D-Link Forums
The Graveyard - Products No Longer Supported => Routers / COVR => DIR-655 => Topic started by: grandpavic on December 19, 2010, 12:10:58 PM
-
My log file (below) shows that the IP address assigned by my ISP is being constantly bombarded with TCP connection requests. I have spoken with my Internet Service Provider about this and they say they are spurious request emanating from the router itself. I have a DIR-655, hardware version A4 and firmware version 1.34NA.
Here is a portion of the log file:
[INFO] Sun Dec 19 14:50:29 2010 Blocked incoming TCP connection request from 109.79.210.128:1611 to 67.230.139.105:443
[INFO] Sun Dec 19 14:48:56 2010 Above message repeated 5 times
[INFO] Sun Dec 19 14:48:41 2010 Blocked incoming TCP connection request from 67.230.22.201:37839 to 67.230.139.105:445
[INFO] Sun Dec 19 14:48:38 2010 Above message repeated 1 times
[INFO] Sun Dec 19 14:48:20 2010 Blocked incoming TCP connection request from 109.79.210.128:1608 to 67.230.139.105:80
[INFO] Sun Dec 19 14:46:47 2010 Above message repeated 5 times
[INFO] Sun Dec 19 14:45:59 2010 Blocked incoming TCP connection request from 222.155.5.7:57224 to 67.230.139.105:443
[INFO] Sun Dec 19 14:45:50 2010 Above message repeated 2 times
[INFO] Sun Dec 19 14:41:48 2010 Blocked incoming TCP connection request from 72.17.147.138:58187 to 67.230.139.105:80
[INFO] Sun Dec 19 14:41:48 2010 Blocked incoming TCP connection request from 72.17.147.138:62947 to 67.230.139.105:443
[INFO] Sun Dec 19 14:41:00 2010 Blocked incoming TCP connection request from 72.17.147.138:58187 to 67.230.139.105:80
[INFO] Sun Dec 19 14:41:00 2010 Blocked incoming TCP connection request from 72.17.147.138:62947 to 67.230.139.105:443
[INFO] Sun Dec 19 14:40:56 2010 Blocked incoming TCP packet from 2.204.80.192:1933 to 67.230.139.105:443 as RST received but there is no active connection
[INFO] Sun Dec 19 14:40:52 2010 Blocked incoming TCP connection request from 2.204.80.192:1933 to 67.230.139.105:443
[INFO] Sun Dec 19 14:40:50 2010 Above message repeated 1 times
[INFO] Sun Dec 19 14:40:36 2010 Blocked incoming TCP connection request from 72.17.147.138:58187 to 67.230.139.105:80
[INFO] Sun Dec 19 14:40:36 2010 Blocked incoming TCP connection request from 72.17.147.138:62947 to 67.230.139.105:443
[INFO] Sun Dec 19 14:40:24 2010 Blocked incoming TCP connection request from 72.17.147.138:58187 to 67.230.139.105:80
[INFO] Sun Dec 19 14:40:24 2010 Blocked incoming TCP connection request from 72.17.147.138:62947 to 67.230.139.105:443
[INFO] Sun Dec 19 14:40:18 2010 Blocked incoming TCP connection request from 72.17.147.138:58187 to 67.230.139.105:80
[INFO] Sun Dec 19 14:40:18 2010 Blocked incoming TCP connection request from 72.17.147.138:62947 to 67.230.139.105:443
[INFO] Sun Dec 19 14:40:15 2010 Blocked incoming TCP connection request from 72.17.147.138:58187 to 67.230.139.105:80
[INFO] Sun Dec 19 14:40:15 2010 Blocked incoming TCP connection request from 72.17.147.138:62947 to 67.230.139.105:443
[INFO] Sun Dec 19 14:38:55 2010 Blocked incoming TCP connection request from 84.247.144.214:56834 to 67.230.139.105:16421
[INFO] Sun Dec 19 14:38:46 2010 Above message repeated 2 times
[INFO] Sun Dec 19 14:36:45 2010 Blocked incoming TCP connection request from 67.230.2.41:4839 to 67.230.139.105:445
[INFO] Sun Dec 19 14:36:42 2010 Above message repeated 1 times
[INFO] Sun Dec 19 14:36:27 2010 Blocked incoming TCP connection request from 67.230.17.125:9046 to 67.230.139.105:445
[INFO] Sun Dec 19 14:35:27 2010 Blocked outgoing TCP packet from 192.168.0.193:50076 to 74.125.67.109:993 as PSH:ACK received but there is no active connection
[INFO] Sun Dec 19 14:34:39 2010 Blocked incoming TCP connection request from 81.19.246.10:51768 to 67.230.139.105:80
[INFO] Sun Dec 19 14:34:39 2010 Blocked incoming TCP connection request from 81.19.246.10:51767 to 67.230.139.105:443
[INFO] Sun Dec 19 14:33:50 2010 Blocked incoming TCP connection request from 81.19.246.10:51768 to 67.230.139.105:80
[INFO] Sun Dec 19 14:33:50 2010 Blocked incoming TCP connection request from 81.19.246.10:51767 to 67.230.139.105:443
[INFO] Sun Dec 19 14:33:26 2010 Blocked incoming TCP connection request from 81.19.246.10:51768 to 67.230.139.105:80
[INFO] Sun Dec 19 14:33:26 2010 Blocked incoming TCP connection request from 81.19.246.10:51767 to 67.230.139.105:443
[INFO] Sun Dec 19 14:33:14 2010 Blocked incoming TCP connection request from 81.19.246.10:51768 to 67.230.139.105:80
[INFO] Sun Dec 19 14:33:14 2010 Blocked incoming TCP connection request from 81.19.246.10:51767 to 67.230.139.105:443
[INFO] Sun Dec 19 14:33:08 2010 Blocked incoming TCP connection request from 81.19.246.10:51768 to 67.230.139.105:80
[INFO] Sun Dec 19 14:33:08 2010 Blocked incoming TCP connection request from 81.19.246.10:51767 to 67.230.139.105:443
[INFO] Sun Dec 19 14:33:05 2010 Blocked incoming TCP connection request from 81.19.246.10:51768 to 67.230.139.105:80
[INFO] Sun Dec 19 14:33:05 2010 Blocked incoming TCP connection request from 81.19.246.10:51767 to 67.230.139.105:443
[INFO] Sun Dec 19 14:29:44 2010 Blocked incoming TCP connection request from 81.201.17.207:3040 to 67.230.139.105:80
[INFO] Sun Dec 19 14:29:41 2010 Above message repeated 1 times
Can I reconfigure the router to prevent this from happening?
-
You want it to block incoming traffic that is not requested. It is doing its job.
You can use a site such as :
http://www.dnsstuff.com/ (http://www.dnsstuff.com/)
to find out information about the addresses that are hitting you.
-
How does this affect my Internet service / response time?
-
It shouldn't affect it very much. Go do a speed test and ping test at http://www.speedtest.net/ (http://www.speedtest.net/) to see what you have.