04-06-2012 05:14 AM
I don't know if this is normal but I see many incoming connections, mainly from Google etc.
For example, why is Google making a connection from 172.194.38.129 to 192.168.2.2:4982 ?
The firewall on 192.168.2.2 is on but that is after the RV042 of course.
I am sure that there is a simple answer for this.
Apr 6 19:03:52 2012 | Connection Accepted | UDP 208.67.222.222:53->192.168.2.2:64086 on eth0 |
Apr 6 19:03:53 2012 | Connection Accepted | UDP 208.67.222.222:53->192.168.2.2:55580 on eth0 |
Apr 6 19:03:53 2012 | Connection Accepted | TCP 173.194.38.137:80->192.168.2.2:4980 on eth0 |
Apr 6 19:03:53 2012 | Connection Accepted | TCP 173.194.38.137:80->192.168.2.2:4980 on eth0 |
Apr 6 19:03:53 2012 | Connection Accepted | UDP 208.67.222.222:53->192.168.2.2:57151 on eth0 |
Apr 6 19:03:53 2012 | Connection Accepted | UDP 208.67.222.222:53->192.168.2.2:58089 on eth0 |
Apr 6 19:03:53 2012 | Connection Accepted | TCP 173.194.38.129:80->192.168.2.2:4982 on eth0 |
Apr 6 19:03:53 2012 | Connection Accepted | TCP 173.194.38.129:80->192.168.2.2:4982 on eth0 |
Apr 6 19:03:53 2012 | Connection Accepted | TCP 173.194.38.129:80->192.168.2.2:4982 on eth0 |
Apr 6 19:03:54 2012 | Connection Accepted | TCP 173.194.38.129:80->192.168.2.2:4982 on eth0 |
Apr 6 19:03:54 2012 | Connection Accepted | TCP 173.194.38.129:80->192.168.2.2:4982 on eth0 |
Apr 6 19:03:54 2012 | Connection Accepted | TCP 173.194.38.129:80->192.168.2.2:4982 on eth0 |
Apr 6 19:03:54 2012 | Connection Accepted | TCP 173.194.38.129:80->192.168.2.2:4982 on eth0 |
Apr 6 19:04:13 2012 | Connection Accepted | TCP 72.14.203.125:443->192.168.2.2:1087 on eth0 |
Apr 6 19:04:22 2012 | Connection Accepted | TCP 157.55.130.144:40031->192.168.2.2:4700 on eth0 |
Apr 6 19:04:30 2012 | Connection Accepted | TCP 213.146.189.206:12350->192.168.2.2:4705 on eth0 |
Thanks in advance
04-06-2012 11:14 AM
Johan,
Without knowing more about your network my assumption would be that a connection was made because someone from the computer at 192.168.2.2 did a google search. 173.194.38.129 is an address registered to a Google server. Why port 4982 was used is beyond me. The only thing that I can find that references the port is an IANA entry for Solar Data Log. Hope this Helps
Blake Wright
Cisco SBSC Network Engineer
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide