Many people possibly know this already, but we were discussing the networking information on NMSCord and thought I would share the basics for those unfamiliar with standard networking.
The first full security log talks about a WoL (Wake on LAN) attempt on port 9. LAN is Local Area Network, devices separate from the full internet, like all your home devices that are connected to your wireless router. They all get address from the router, usually in the address range of 192.168.x.1-254. Wake on LAN is for when a device is asleep and you want to tell it to wake up, you send 16 packets (called magic packets) on a specified port (usually 9), which it watches for while sleeping. When it gets those, it turns on.
The source address was 192.168.1.100. Typically, you would save addresses ending in .1, .100, and .254 for special devices like routers or servers, mainly just because they are easy to remember. The destination address was 192.168.1.255, which is not usually a normal device address; it’s used to broadcast to the entire network. So device .100 is probably a server that was trying to wake up every device on the network, and the internal firewall blocked it. I guess .100 could be a router and someone hacked into the router from outside and then sent the packets from the internal port of the router, as well.
Anyway, that’s all just some basic explainers to understand that message.