cancel
Showing results for 
Search instead for 
Did you mean: 

Router Events Log, unknown in accept connections

WorriedCustomer
Hooked
Posts: 5
Registered: ‎29-08-2023

Router Events Log, unknown in accept connections

Hi, I’ve been getting constant in blocks for a long time in the events log, but recently I’ve been getting a lot of in accept connections which is kind of worrying. I’ll post a few of the most recent ones here, but the IPs that are sending/receiving data are scattered from vpn locations and place like china Taiwan. (Looked up the IPs) I know I’m probably being paranoid, but I’ve been hacked before so just want to be sure. (I have ports open for PlayStation and Call of duty if that has anything to do with it)
- Ip logs: [IN: ACCEPT [54] Connection opened (Port Forwarding: TCP [192.168.1.140]:80 <-​-​> [146.90.248.78]:80 -​ -​ -​ [109.205.213.94]:59302 CLOSED/SYN_SENT ppp3 NAPT)
00:06:11, 29 Aug. IN: BLOCK [16] Remote administration (TCP [81.17.22.115]:33211-​>[146.90.248.78]:22 on ppp3)
00:01:22, 29 Aug. IN: ACCEPT [57] Connection closed (Port Forwarding: TCP [192.168.1.140]:443 <-​-​> [146.90.248.78]:443 -​ -​ -​ [36.225.119.83]:35937 CLOSED/SYN_SENT ppp3 NAPT)
00:00:57, 29 Aug. IN: ACCEPT [57] Connection closed (Port Forwarding: TCP [192.168.1.140]:443 <-​-​> [146.90.248.78]:443 -​ -​ -​ [89.190.156.161]:43499 CLOSED/SYN_SENT ppp3 NAPT)
00:00:19, 29 Aug. IN: BLOCK [16] Remote administration (TCP [190.167.106.56]:59258-​>[146.90.248.78]:22 on ppp3)
23:59:21, 28 Aug. IN: ACCEPT [54] Connection opened (Port Forwarding: TCP [192.168.1.140]:443 <-​-​> [146.90.248.78]:443 -​ -​ -​ [36.225.119.83]:35937 CLOSED/SYN_SENT ppp3 NAPT)
4 REPLIES 4
Dan_the_Van
Aspiring Hero
Posts: 2,846
Thanks: 1,369
Fixes: 86
Registered: ‎25-06-2007

Re: Router Events Log, unknown in accept connections

Hi,

What device is 192.168.1.140?

Have you setup port forward rules to 192.168.1.140 on ports 80 and 443?

Those ports are usually used for HTTP and HTTPS connections

CLOSED/SYN_SENT would suggest those ports are not listening for connections on 192.168.1.140

Edit: You can check for open ports using https://www.yougetsignal.com/tools/open-ports/ 

Dan

 

WorriedCustomer
Hooked
Posts: 5
Registered: ‎29-08-2023

Re: Router Events Log, unknown in accept connections

Those ports (80,443) are open for my PlayStation, I deleted them this morning as I believe they are just for web browsing and won’t affect gameplay (idk why sony says to open them)
Dan_the_Van
Aspiring Hero
Posts: 2,846
Thanks: 1,369
Fixes: 86
Registered: ‎25-06-2007

Re: Router Events Log, unknown in accept connections

Port forwarding is only needed for inbound traffic to go to a specific device, so unless you are hosting something they do not need opening
Dan
dvorak
Moderator
Moderator
Posts: 29,650
Thanks: 6,667
Fixes: 1,485
Registered: ‎11-01-2008

Re: Router Events Log, unknown in accept connections


Moderators Note


This topic has been released from the spam filter and duplicates removed.

Customer / Moderator
If it helped click the thumb
If it fixed it click 'This fixed my problem'