What does all this mean ?

[old Bill]

I just had a look at my routers firewall log and it came up with this. Is this just routine or were people trying to get past the firewal ?

Firewall log:
Feb 22 09:38:36 (none) user.alert kernel: LANDATTACKIN=ppp_0_38_1 OUT= MAC= attack detected from 212.69.112.146 117

Feb 22 09:38:39 (none) user.alert kernel: LANDATTACKIN=ppp_0_38_1 OUT= MAC= attack detected from 212.69.112.146 117

Feb 22 20:45:59 (none) user.alert kernel: PORTSCANNERIN=ppp_0_38_1 OUT= MAC= attack detected from 161.165.200.102 119

Feb 22 20:46:00 (none) user.alert kernel: PORTSCANNERIN=ppp_0_38_1 OUT= MAC= attack detected from 161.165.200.102 119

Feb 23 02:35:12 (none) user.alert kernel: LANDATTACKIN=ppp_0_38_1 OUT= MAC= attack detected from 212.69.112.146 117

Feb 23 13:44:07 (none) user.alert kernel: PORTSCANNERIN=ppp_0_38_1 OUT= MAC= attack detected from 69.17.117.208 117

[Lance]

Looks like I've been found out 

On a serious note, see if you can do a look up on the IP. That may give some clues.

It may be be an attack specific to you but more likely a program scanning a range of IP addresses searching for open ports etc in order to compromise your machine / network.

[Rik]

It looks like routine port scans from script kiddies, Bill. Your router is doing its job, logging them and playing dumb. I've looked up IPs for this sort of attack in the past and they seem to come from China, South America or Eastern Europe. There's little you can do except make sure your security is tight and up to date.