Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[hmkabaker]

In the normal course of running, my DIR-655 log shows entries like these:

INFO] Sat Mar 29 17:06:57 2008 Blocked incoming TCP connection request from 125.65.109.149:6000 to 72.75.69.11:2967

[INFO] Sat Mar 29 16:58:52 2008 Blocked incoming UDP packet from 202.97.238.204:45141 to 72.75.69.11:1026

[INFO] Sat Mar 29 16:56:29 2008 Blocked incoming UDP packet from 218.62.56.18:45434 to 72.75.69.11:1026

[INFO] Sat Mar 29 16:51:14 2008 Blocked incoming TCP connection request from 201.16.19.12:43848 to 72.75.69.11:443

[INFO] Sat Mar 29 16:51:05 2008 Above message repeated 2 times

[INFO] Sat Mar 29 16:49:28 2008 Blocked incoming UDP packet from 222.162.139.85:51911 to 72.75.69.11:1027

[INFO] Sat Mar 29 16:49:28 2008 Blocked incoming UDP packet from 222.162.139.85:51911 to 72.75.69.11:1026

[INFO] Sat Mar 29 16:42:52 2008 Blocked incoming TCP connection request from 59.63.157.211:6000 to 72.75.69.11:8000


The IP address at the end is mine, of course. I don't know what the different numbers at the end mean. What are :8000, :1026, :1027, etc. Are they ports? How do they relate to my router?

Other folks in this forum often ask questions like this when they have problems like dropped connections or router lockups. But I'm not having any frequent problems like that. Now and then something happens overnight, but I only have to reboot the router to get going again.

When I trace the source's ip address, I can get just enough info to know that I didn't want them to get through to me.

What are they sending, and how does the router know to block them?

Thanks.

Harvey

[Lycan]

thats standard operation for a router. the numbers you are seeing are ports. the router knows to block them bacuase that traffic was not requested from a computer on your Lan.