings

pizzathehut

Distinguished
Sep 9, 2006
8
0
18,510
My network setup is as follows:
ISP's cable modem <-> My router <-> devices (includes VoIP router).

Looking through my router's logs, i came across the following under the "dropped" section:
Thu Sep 5 17:42:35 2013
klogd: Drop PING request from 119.63.199.69.
Thu Sep 5 17:42:34 2013
klogd: Drop PING request from 119.63.199.69.
Thu Sep 5 17:40:16 2013
klogd: Drop PING request from 119.63.199.69.
Thu Sep 5 17:40:16 2013
klogd: Drop PING request from 119.63.199.69.
Thu Sep 5 17:08:31 2013
klogd: Drop PING request from 1.61.222.95.
Thu Sep 5 17:08:31 2013
klogd: Drop PING request from 1.61.222.95.
Thu Sep 5 07:27:31 2013
klogd: Drop PING request from 175.148.239.126.
Thu Sep 5 07:27:31 2013
klogd: Drop PING request from 175.148.239.126.
Wed Sep 4 23:16:51 2013
klogd: Drop PING request from 112.116.114.11.
Wed Sep 4 23:16:51 2013
klogd: Drop PING request from 112.116.114.11.


Doing the generic whois, these addresses all trace back to asia (China for the first 3 addresses and then Japan for the last). These pings all occurred at times when no one was actively using devices internal to the network.

What should I make of this? Cause for concern? Should i setup firewall rules to block the address ranges and see what happens?
 
Solution
looks like you don't need do anything since the ping request is dropped.

What you are seeing is normal.. I see same sort of thing... and its just people/(hackers?) scanning IP ranges to try and detect machines for whatever purposes (I assume nefarious)...
Modern routers etc will block.. etc and most will also do as yours appears to do ... and ignore ping requests...so the people scanning don't get a response at all.
If I understand correctly - using a PING is not very sophisticated.. so these are the least of our worries. If CIA/MI6/NSA want to get in.. I am sure we would not know anything about it! (they probably have a back door direct from our ISP)!! ;)

Cheers
looks like you don't need do anything since the ping request is dropped.

What you are seeing is normal.. I see same sort of thing... and its just people/(hackers?) scanning IP ranges to try and detect machines for whatever purposes (I assume nefarious)...
Modern routers etc will block.. etc and most will also do as yours appears to do ... and ignore ping requests...so the people scanning don't get a response at all.
If I understand correctly - using a PING is not very sophisticated.. so these are the least of our worries. If CIA/MI6/NSA want to get in.. I am sure we would not know anything about it! (they probably have a back door direct from our ISP)!! ;)

Cheers
 
Solution