Your forum username:
Do you already have an account?
Forgot your password?
  • Log in or Sign up


    Welcome to Sky User - The Unofficial Support Forum for everything Sky! - Proudly helping over 65k members.


    Advertisement

    Results 1 to 10 of 10

    Router Log - UDP Entries

    This is a discussion on Router Log - UDP Entries within the Sky Router forums, part of the Sky Broadband help category; Last night, over a period of a few hours hours, a large number of entries appeared in my router log. ...

    1. #1
      Steve case's Avatar
      Steve case is offline Sky User Member
      Exchange: Prescot
      Broadband ISP: Mid
      Router:
      Sky TV:
      Join Date
      Mar 2007
      Posts
      156
      Thanks
      0
      Thanked 0 Times in 0 Posts

      Router Log - UDP Entries

      Last night, over a period of a few hours hours, a large number of entries appeared in my router log. A typical section is shown below:-

      Thu, 2007-07-05 20:01:52 - UDP Packet - Source:60.53.190.72,22507 Destination:90.199.15.220,23223 - [DOS]
      Thu, 2007-07-05 20:05:56 - UDP Packet - Source:59.117.183.104,19770 Destination:90.199.15.220,23223 - [DOS]
      Thu, 2007-07-05 20:05:56 - UDP Packet - Source:61.186.246.129,63809 Destination:90.199.15.220,23223 - [DOS]
      Thu, 2007-07-05 20:07:03 - UDP Packet - Source:66.214.173.214,11018 Destination:90.199.15.220,23223 - [DOS]
      Thu, 2007-07-05 20:07:04 - UDP Packet - Source:60.53.236.31,18392 Destination:90.199.15.220,23223 - [DOS]
      Thu, 2007-07-05 20:08:20 - UDP Packet - Source:89.253.150.242,24069 Destination:90.199.15.220,23223 - [DOS]
      Thu, 2007-07-05 20:08:33 - UDP Packet - Source:221.223.82.10,14322 Destination:90.199.15.220,23223 - [DOS]
      Thu, 2007-07-05 20:09:52 - UDP Packet - Source:84.164.86.200,21786 Destination:90.199.15.220,23223 - [DOS]
      Thu, 2007-07-05 20:10:03 - UDP Packet - Source:68.161.134.168,60481 Destination:90.199.15.220,23223 - [DOS]
      Thu, 2007-07-05 20:10:03 - UDP Packet - Source:58.142.235.223,17828 Destination:90.199.15.220,23223 - [DOS]


      Should I be concerned about these and, if so, what can I do about it?

      Any information/help greatly appreciated.
      Useful Links
      Download RouterStats (useful utility for continuously recording noise margin)


    2. Advertisement
    3. #2
      mossywell's Avatar
      mossywell is offline Sky User Member
      Exchange: LSMEPK
      Broadband ISP: Max
      Router:
      Sky TV:
      Join Date
      Sep 2006
      Location
      London, UK
      Posts
      789
      Thanks
      0
      Thanked 11 Times in 4 Posts

      Re: Router Log - UDP Entries

      Incoming connections from multiple IP addresses to one port have fired of the DOS protection in the router and in that sense, it's doing its job. Do you have a NAT entry on your router for this port and some app that uses this port?
      IQ album "Dark Matter" artwork reproduced with permission. See www.gep.co.uk/iq for more information.

    4. #3
      Steve case's Avatar
      Steve case is offline Sky User Member
      Exchange: Prescot
      Broadband ISP: Mid
      Router:
      Sky TV:
      Join Date
      Mar 2007
      Posts
      156
      Thanks
      0
      Thanked 0 Times in 0 Posts

      Re: Router Log - UDP Entries

      Quote Originally Posted by mossywell View Post
      Incoming connections from multiple IP addresses to one port have fired of the DOS protection in the router and in that sense, it's doing its job. Do you have a NAT entry on your router for this port and some app that uses this port?
      Thanks for your response. I'm a bit dim when it comes to firewalls and ports. Could you explain what a NAT entry is. (I think the answer to the first part is NO because I haven't done anything to change the router firewall default settiings. I'm not sure if I have any applications using the port. Is there any way to tell?
      Useful Links
      Download RouterStats (useful utility for continuously recording noise margin)

    5. #4
      mossywell's Avatar
      mossywell is offline Sky User Member
      Exchange: LSMEPK
      Broadband ISP: Max
      Router:
      Sky TV:
      Join Date
      Sep 2006
      Location
      London, UK
      Posts
      789
      Thanks
      0
      Thanked 11 Times in 4 Posts

      Re: Router Log - UDP Entries

      Sorry, I was in TLA mode! NAT is network address translation. But, as you haven't changed the default, you don't have any custom NAT entries. I guess that you've run some software that allows other to connect inbound. Classically peer to peer sharing or an instant messaging apps. So, these computers are probably just "pinging" the app (and I use the term loosely as it's not a ping in the sense that a network engineer might use the term) to see if it's still there. It's quite common, particular when you've been running some P2P app for a while: the inbound connection attempts seem to go on for days!
      IQ album "Dark Matter" artwork reproduced with permission. See www.gep.co.uk/iq for more information.

    6. #5
      Steve case's Avatar
      Steve case is offline Sky User Member
      Exchange: Prescot
      Broadband ISP: Mid
      Router:
      Sky TV:
      Join Date
      Mar 2007
      Posts
      156
      Thanks
      0
      Thanked 0 Times in 0 Posts

      Re: Router Log - UDP Entries

      Thanks for that - I'll keep an eye on the log over the next few days and see what happens.
      Useful Links
      Download RouterStats (useful utility for continuously recording noise margin)

    7. #6
      Alan b's Avatar
      Alan b is offline Sky User Member
      Exchange:
      Broadband ISP: Unlimited
      Router: Netgear V1 DG834GT
      Sky TV: 2 x Sky+ HD
      Join Date
      Sep 2006
      Posts
      4,188
      Thanks
      18
      Thanked 56 Times in 52 Posts

      Re: Router Log - UDP Entries

      I have these entries in my log:

      Fri, 2007-07-06 06:35:11 - UDP Packet - Source:88.100.108.178,18081 Destination:90.206.83.15,7735 - [DOS]
      Fri, 2007-07-06 06:35:16 - UDP Packet - Source:220.246.169.112,7307 Destination:90.206.83.15,7735 - [DOS]
      Fri, 2007-07-06 06:46:43 - UDP Packet - Source:8.3.211.85,10000 Destination:90.206.83.15,7735 - [DOS]
      Fri, 2007-07-06 06:48:14 - UDP Packet - Source:220.131.223.157,7391 Destination:90.206.83.15,7735 - [DOS]
      Fri, 2007-07-06 06:48:18 - UDP Packet - Source:8.3.211.85,10000 Destination:90.206.83.15,7735 - [DOS]
      Fri, 2007-07-06 06:48:19 - UDP Packet - Source:220.131.223.157,7391 Destination:90.206.83.15,7735 - [DOS]
      Fri, 2007-07-06 06:48:23 - UDP Packet - Source:8.3.211.85,10000 Destination:90.206.83.15,7735 - [DOS]
      Fri, 2007-07-06 06:48:28 - UDP Packet - Source:24.19.35.239,62844 Destination:90.206.83.15,7735 - [DOS]
      Fri, 2007-07-06 06:48:28 - UDP Packet - Source:8.3.211.85,10000 Destination:90.206.83.15,7735 - [DOS]


      So you are not the only one Steve. I haven't a clue when it comes to this stuff but I can say that I have not run any p2p stuff.

    8. #7
      Steve case's Avatar
      Steve case is offline Sky User Member
      Exchange: Prescot
      Broadband ISP: Mid
      Router:
      Sky TV:
      Join Date
      Mar 2007
      Posts
      156
      Thanks
      0
      Thanked 0 Times in 0 Posts

      Re: Router Log - UDP Entries

      Interesting - I haven't run any P2P programs either. Hopefully we'll get to the bottom of it one day.
      Useful Links
      Download RouterStats (useful utility for continuously recording noise margin)

    9. #8
      Saturday's Avatar
      Saturday is offline Sky User Super Mod
      Exchange:
      Broadband ISP: Sky Broadband Unlimited Pro
      Router: Sky Hub SR102
      Sky TV: Sky+HD box
      Join Date
      Sep 2006
      Posts
      6,086
      Thanks
      20
      Thanked 52 Times in 47 Posts

      Re: Router Log - UDP Entries

      Did you reboot earlier? If so then you've probably acquired an IP that was in use before you got it.

    10. #9
      Steve case's Avatar
      Steve case is offline Sky User Member
      Exchange: Prescot
      Broadband ISP: Mid
      Router:
      Sky TV:
      Join Date
      Mar 2007
      Posts
      156
      Thanks
      0
      Thanked 0 Times in 0 Posts

      Re: Router Log - UDP Entries

      Quote Originally Posted by Saturday View Post
      Did you reboot earlier? If so then you've probably acquired an IP that was in use before you got it.
      I did reboot some time in the last week (I was worried about lightning damage to my router so I unplugged it for an hour or so) so you are probably right. I noticed that in my case, every one of the log entries (of which there are about 130) has a different source IP address. Does this suggest automated random spoofing? I haven't had any further entries for the last 24 hours, so it's hopefully just academic.
      Useful Links
      Download RouterStats (useful utility for continuously recording noise margin)

    11. #10
      Saturday's Avatar
      Saturday is offline Sky User Super Mod
      Exchange:
      Broadband ISP: Sky Broadband Unlimited Pro
      Router: Sky Hub SR102
      Sky TV: Sky+HD box
      Join Date
      Sep 2006
      Posts
      6,086
      Thanks
      20
      Thanked 52 Times in 47 Posts

      Re: Router Log - UDP Entries

      Quote Originally Posted by Steve case View Post
      Does this suggest automated random spoofing?
      Possibly but far more likely is that the previous owner was running a P2P application which will often generate hundreds of "incoming" addresses if they were downloading/seeding a popular file.

     

     

    Tags for this Thread

    Posting Permissions

    • You may not post new threads
    • You may not post replies
    • You may not post attachments
    • You may not edit your posts
    •  
    SkyUser - Copyright © 2006-2017. SatDish and NewsreadeR | SkyUser is in no way affiliated with Sky Broadband / BSkyB
    RIPA NOTICE: NO CONSENT IS GIVEN FOR INTERCEPTION OF PAGE TRANSMISSION