topic Re: Router Events Log, unknown in accept connections in My Router

Router Events Log, unknown in accept connections

WorriedCustomer — Mon, 28 Aug 2023 23:26:45 GMT

Hi, I’ve been getting constant in blocks for a long time in the events log, but recently I’ve been getting a lot of in accept connections which is kind of worrying. I’ll post a few of the most recent ones here, but the IPs that are sending/receiving data are scattered from vpn locations and place like china Taiwan. (Looked up the IPs) I know I’m probably being paranoid, but I’ve been hacked before so just want to be sure. (I have ports open for PlayStation and Call of duty if that has anything to do with it)
- Ip logs: [IN: ACCEPT [54] Connection opened (Port Forwarding: TCP [192.168.1.140]:80 <--> [146.90.248.78]:80 - - - [109.205.213.94]:59302 CLOSED/SYN_SENT ppp3 NAPT)
00:06:11, 29 Aug. IN: BLOCK [16] Remote administration (TCP [81.17.22.115]:33211->[146.90.248.78]:22 on ppp3)
00:01:22, 29 Aug. IN: ACCEPT [57] Connection closed (Port Forwarding: TCP [192.168.1.140]:443 <--> [146.90.248.78]:443 - - - [36.225.119.83]:35937 CLOSED/SYN_SENT ppp3 NAPT)
00:00:57, 29 Aug. IN: ACCEPT [57] Connection closed (Port Forwarding: TCP [192.168.1.140]:443 <--> [146.90.248.78]:443 - - - [89.190.156.161]:43499 CLOSED/SYN_SENT ppp3 NAPT)
00:00:19, 29 Aug. IN: BLOCK [16] Remote administration (TCP [190.167.106.56]:59258->[146.90.248.78]:22 on ppp3)
23:59:21, 28 Aug. IN: ACCEPT [54] Connection opened (Port Forwarding: TCP [192.168.1.140]:443 <--> [146.90.248.78]:443 - - - [36.225.119.83]:35937 CLOSED/SYN_SENT ppp3 NAPT)

Re: Router Events Log, unknown in accept connections

Dan_the_Van — Tue, 29 Aug 2023 06:32:17 GMT

Hi,

What device is 192.168.1.140?

Have you setup port forward rules to 192.168.1.140 on ports 80 and 443?

Those ports are usually used for HTTP and HTTPS connections

CLOSED/SYN_SENT would suggest those ports are not listening for connections on 192.168.1.140

Edit: You can check for open ports using https://www.yougetsignal.com/tools/open-ports/

Dan

Re: Router Events Log, unknown in accept connections

WorriedCustomer — Tue, 29 Aug 2023 09:18:03 GMT

Those ports (80,443) are open for my PlayStation, I deleted them this morning as I believe they are just for web browsing and won’t affect gameplay (idk why sony says to open them)

Re: Router Events Log, unknown in accept connections

Dan_the_Van — Tue, 29 Aug 2023 10:38:30 GMT

Port forwarding is only needed for inbound traffic to go to a specific device, so unless you are hosting something they do not need opening
Dan

Re: Router Events Log, unknown in accept connections

dvorak — Tue, 29 Aug 2023 10:48:08 GMT

Moderators Note

This topic has been released from the spam filter and duplicates removed.