newbie home router Q

Discussion in 'Computer Support' started by, Feb 21, 2008.

  1. Hi,
    I have a D-link router on Virgin media cable (UK). Connected to this, my
    laptop on which runs PCguard on which I found the following log entry :

    tcp Incoming 80 4754 21/12/2007 17:43:26

    I've not got the router set up to send anything incoming to this laptop so
    why is there incomming traffic ?

    When I I get :

    <r c="ok"/>

    Thanks in advance.

, Feb 21, 2008
    1. Advertisements


    Brian Cryer Guest

    I assume that the "80" there means port 80, so if you are sure that there
    isn't any port forwarding set up at the router then I would guess that when
    browsing from your laptop that at some point you hit a page which made a
    reference to If thats right then you should also see other
    similar logs when browsing.

    Assuming that I'm wrong with the above (I don't know what your logs are),
    does the time correspond with when your laptop fetched updated virus
    signatures via PCguard? (The time on my router has drifted compared to my
    pcs, so take that into account.) It may be PCguard, or another application
    you have installed, pulling down updates.

    These are my best GUESSES ...
    Brian Cryer, Feb 21, 2008
    1. Advertisements


    why? Guest

    On Thu, 21 Feb 2008 13:19:07 GMT, wrote:

    Did you know about, (yea NTLer :) ) ,

    Maybe even,
    nice log :) it's only 1 line long. If what ever it is is blocked by PC
    guard don't worry.
    So is the laptop really You checked with other AV/Aspyware

    If not port forwarding, which you do need to setup. Maybe just plain
    normal routing. Routers tend to route things automatically, this happens
    when a system makes an outgoing request and gets something back.

    Shouldn't try http to something you don't know what it is.

    Even an nslookup fails, no reverse DNS. Maybe site has been taken down

    When I don't browse that, but do a much safer wfetch (or Sam Spade) to
    fetch an unknown sites page, get the same.

    Doing a whois search finds,

    Registry Whois
    OrgName: Savvis
    OrgID: SAVVI-3
    Address: 3300 Regency Parkway
    City: Cary
    StateProv: NC
    PostalCode: 27511
    Country: US

    NetRange: -
    NetName: SAVVIS7

    Notice the range, most likely a Savvis customer and a site you don't
    want to connect to.
    why?, Feb 21, 2008

    why? Guest

    why?, Feb 21, 2008

    nobody > Guest

    02/22/08 17:15:15 IP block
    Trying at ARIN
    Trying 216.89.80 at ARIN
    Savvis SAVVIS7 (NET-216-88-0-0-1) -
    Tek Channel Consulting LLC SAVV-S254644-3 (NET-216-89-80-0-1) -

    # ARIN WHOIS database, last updated 2008-02-21 19:10
    # Enter ? for additional hints on searching ARIN's WHOIS database.
    nobody >, Feb 23, 2008
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.