Dos/port Scan From 168.95.1.1 - Anyone Else?

[philg]

For the past week, my router has been reporting DoS/Port Scan activity from 168.95.1.1

Using Whois, I sent a couple of mails to the domain webmaster/owner (in Taiwan) but (surprise surprise) their mailboxes are full

Anyone else having the same problem?

Anyone got any good ideas apart from ignoring the situation and hoping it will go away??

Cheers

Phil G

[Tuvok]

I was suggest running Malwarebytes - incase you have anything on your computer that is expecting incoming connections from that IP address, which are fortunately/hopefully being blocked by your router or computer.

[philg]

Thanks for the info - I'm a Home Office worker, but do have up to date anti-virus and malware detection

The remote IP is scanning a huge range of ports - up in the 50,000s and is originating from their port :53

I have a Draytek Vigor router and using it's built in firewall and NAT protection

I'm pretty sure I'm covered but it's more than a little irritating - to avoid being swamped by router warnings I have had to turn off my email notifications from the router

[philg]

How do I ".... report the maliciious IP address .... to Trend Micro ...."? I don't see anything on their website that might be applicable

Thanks

[Old_Geezer]

Can you not set the alarm warning level on the router to not report this ? I take it there are logs you can look at periodically if interested. It's just that if your protection is noticing the issue and dealing with it, is there any value in you being aware ?

For what it's worth, I've used the 'shieldsup' check site in the past to gain confidence in the firewall I was using.