Зашел в логи роутера и увидел вот это:
Jan 27 18:00:17 rlx-linux user.warn kernel: DoS: Port Scan Attack source=87.240.131.118 destination="МОЙ_АЙПИ_CENSURED"
Решил проверить что это за айпишник такой, вбил:
alexander@computer:~$ whois 87.240.131.118
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf
% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '87.240.128.0 - 87.240.159.255'
% Abuse contact for '87.240.128.0 - 87.240.159.255' is 'cfo@vkontakte.ru'
inetnum: 87.240.128.0 - 87.240.159.255
netname: VKONTAKTE-SPB-NET
descr: Vkontakte Ltd
country: RU
admin-c: PVD90-RIPE
tech-c: PVD90-RIPE
status: ASSIGNED PA
mnt-by: VKONTAKTE-NET-MNT
created: 2009-12-24T13:54:52Z
last-modified: 2009-12-24T13:54:52Z
source: RIPE # Filtered
person: Pavel V Durov
address: 8-B, Tverskaya str.,
address: 191015 Saint Petersburg, Russia
phone: +7 812 449 5670
fax-no: +7 812 449 2287
mnt-by: VKONTAKTE-NET-MNT
nic-hdl: PVD90-RIPE
created: 2007-09-04T08:41:02Z
last-modified: 2009-04-08T13:21:07Z
source: RIPE # Filtered
% Information related to '87.240.128.0/18AS47541'
route: 87.240.128.0/18
descr: VKONTAKTE SPb Net
origin: AS47541
mnt-by: VKONTAKTE-NET-MNT
created: 2009-12-24T13:57:25Z
last-modified: 2009-12-24T13:57:25Z
source: RIPE # Filtered
% This query was served by the RIPE Database Query Service version 1.84.1 (DB-1)