XPost: alt.comp.os.windows-10   
   From: nospam@nospam.com   
      
   On Sat, 4 Mar 2023 14:15:55 -0500, Alan Browne wrote:   
      
      
   > I often peek to see what is using the router.  Probably a dozen times   
   > per year.  Keep the creds in a password manager.   
      
   I just peeked at the new router that I had installed yesterday and   
   just reading the log brings up a whole bunch of new questions I don't   
   know the answers to.   
      
   Like should I worry about the time zone or this highlighted line in this   
   screen shot?   
   https://i.postimg.cc/TPPGJ926/dosattack.jpg   
      
   There are a whole bunch of the expected list of devices attaching to it.   
   [DHCP IP: (192.168.1.31)] to MAC address B2:2E:18:XX:XX:XX, Saturday, Mar   
   04,2023 12:29:53   
   [DHCP IP: (192.168.1.32)] to MAC address FA:63:40:XX:XX:XX, Saturday, Mar   
   04,2023 14:30:52   
   [DHCP IP: (192.168.1.33)] to MAC address 48:5F:99:XX:XX:XX, Saturday, Mar   
   04,2023 16:53:15   
   [DHCP IP: (192.168.1.35)] to MAC address D8:FB:5E:XX:XX:XX, Saturday, Mar   
   04,2023 10:04:43   
   [DHCP IP: (192.168.1.38)] to MAC address E2:11:A4:XX:XX:XX, Saturday, Mar   
   04,2023 13:36:20   
   [DHCP IP: (192.168.1.30)] to MAC address D4:1B:81:XX:XX:XX, Saturday, Mar   
   04,2023 10:17:58   
   [DHCP IP: (192.168.1.41)] to MAC address 8C:29:37:XX:XX:XX, Saturday, Mar   
   04,2023 10:18:20   
   [DHCP IP: (192.168.1.42)] to MAC address 96:0C:98:XX:XX:XX, Saturday, Mar   
   04,2023 11:06:11   
   [DHCP IP: (192.168.1.43)] to MAC address 4E:69:49:XX:XX:XX, Saturday, Mar   
   04,2023 16:09:10   
      
   And a little bit of housekeeping in the log file.   
   [Time synchronized with NTP server] Friday, Mar 03,2023 22:35:58   
   [Internet connected] IP address: XXX.XXX.XXX.XXX, Friday, Mar 03,2023 22:35:57   
   [Initialized, firmware version: V1.0.11.136] Friday, Mar 03,2023 22:35:35   
   [Admin login] from source 192.168.1.32, Saturday, Mar 04,2023 20:31:21   
      
   But what was a bit disconcerting was this logged event.   
   [DoS attack: FIN Scan] (1) attack packets in last 20 sec from ip   
   [18.154.206.7], Saturday, Mar 04,2023 00:33:13   
      
   --- SoupGate-Win32 v1.05   
    * Origin: you cannot sedate... all the things you hate (1:229/2)