Hi There,
When I looked through the logs, I can see some lines saying “TCP connection established from x.x.x.x address” but nothing else after or other comments. Does this mean someone looged into the router somehow knowing the username & password? Or this is just someone trying to log in from outside and no success?
Regards,
Pipa
Sounds to me a BGP peering message.
Do you have a BGP session active on that router?
Hi Muqatil,
I don’t have BGP setup on the router, except for the defaults one that is currently there(Name: Default - AS:65530).
Would this be just connections running in the background from an application??
I have Kodi server setup on one PC and that one PC is always on…I don’t know if that is related.
Appreciated your help.
Pablo .M
These are connections to a service on your router. If you don’t recognize them, your router might be compromised and running backdoor PPTP services, web proxy, SOCKS, etc.