Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[GigabitEthernet]

I am using a BT Smart Hub and behind it an OpenWrt router so I should be very safe in terms of firewall but I am seeing these events in the Smart Hub Event Log which are concerning me:

Code: [Select]

:FIREWALL PORTFORWARD_ACCEPT:IN=ppp1 OUT= MAC= SRC=119.247.71.25 DST=81.156.112.42 LEN=126 TOS=0x00 PREC=0x00 TTL=112 ID=10437 PROTO=UDP SPT=12620 DPT=2608 LEN=106 MARK=0x8000000

Code: [Select]

:FIREWALL PORTFORWARD_ACCEPT:IN=ppp1 OUT= MAC= SRC=167.86.70.12 DST=81.156.112.42 LEN=123 TOS=0x00 PREC=0x00 TTL=53 ID=13249 DF PROTO=UDP SPT=37936 DPT=2608 LEN=103 MARK=0x8000000

Code: [Select]

:FIREWALL PORTFORWARD_ACCEPT:IN=ppp1 OUT= MAC= SRC=168.90.64.162 DST=81.156.112.42 LEN=132 TOS=0x00 PREC=0x20 TTL=52 ID=30323 DF PROTO=UDP SPT=12498 DPT=2608 LEN=112 MARK=0x8000000
Literally dozens and dozens of them. At first I thought it was my torrent client but I closed this down and they're still coming through. They seem to be from all over the world, is this people trying to hack into my network, or scanning open ports, etc?