Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[grandpavic]

My log file (below) shows that the IP address assigned by my ISP is being constantly bombarded with TCP connection requests. I have spoken with my Internet Service Provider about this and they say they are spurious request emanating from the router itself. I have a DIR-655, hardware version A4 and firmware version 1.34NA.

Here is a portion of the log file:

   
[INFO]   Sun Dec 19 14:50:29 2010   Blocked incoming TCP connection request from 109.79.210.128:1611 to 67.230.139.105:443
[INFO]   Sun Dec 19 14:48:56 2010   Above message repeated 5 times
[INFO]   Sun Dec 19 14:48:41 2010   Blocked incoming TCP connection request from 67.230.22.201:37839 to 67.230.139.105:445
[INFO]   Sun Dec 19 14:48:38 2010   Above message repeated 1 times
[INFO]   Sun Dec 19 14:48:20 2010   Blocked incoming TCP connection request from 109.79.210.128:1608 to 67.230.139.105:80
[INFO]   Sun Dec 19 14:46:47 2010   Above message repeated 5 times
[INFO]   Sun Dec 19 14:45:59 2010   Blocked incoming TCP connection request from 222.155.5.7:57224 to 67.230.139.105:443
[INFO]   Sun Dec 19 14:45:50 2010   Above message repeated 2 times
[INFO]   Sun Dec 19 14:41:48 2010   Blocked incoming TCP connection request from 72.17.147.138:58187 to 67.230.139.105:80
[INFO]   Sun Dec 19 14:41:48 2010   Blocked incoming TCP connection request from 72.17.147.138:62947 to 67.230.139.105:443
[INFO]   Sun Dec 19 14:41:00 2010   Blocked incoming TCP connection request from 72.17.147.138:58187 to 67.230.139.105:80
[INFO]   Sun Dec 19 14:41:00 2010   Blocked incoming TCP connection request from 72.17.147.138:62947 to 67.230.139.105:443
[INFO]   Sun Dec 19 14:40:56 2010   Blocked incoming TCP packet from 2.204.80.192:1933 to 67.230.139.105:443 as RST received but there is no active connection
[INFO]   Sun Dec 19 14:40:52 2010   Blocked incoming TCP connection request from 2.204.80.192:1933 to 67.230.139.105:443
[INFO]   Sun Dec 19 14:40:50 2010   Above message repeated 1 times
[INFO]   Sun Dec 19 14:40:36 2010   Blocked incoming TCP connection request from 72.17.147.138:58187 to 67.230.139.105:80
[INFO]   Sun Dec 19 14:40:36 2010   Blocked incoming TCP connection request from 72.17.147.138:62947 to 67.230.139.105:443
[INFO]   Sun Dec 19 14:40:24 2010   Blocked incoming TCP connection request from 72.17.147.138:58187 to 67.230.139.105:80
[INFO]   Sun Dec 19 14:40:24 2010   Blocked incoming TCP connection request from 72.17.147.138:62947 to 67.230.139.105:443
[INFO]   Sun Dec 19 14:40:18 2010   Blocked incoming TCP connection request from 72.17.147.138:58187 to 67.230.139.105:80
[INFO]   Sun Dec 19 14:40:18 2010   Blocked incoming TCP connection request from 72.17.147.138:62947 to 67.230.139.105:443
[INFO]   Sun Dec 19 14:40:15 2010   Blocked incoming TCP connection request from 72.17.147.138:58187 to 67.230.139.105:80
[INFO]   Sun Dec 19 14:40:15 2010   Blocked incoming TCP connection request from 72.17.147.138:62947 to 67.230.139.105:443
[INFO]   Sun Dec 19 14:38:55 2010   Blocked incoming TCP connection request from 84.247.144.214:56834 to 67.230.139.105:16421
[INFO]   Sun Dec 19 14:38:46 2010   Above message repeated 2 times
[INFO]   Sun Dec 19 14:36:45 2010   Blocked incoming TCP connection request from 67.230.2.41:4839 to 67.230.139.105:445
[INFO]   Sun Dec 19 14:36:42 2010   Above message repeated 1 times
[INFO]   Sun Dec 19 14:36:27 2010   Blocked incoming TCP connection request from 67.230.17.125:9046 to 67.230.139.105:445
[INFO]   Sun Dec 19 14:35:27 2010   Blocked outgoing TCP packet from 192.168.0.193:50076 to 74.125.67.109:993 as PSH:ACK received but there is no active connection
[INFO]   Sun Dec 19 14:34:39 2010   Blocked incoming TCP connection request from 81.19.246.10:51768 to 67.230.139.105:80
[INFO]   Sun Dec 19 14:34:39 2010   Blocked incoming TCP connection request from 81.19.246.10:51767 to 67.230.139.105:443
[INFO]   Sun Dec 19 14:33:50 2010   Blocked incoming TCP connection request from 81.19.246.10:51768 to 67.230.139.105:80
[INFO]   Sun Dec 19 14:33:50 2010   Blocked incoming TCP connection request from 81.19.246.10:51767 to 67.230.139.105:443
[INFO]   Sun Dec 19 14:33:26 2010   Blocked incoming TCP connection request from 81.19.246.10:51768 to 67.230.139.105:80
[INFO]   Sun Dec 19 14:33:26 2010   Blocked incoming TCP connection request from 81.19.246.10:51767 to 67.230.139.105:443
[INFO]   Sun Dec 19 14:33:14 2010   Blocked incoming TCP connection request from 81.19.246.10:51768 to 67.230.139.105:80
[INFO]   Sun Dec 19 14:33:14 2010   Blocked incoming TCP connection request from 81.19.246.10:51767 to 67.230.139.105:443
[INFO]   Sun Dec 19 14:33:08 2010   Blocked incoming TCP connection request from 81.19.246.10:51768 to 67.230.139.105:80
[INFO]   Sun Dec 19 14:33:08 2010   Blocked incoming TCP connection request from 81.19.246.10:51767 to 67.230.139.105:443
[INFO]   Sun Dec 19 14:33:05 2010   Blocked incoming TCP connection request from 81.19.246.10:51768 to 67.230.139.105:80
[INFO]   Sun Dec 19 14:33:05 2010   Blocked incoming TCP connection request from 81.19.246.10:51767 to 67.230.139.105:443
[INFO]   Sun Dec 19 14:29:44 2010   Blocked incoming TCP connection request from 81.201.17.207:3040 to 67.230.139.105:80
[INFO]   Sun Dec 19 14:29:41 2010   Above message repeated 1 times


Can I reconfigure the router to prevent this from happening?

[davevt31]

You want it to block incoming traffic that is not requested.  It is doing its job.

You can use a site such as :

http://www.dnsstuff.com/

to find out information about the addresses that are hitting you.

[grandpavic]

How does this affect my Internet service / response time?

[davevt31]

It shouldn't affect it very much.  Go do a speed test and ping test at http://www.speedtest.net/ to see what you have.