Unusual In:ACCEPT connections, what should I do?
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
- Plusnet Community
- :
- Forum
- :
- Help with my Plusnet services
- :
- My Router
- :
- Unusual In:ACCEPT connections, what should I do?
Unusual In:ACCEPT connections, what should I do?
25-10-2020 6:46 AM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
Hello,
My last post was marked as Spam for some weird reason.
I usually check the logs on my plusnet router every morn for a few minutes to see whats up (I am a curious person) usually I see a lot of IN: BLOCK messages which after reading online it tells me is the firewall doing its job and not much to worry about.
However today I check and I see this:
06:18:39, 25 Oct. | IN: ACCEPT [54] Connection opened (Port Forwarding: UDP [192.168.1.64]:8999 <--> [146.90.160.182]:8999 - - - [14.207.146.65]:18436 ppp3 NAPT) |
06:18:32, 25 Oct. | IN: ACCEPT [54] Connection opened (Port Forwarding: UDP [192.168.1.64]:8999 <--> [146.90.160.182]:8999 - - - [61.99.208.51]:7896 ppp3 NAPT) |
06:18:23, 25 Oct. | IN: ACCEPT [57] Connection closed (Port Forwarding: UDP [192.168.1.64]:8999 <--> [146.90.160.182]:8999 - - - [185.31.61.125]:6889 ppp3 NAPT) |
06:18:20, 25 Oct. | IN: ACCEPT [54] Connection opened (Port Forwarding: UDP [192.168.1.64]:8999 <--> [146.90.160.182]:8999 - - - [172.98.86.42]:28798 ppp3 NAPT) |
06:18:19, 25 Oct. | IN: ACCEPT [57] Connection closed (Port Forwarding: UDP [192.168.1.64]:8999 <--> [146.90.160.182]:8999 - - - [157.34.27.21]:59204 ppp3 NAPT) |
06:18:18, 25 Oct. | IN: ACCEPT [57] Connection closed (Port Forwarding: UDP [192.168.1.64]:8999 <--> [146.90.160.182]:8999 - - - [181.30.28.51]:4000 ppp3 NAPT) |
06:18:18, 25 Oct. | IN: ACCEPT [54] Connection opened (Port Forwarding: UDP [192.168.1.64]:8999 <--> [146.90.160.182]:8999 - - - [183.107.232.30]:7824 ppp3 NAPT) |
06:18:17, 25 Oct. | IN: ACCEPT [54] Connection opened (Port Forwarding: UDP [192.168.1.64]:8999 <--> [146.90.160.182]:8999 - - - [84.107.79.106]:1024 ppp3 NAPT) |
06:18:17, 25 Oct. | IN: ACCEPT [57] Connection closed (Port Forwarding: UDP [192.168.1.64]:8999 <--> [146.90.160.182]:8999 - - - [93.86.68.237]:1033 ppp3 NAPT) |
06:18:14, 25 Oct. | IN: ACCEPT [57] Connection closed (Port Forwarding: UDP [192.168.1.64]:8999 <--> [146.90.160.182]:8999 - - - [82.5.138.176]:56309 ppp3 NAPT) |
06:18:12, 25 Oct. | IN: ACCEPT [54] Connection opened (Port Forwarding: UDP [192.168.1.64]:8999 <--> [146.90.160.182]:8999 - - - [197.229.3.234]:59551 ppp3 NAPT) |
06:18:09, 25 Oct. | IN: ACCEPT [57] Connection closed (Port Forwarding: UDP [192.168.1.64]:8999 <--> [146.90.160.182]:8999 - - - [83.81.214.109]:51142 ppp3 NAPT) |
Not a single IN: BLOCK and a lot of IN: ACCEPT. Is this something I should worry about and if so is there anything I can do about it?
Re: Unusual In:ACCEPT connections, what should I do?
25-10-2020 11:07 AM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
Do you have a qbittorrent client ruuning ? Port 8999 is typically used by qbittorrent and it may have used uPnP to create the port forward
Superusers are not staff, but they do have a direct line of communication into the business in order to raise issues, concerns and feedback from the community.
Re: Unusual In:ACCEPT connections, what should I do?
25-10-2020 11:27 AM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
Yes actually! I used it to download a big Elder Scroll's game mod, how do I fix this?
Re: Unusual In:ACCEPT connections, what should I do?
25-10-2020 11:39 AM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
I have no idea Im afraid. I dont use it, I just happen to know what port it uses. Try searching...
Superusers are not staff, but they do have a direct line of communication into the business in order to raise issues, concerns and feedback from the community.
Re: Unusual In:ACCEPT connections, what should I do?
25-10-2020 6:35 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
Done a lot of searching and sadly so far found no answers.
I blocked 8999 on my own firewall but I still see connections coming in.
I do not see a way to block 8999 directly on the router.
If anyone has any more help to provide it would be appreciated.
Re: Unusual In:ACCEPT connections, what should I do?
26-10-2020 5:31 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
@Karalhos wrote:
Yes actually! I used it to download a big Elder Scroll's game mod, how do I fix this?
Close the bittorrent client? 😉
If you have it running, then things are behaving as they should. The client will be requesting that the router poke a hole through the firewall for incoming peering requests.
Bob Pullen
Plusnet Product Team
If I've been helpful then please give thanks ⤵
Re: Unusual In:ACCEPT connections, what should I do?
26-10-2020 8:38 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
After it was mentioned the bit torrent was probably the cause I completely uninstalled Qbittorrent from my pc.
However I just did it cold turkey without any editing, should I reinstall the app and ensure the settings are correctly turned off?
I check today and I am still geting the constant connections....
Re: Unusual In:ACCEPT connections, what should I do?
28-10-2020 4:21 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
Hi @Karalhos
Did you get to resolve your issue, if not take a look at this utility.
https://docs.microsoft.com/en-us/sysinternals/downloads/tcpview
Dan
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
- Plusnet Community
- :
- Forum
- :
- Help with my Plusnet services
- :
- My Router
- :
- Unusual In:ACCEPT connections, what should I do?