Question : Dlink DSL-2740B What is a kernel: Intrusion? Should I be concerned?

Hi,

Please can someone comment on the following log entries on my router I am getting several errors a day.

Is my External IP being attacked or is this normal please?

If this is a threat, then how can I stop this please?

Not sure what IP 98.124.95.94 is.

Many thanks
Peter

Code Snippet:

         
             Date/Time       Facility Severity Message                         
 Oct 23 00:15:51 user alert kernel: Intrusion -> IN=ppp_0_0_38_1 OUT= MAC= SRC=98.124.95.94 DST=MY_WAN_ADDRESS LEN=52 TOS=0x00 PREC=0x00 TTL=54 ID=29759 DF PROTO=TCP SPT=57733 DPT=445 WINDOW=65535 RES=0x00 SYN URGP=0  
 Oct 23 00:25:20 user alert kernel: Intrusion -> IN=ppp_0_0_38_1 OUT= MAC= SRC=98.124.95.94 DST=MY_WAN_ADDRESS LEN=52 TOS=0x00 PREC=0x00 TTL=54 ID=51776 DF PROTO=TCP SPT=16175 DPT=445 WINDOW=65535 RES=0x00 SYN URGP=0

Open in New Window

Select All

Answer : Dlink DSL-2740B What is a kernel: Intrusion? Should I be concerned?

I've not used that particular device but after a quick scan of it's manual (ftp://ftp.dlink.co.uk/dkt_products/dkt-810/DSL-2740B_Manual.pdf) I would say no. You could however raise the log level or send the logs to a syslog server for better management.