cancel
Showing results for 
Search instead for 
Did you mean: 

Unusual In:ACCEPT connections, what should I do?

Karalhos
Hooked
Posts: 5
Registered: ‎25-10-2020

Unusual In:ACCEPT connections, what should I do?

Hello, 
My last post was marked as Spam for some weird reason.
I usually check the logs on my plusnet router every morn for a few minutes to see whats up (I am a curious person) usually I see a lot of IN: BLOCK messages which after reading online it tells me is the firewall doing its job and not much to worry about.
However today I check and I see this:

06:18:39, 25 Oct. IN: ACCEPT [54] Connection opened (Port Forwarding: UDP [192.168.1.64]:8999 <-​-​> [146.90.160.182]:8999 -​ -​ -​ [14.207.146.65]:18436 ppp3 NAPT)
06:18:32, 25 Oct. IN: ACCEPT [54] Connection opened (Port Forwarding: UDP [192.168.1.64]:8999 <-​-​> [146.90.160.182]:8999 -​ -​ -​ [61.99.208.51]:7896 ppp3 NAPT)
06:18:23, 25 Oct. IN: ACCEPT [57] Connection closed (Port Forwarding: UDP [192.168.1.64]:8999 <-​-​> [146.90.160.182]:8999 -​ -​ -​ [185.31.61.125]:6889 ppp3 NAPT)
06:18:20, 25 Oct. IN: ACCEPT [54] Connection opened (Port Forwarding: UDP [192.168.1.64]:8999 <-​-​> [146.90.160.182]:8999 -​ -​ -​ [172.98.86.42]:28798 ppp3 NAPT)
06:18:19, 25 Oct. IN: ACCEPT [57] Connection closed (Port Forwarding: UDP [192.168.1.64]:8999 <-​-​> [146.90.160.182]:8999 -​ -​ -​ [157.34.27.21]:59204 ppp3 NAPT)
06:18:18, 25 Oct. IN: ACCEPT [57] Connection closed (Port Forwarding: UDP [192.168.1.64]:8999 <-​-​> [146.90.160.182]:8999 -​ -​ -​ [181.30.28.51]:4000 ppp3 NAPT)
06:18:18, 25 Oct. IN: ACCEPT [54] Connection opened (Port Forwarding: UDP [192.168.1.64]:8999 <-​-​> [146.90.160.182]:8999 -​ -​ -​ [183.107.232.30]:7824 ppp3 NAPT)
06:18:17, 25 Oct. IN: ACCEPT [54] Connection opened (Port Forwarding: UDP [192.168.1.64]:8999 <-​-​> [146.90.160.182]:8999 -​ -​ -​ [84.107.79.106]:1024 ppp3 NAPT)
06:18:17, 25 Oct. IN: ACCEPT [57] Connection closed (Port Forwarding: UDP [192.168.1.64]:8999 <-​-​> [146.90.160.182]:8999 -​ -​ -​ [93.86.68.237]:1033 ppp3 NAPT)
06:18:14, 25 Oct. IN: ACCEPT [57] Connection closed (Port Forwarding: UDP [192.168.1.64]:8999 <-​-​> [146.90.160.182]:8999 -​ -​ -​ [82.5.138.176]:56309 ppp3 NAPT)
06:18:12, 25 Oct. IN: ACCEPT [54] Connection opened (Port Forwarding: UDP [192.168.1.64]:8999 <-​-​> [146.90.160.182]:8999 -​ -​ -​ [197.229.3.234]:59551 ppp3 NAPT)
06:18:09, 25 Oct. IN: ACCEPT [57] Connection closed (Port Forwarding: UDP [192.168.1.64]:8999 <-​-​> [146.90.160.182]:8999 -​ -​ -​ [83.81.214.109]:51142 ppp3 NAPT)


Not a single IN: BLOCK and a lot of IN: ACCEPT. Is this something I should worry about and if so is there anything I can do about it?

Tags (1)
7 REPLIES 7
MisterW
Superuser
Superuser
Posts: 9,761
Thanks: 2,575
Fixes: 191
Registered: ‎30-07-2007

Re: Unusual In:ACCEPT connections, what should I do?

Do you have a qbittorrent client ruuning ? Port 8999 is typically used by qbittorrent and it may have used uPnP to create the port forward

Superusers are not staff, but they do have a direct line of communication into the business in order to raise issues, concerns and feedback from the community.

Karalhos
Hooked
Posts: 5
Registered: ‎25-10-2020

Re: Unusual In:ACCEPT connections, what should I do?

Yes actually! I used it to download a big Elder Scroll's game mod, how do I fix this? Smiley

MisterW
Superuser
Superuser
Posts: 9,761
Thanks: 2,575
Fixes: 191
Registered: ‎30-07-2007

Re: Unusual In:ACCEPT connections, what should I do?

I have no idea Im afraid. I dont use it, I just happen to know what port it uses. Try searching...

Superusers are not staff, but they do have a direct line of communication into the business in order to raise issues, concerns and feedback from the community.

Karalhos
Hooked
Posts: 5
Registered: ‎25-10-2020

Re: Unusual In:ACCEPT connections, what should I do?

Done a lot of searching and sadly so far found no answers.
I blocked 8999 on my own firewall but I still see connections coming in.
I do not see a way to block 8999 directly on the router.
If anyone has any more help to provide it would be appreciated.

bobpullen
Community Gaffer
Community Gaffer
Posts: 15,140
Thanks: 2,778
Fixes: 173
Registered: ‎04-04-2007

Re: Unusual In:ACCEPT connections, what should I do?


@Karalhos wrote:

Yes actually! I used it to download a big Elder Scroll's game mod, how do I fix this? Smiley


Close the bittorrent client? 😉

If you have it running, then things are behaving as they should. The client will be requesting that the router poke a hole through the firewall for incoming peering requests.

Bob Pullen
Plusnet Product Team
If I've been helpful then please give thanks ⤵

Karalhos
Hooked
Posts: 5
Registered: ‎25-10-2020

Re: Unusual In:ACCEPT connections, what should I do?

After it was mentioned the bit torrent was probably the cause I completely uninstalled Qbittorrent from my pc.

However I just did it cold turkey without any editing, should I reinstall the app and ensure the settings are correctly turned off?

I check today and I am still geting the constant connections....

Dan_the_Van
Pro
Posts: 512
Thanks: 54
Fixes: 6
Registered: ‎25-06-2007

Re: Unusual In:ACCEPT connections, what should I do?

Hi @Karalhos 

Did you get to resolve your issue, if not take a look at this utility.

https://docs.microsoft.com/en-us/sysinternals/downloads/tcpview

Dan