newbie home router Q

Discussion in 'Computer Support' started by news.virgin.net, Feb 21, 2008.

  1. Hi,
    I have a D-link router on Virgin media cable (UK). Connected to this, my
    laptop on which runs PCguard on which I found the following log entry :

    tcp Incoming 216.89.80.51 80 192.168.0.8 4754 21/12/2007 17:43:26

    I've not got the router set up to send anything incoming to this laptop so
    why is there incomming traffic ?

    When I http://216.89.80.51 I get :

    <af>
    <r c="ok"/>
    </af>

    Thanks in advance.

    Bruce.
    news.virgin.net, Feb 21, 2008
    #1
    1. Advertising

  2. news.virgin.net

    Brian Cryer Guest

    "news.virgin.net" <> wrote in message
    news:fTevj.11880$%...
    > Hi,
    > I have a D-link router on Virgin media cable (UK). Connected to this,
    > my
    > laptop on which runs PCguard on which I found the following log entry :
    >
    > tcp Incoming 216.89.80.51 80 192.168.0.8 4754 21/12/2007 17:43:26
    >
    > I've not got the router set up to send anything incoming to this laptop so
    > why is there incomming traffic ?


    I assume that the "80" there means port 80, so if you are sure that there
    isn't any port forwarding set up at the router then I would guess that when
    browsing from your laptop that at some point you hit a page which made a
    reference to 216.89.80.51. If thats right then you should also see other
    similar logs when browsing.

    Assuming that I'm wrong with the above (I don't know what your logs are),
    does the time correspond with when your laptop fetched updated virus
    signatures via PCguard? (The time on my router has drifted compared to my
    pcs, so take that into account.) It may be PCguard, or another application
    you have installed, pulling down updates.

    These are my best GUESSES ...
    --
    Brian Cryer
    www.cryer.co.uk/brian
    Brian Cryer, Feb 21, 2008
    #2
    1. Advertising

  3. news.virgin.net

    why? Guest

    On Thu, 21 Feb 2008 13:19:07 GMT, news.virgin.net wrote:

    Did you know about, (yea NTLer :) ) ,
    virginmedia.users.self-help.security
    virginmedia.users.self-help.networking


    >Hi,
    > I have a D-link router on Virgin media cable (UK). Connected to this, my
    >laptop on which runs PCguard on which I found the following log entry :


    Maybe even,
    virginmedia.support.pcguard

    >tcp Incoming 216.89.80.51 80 192.168.0.8 4754 21/12/2007 17:43:26


    nice log :) it's only 1 line long. If what ever it is is blocked by PC
    guard don't worry.

    >I've not got the router set up to send anything incoming to this laptop so
    >why is there incomming traffic ?


    So is the laptop really 192.168.0.8? You checked with other AV/Aspyware
    apps?

    If not port forwarding, which you do need to setup. Maybe just plain
    normal routing. Routers tend to route things automatically, this happens
    when a system makes an outgoing request and gets something back.

    Shouldn't try http to something you don't know what it is.

    Even an nslookup fails, no reverse DNS. Maybe site has been taken down
    already?


    >When I http://216.89.80.51 I get :
    >
    ><af>
    > <r c="ok"/>
    ></af>


    When I don't browse that, but do a much safer wfetch (or Sam Spade) to
    fetch an unknown sites page, get the same.

    Doing a whois search finds,

    Registry Whois
    OrgName: Savvis
    OrgID: SAVVI-3
    Address: 3300 Regency Parkway
    City: Cary
    StateProv: NC
    PostalCode: 27511
    Country: US

    NetRange: 216.88.0.0 - 216.91.255.255
    CIDR: 216.88.0.0/14
    NetName: SAVVIS7

    Notice the range, most likely a Savvis customer and a site you don't
    want to connect to.

    >Thanks in advance.
    >
    >Bruce.
    >
    >


    Me
    why?, Feb 21, 2008
    #3
  4. news.virgin.net

    why? Guest

    why?, Feb 21, 2008
    #4
  5. news.virgin.net

    nobody > Guest

    news.virgin.net wrote:
    > Hi,
    > I have a D-link router on Virgin media cable (UK). Connected to this, my
    > laptop on which runs PCguard on which I found the following log entry :
    >
    > tcp Incoming 216.89.80.51 80 192.168.0.8 4754 21/12/2007 17:43:26
    >
    > I've not got the router set up to send anything incoming to this laptop so
    > why is there incomming traffic ?
    >
    > When I http://216.89.80.51 I get :
    >
    > <af>
    > <r c="ok"/>
    > </af>
    >
    > Thanks in advance.
    >
    > Bruce.
    >
    >
    >

    02/22/08 17:15:15 IP block 216.89.80.51
    Trying 216.89.80.51 at ARIN
    Trying 216.89.80 at ARIN
    Savvis SAVVIS7 (NET-216-88-0-0-1)
    216.88.0.0 - 216.91.255.255
    Tek Channel Consulting LLC SAVV-S254644-3 (NET-216-89-80-0-1)
    216.89.80.0 - 216.89.83.255

    # ARIN WHOIS database, last updated 2008-02-21 19:10
    # Enter ? for additional hints on searching ARIN's WHOIS database.
    nobody >, Feb 23, 2008
    #5
    1. Advertising

Want to reply to this thread or ask your own question?

It takes just 2 minutes to sign up (and it's free!). Just click the sign up button to choose a username and then you can ask your own questions on the forum.
Similar Threads
  1. No Spam
    Replies:
    3
    Views:
    3,971
    No Spam
    Jun 7, 2004
  2. Replies:
    0
    Views:
    924
  3. news.ntlworld.com

    Home Network Problems (Newbie Questions)

    news.ntlworld.com, Dec 18, 2005, in forum: Cisco
    Replies:
    14
    Views:
    2,536
    Cerebral Believer
    Dec 23, 2005
  4. Lee
    Replies:
    4
    Views:
    2,062
  5. Replies:
    0
    Views:
    1,405
Loading...

Share This Page