AnsweredAssumed Answered

Attack name:Chargen scan

Question asked by greyraven on Sep 16, 2013
Latest reply on Sep 17, 2013 by greyraven

Looking at my router log I saw this burst of Chargen scan activity - then it disappeared.

I've seen some of these "Attack name:" msgs before - but not in a burst like this.

Is there some reason Shaw is using this or can they block it?

Is there some point at which this should be a concern?

Router is SMC 8014 WN (wi fi) and I am using wifi for a Roku connection.

 

Log msgs follow:

 

(9/15/13 12:33:48) Receive Ack

Attack name:Chargen scan, 9/15/13 12:57:43 ~ 9/15/13 12:57:43

Attack name:Chargen scan, 9/15/13 21:43:03 ~ 9/15/13 21:43:03

Attack name:Chargen scan, 9/15/13 21:43:10 ~ 9/15/13 21:43:10

Attack name:Chargen scan, 9/15/13 21:43:11 ~ 9/15/13 21:43:11

Attack name:Chargen scan, 9/15/13 21:43:11 ~ 9/15/13 21:43:11

Attack name:Chargen scan, 9/15/13 21:43:13 ~ 9/15/13 21:43:13

Attack name:Chargen scan, 9/15/13 21:43:15 ~ 9/15/13 21:43:15

Attack name:Chargen scan, 9/15/13 21:43:25 ~ 9/15/13 21:43:25

Attack name:Chargen scan, 9/15/13 21:43:36 ~ 9/15/13 21:43:36

Attack name:Chargen scan, 9/15/13 21:43:36 ~ 9/15/13 21:43:36

Attack name:Chargen scan, 9/15/13 21:43:37 ~ 9/15/13 21:43:37

Attack name:Chargen scan, 9/15/13 21:43:38 ~ 9/15/13 21:43:38

Attack name:Chargen scan, 9/15/13 21:43:38 ~ 9/15/13 21:43:38

Attack name:Chargen scan, 9/15/13 21:43:39 ~ 9/15/13 21:43:39

Attack name:Chargen scan, 9/15/13 21:43:41 ~ 9/15/13 21:43:41

Attack name:Chargen scan, 9/15/13 21:43:54 ~ 9/15/13 21:43:54

Attack name:Chargen scan, 9/15/13 21:43:55 ~ 9/15/13 21:43:55

Attack name:Chargen scan, 9/15/13 21:43:57 ~ 9/15/13 21:43:57

Attack name:Chargen scan, 9/15/13 21:44:04 ~ 9/15/13 21:44:04

Attack name:Chargen scan, 9/15/13 21:44:08 ~ 9/15/13 21:44:08

Attack name:Chargen scan, 9/15/13 21:44:11 ~ 9/15/13 21:44:11

(9/16/13 05:45:02) Send Request, Request ip = 70.66.0.154

(9/16/13 05:45:02) Receive Ack

Attack name:Chargen scan, 9/16/13 21:44:33 ~ 9/16/13 21:44:33

(9/17/13 01:22:46) 192.168.0.120 cusadmin login

(9/17/13 02:57:01) 192.168.0.120 cusadmin login

 

Outcomes