Router logs show constant unknown port mapping (forwarding)?
Do I have a virus or trojan? Should I be worried? What’s going on here? I’m currently running Debian, and there are records like this for every day since these first records showed up. I coincidentally reformatted my hard drive yesterday, and reinstalled debian with an encrypted drive. Records from yesterday still showed up though.
2015/11/25 00:12:35 Notice [IGD][2250]: Delete Port mapping (null):3074
2015/11/25 00:08:06 Notice [IGD][2250]: Add Port mapping :3074 to 10.0.0.39:3074
2015/11/23 23:07:27 Notice [IGD][2244]: Add Port mapping :59435 to 10.0.0.139:59435
2015/11/23 23:07:27 Notice [IGD][2280]: Add Port mapping :59435 to 10.0.0.139:59435
2015/11/23 23:07:24 Notice [IGD][2244]: Add Port mapping :4433 to 10.0.0.139:4433
2015/11/23 23:07:24 Notice [IGD][2280]: Add Port mapping :4433 to 10.0.0.139:4433
2015/11/23 23:07:21 Notice [IGD][2280]: Add Port mapping :59435 to 10.0.0.139:59435
2015/11/23 23:07:21 Notice [IGD][2244]: Add Port mapping :59435 to 10.0.0.139:59435
router port-forwarding virus trojan
edited Dec 11 '15 at 1:58
JakeGould
31.2k1094137
asked Dec 11 '15 at 0:18
lscstu22lscstu22
2613
add a comment |
Do I have a virus or trojan? Should I be worried? What’s going on here? I’m currently running Debian, and there are records like this for every day since these first records showed up. I coincidentally reformatted my hard drive yesterday, and reinstalled debian with an encrypted drive. Records from yesterday still showed up though.
2015/11/25 00:12:35 Notice [IGD][2250]: Delete Port mapping (null):3074
2015/11/25 00:08:06 Notice [IGD][2250]: Add Port mapping :3074 to 10.0.0.39:3074
2015/11/23 23:07:27 Notice [IGD][2244]: Add Port mapping :59435 to 10.0.0.139:59435
2015/11/23 23:07:27 Notice [IGD][2280]: Add Port mapping :59435 to 10.0.0.139:59435
2015/11/23 23:07:24 Notice [IGD][2244]: Add Port mapping :4433 to 10.0.0.139:4433
2015/11/23 23:07:24 Notice [IGD][2280]: Add Port mapping :4433 to 10.0.0.139:4433
2015/11/23 23:07:21 Notice [IGD][2280]: Add Port mapping :59435 to 10.0.0.139:59435
2015/11/23 23:07:21 Notice [IGD][2244]: Add Port mapping :59435 to 10.0.0.139:59435
router port-forwarding virus trojan
edited Dec 11 '15 at 1:58
JakeGould
31.2k1094137
asked Dec 11 '15 at 0:18
lscstu22lscstu22
2613
add a comment |
Do I have a virus or trojan? Should I be worried? What’s going on here? I’m currently running Debian, and there are records like this for every day since these first records showed up. I coincidentally reformatted my hard drive yesterday, and reinstalled debian with an encrypted drive. Records from yesterday still showed up though.
2015/11/25 00:12:35 Notice [IGD][2250]: Delete Port mapping (null):3074
2015/11/25 00:08:06 Notice [IGD][2250]: Add Port mapping :3074 to 10.0.0.39:3074
2015/11/23 23:07:27 Notice [IGD][2244]: Add Port mapping :59435 to 10.0.0.139:59435
2015/11/23 23:07:27 Notice [IGD][2280]: Add Port mapping :59435 to 10.0.0.139:59435
2015/11/23 23:07:24 Notice [IGD][2244]: Add Port mapping :4433 to 10.0.0.139:4433
2015/11/23 23:07:24 Notice [IGD][2280]: Add Port mapping :4433 to 10.0.0.139:4433
2015/11/23 23:07:21 Notice [IGD][2280]: Add Port mapping :59435 to 10.0.0.139:59435
2015/11/23 23:07:21 Notice [IGD][2244]: Add Port mapping :59435 to 10.0.0.139:59435
router port-forwarding virus trojan
edited Dec 11 '15 at 1:58
JakeGould
31.2k1094137
asked Dec 11 '15 at 0:18
lscstu22lscstu22
2613
Do I have a virus or trojan? Should I be worried? What’s going on here? I’m currently running Debian, and there are records like this for every day since these first records showed up. I coincidentally reformatted my hard drive yesterday, and reinstalled debian with an encrypted drive. Records from yesterday still showed up though.
2015/11/25 00:12:35 Notice [IGD][2250]: Delete Port mapping (null):3074
2015/11/25 00:08:06 Notice [IGD][2250]: Add Port mapping :3074 to 10.0.0.39:3074
2015/11/23 23:07:27 Notice [IGD][2244]: Add Port mapping :59435 to 10.0.0.139:59435
2015/11/23 23:07:27 Notice [IGD][2280]: Add Port mapping :59435 to 10.0.0.139:59435
2015/11/23 23:07:24 Notice [IGD][2244]: Add Port mapping :4433 to 10.0.0.139:4433
2015/11/23 23:07:24 Notice [IGD][2280]: Add Port mapping :4433 to 10.0.0.139:4433
2015/11/23 23:07:21 Notice [IGD][2280]: Add Port mapping :59435 to 10.0.0.139:59435
2015/11/23 23:07:21 Notice [IGD][2244]: Add Port mapping :59435 to 10.0.0.139:59435
router port-forwarding virus trojan
router port-forwarding virus trojan
edited Dec 11 '15 at 1:58
JakeGould
31.2k1094137
asked Dec 11 '15 at 0:18
lscstu22lscstu22
2613
edited Dec 11 '15 at 1:58
JakeGould
31.2k1094137
asked Dec 11 '15 at 0:18
lscstu22lscstu22
2613
edited Dec 11 '15 at 1:58
JakeGould
31.2k1094137
edited Dec 11 '15 at 1:58
JakeGould
31.2k1094137
edited Dec 11 '15 at 1:58
JakeGould
31.2k1094137
31.2k1094137
asked Dec 11 '15 at 0:18
lscstu22lscstu22
2613
asked Dec 11 '15 at 0:18
lscstu22lscstu22
2613
asked Dec 11 '15 at 0:18
lscstu22lscstu22
2613
2613
add a comment |
add a comment |
1 Answer
1
active
oldest
votes
I googled IGD, or Internet Gateway Device Protocol, which brought me to UPnP, or Universal Plug and Play, which brought me to the culprit, Deluge, my torrent client. It automatically forwards those ports for seeding whenever the download has finished. Just have to disable seeding which apparently deluge does not support completely. Time to switch torrent programs I guess.
edited Dec 11 '15 at 1:57
JakeGould
31.2k1094137
answered Dec 11 '15 at 1:55
lscstu22lscstu22
2613
Transmission works very well for me, including proper use of uPnP ports. It's available in the Debian Repos too. (The port :3074 entry is for your XBox)
– lornix
Dec 11 '15 at 2:00
Pretty good self-answered question. But one thing to note past the copy edits I made: Not everyone knows what some software like “Deluge” is. So always best to uppercase it as a proper noun and link to the software’s homepage if possible. Otherwise, nice work!
– JakeGould
Dec 11 '15 at 2:01
Thank you for the suggestion! It looks like it's between Transmission and qBittorrent... but I'll probably go with qBittorrent due to the familiar interface. @JakeGould Thanks! I'll keep that in mind for future questions/answers
– lscstu22
Dec 11 '15 at 2:11
Damn, I was going to say it sounds like UPnP but you beat me to it.
– Richie086
Dec 11 '15 at 2:44
add a comment |
Your Answer
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "3"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f1011861%2frouter-logs-show-constant-unknown-port-mapping-forwarding%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
I googled IGD, or Internet Gateway Device Protocol, which brought me to UPnP, or Universal Plug and Play, which brought me to the culprit, Deluge, my torrent client. It automatically forwards those ports for seeding whenever the download has finished. Just have to disable seeding which apparently deluge does not support completely. Time to switch torrent programs I guess.
edited Dec 11 '15 at 1:57
JakeGould
31.2k1094137
answered Dec 11 '15 at 1:55
lscstu22lscstu22
2613
Transmission works very well for me, including proper use of uPnP ports. It's available in the Debian Repos too. (The port :3074 entry is for your XBox)
– lornix
Dec 11 '15 at 2:00
Pretty good self-answered question. But one thing to note past the copy edits I made: Not everyone knows what some software like “Deluge” is. So always best to uppercase it as a proper noun and link to the software’s homepage if possible. Otherwise, nice work!
– JakeGould
Dec 11 '15 at 2:01
Thank you for the suggestion! It looks like it's between Transmission and qBittorrent... but I'll probably go with qBittorrent due to the familiar interface. @JakeGould Thanks! I'll keep that in mind for future questions/answers
– lscstu22
Dec 11 '15 at 2:11
Damn, I was going to say it sounds like UPnP but you beat me to it.
– Richie086
Dec 11 '15 at 2:44
add a comment |
I googled IGD, or Internet Gateway Device Protocol, which brought me to UPnP, or Universal Plug and Play, which brought me to the culprit, Deluge, my torrent client. It automatically forwards those ports for seeding whenever the download has finished. Just have to disable seeding which apparently deluge does not support completely. Time to switch torrent programs I guess.
edited Dec 11 '15 at 1:57
JakeGould
31.2k1094137
answered Dec 11 '15 at 1:55
lscstu22lscstu22
2613
Transmission works very well for me, including proper use of uPnP ports. It's available in the Debian Repos too. (The port :3074 entry is for your XBox)
– lornix
Dec 11 '15 at 2:00
Pretty good self-answered question. But one thing to note past the copy edits I made: Not everyone knows what some software like “Deluge” is. So always best to uppercase it as a proper noun and link to the software’s homepage if possible. Otherwise, nice work!
– JakeGould
Dec 11 '15 at 2:01
Thank you for the suggestion! It looks like it's between Transmission and qBittorrent... but I'll probably go with qBittorrent due to the familiar interface. @JakeGould Thanks! I'll keep that in mind for future questions/answers
– lscstu22
Dec 11 '15 at 2:11
Damn, I was going to say it sounds like UPnP but you beat me to it.
– Richie086
Dec 11 '15 at 2:44
add a comment |
I googled IGD, or Internet Gateway Device Protocol, which brought me to UPnP, or Universal Plug and Play, which brought me to the culprit, Deluge, my torrent client. It automatically forwards those ports for seeding whenever the download has finished. Just have to disable seeding which apparently deluge does not support completely. Time to switch torrent programs I guess.
edited Dec 11 '15 at 1:57
JakeGould
31.2k1094137
answered Dec 11 '15 at 1:55
lscstu22lscstu22
2613
I googled IGD, or Internet Gateway Device Protocol, which brought me to UPnP, or Universal Plug and Play, which brought me to the culprit, Deluge, my torrent client. It automatically forwards those ports for seeding whenever the download has finished. Just have to disable seeding which apparently deluge does not support completely. Time to switch torrent programs I guess.
edited Dec 11 '15 at 1:57
JakeGould
31.2k1094137
answered Dec 11 '15 at 1:55
lscstu22lscstu22
2613
edited Dec 11 '15 at 1:57
JakeGould
31.2k1094137
edited Dec 11 '15 at 1:57
JakeGould
31.2k1094137
edited Dec 11 '15 at 1:57
JakeGould
31.2k1094137
31.2k1094137
answered Dec 11 '15 at 1:55
lscstu22lscstu22
2613
answered Dec 11 '15 at 1:55
lscstu22lscstu22
2613
answered Dec 11 '15 at 1:55
lscstu22lscstu22
2613
2613
Transmission works very well for me, including proper use of uPnP ports. It's available in the Debian Repos too. (The port :3074 entry is for your XBox)
– lornix
Dec 11 '15 at 2:00
Pretty good self-answered question. But one thing to note past the copy edits I made: Not everyone knows what some software like “Deluge” is. So always best to uppercase it as a proper noun and link to the software’s homepage if possible. Otherwise, nice work!
– JakeGould
Dec 11 '15 at 2:01
Thank you for the suggestion! It looks like it's between Transmission and qBittorrent... but I'll probably go with qBittorrent due to the familiar interface. @JakeGould Thanks! I'll keep that in mind for future questions/answers
– lscstu22
Dec 11 '15 at 2:11
Damn, I was going to say it sounds like UPnP but you beat me to it.
– Richie086
Dec 11 '15 at 2:44
add a comment |
Transmission works very well for me, including proper use of uPnP ports. It's available in the Debian Repos too. (The port :3074 entry is for your XBox)
– lornix
Dec 11 '15 at 2:00
Pretty good self-answered question. But one thing to note past the copy edits I made: Not everyone knows what some software like “Deluge” is. So always best to uppercase it as a proper noun and link to the software’s homepage if possible. Otherwise, nice work!
– JakeGould
Dec 11 '15 at 2:01
Thank you for the suggestion! It looks like it's between Transmission and qBittorrent... but I'll probably go with qBittorrent due to the familiar interface. @JakeGould Thanks! I'll keep that in mind for future questions/answers
– lscstu22
Dec 11 '15 at 2:11
Damn, I was going to say it sounds like UPnP but you beat me to it.
– Richie086
Dec 11 '15 at 2:44
Transmission works very well for me, including proper use of uPnP ports. It's available in the Debian Repos too. (The port :3074 entry is for your XBox)
– lornix
Dec 11 '15 at 2:00
Transmission works very well for me, including proper use of uPnP ports. It's available in the Debian Repos too. (The port :3074 entry is for your XBox)
– lornix
Dec 11 '15 at 2:00
Pretty good self-answered question. But one thing to note past the copy edits I made: Not everyone knows what some software like “Deluge” is. So always best to uppercase it as a proper noun and link to the software’s homepage if possible. Otherwise, nice work!
– JakeGould
Dec 11 '15 at 2:01
Pretty good self-answered question. But one thing to note past the copy edits I made: Not everyone knows what some software like “Deluge” is. So always best to uppercase it as a proper noun and link to the software’s homepage if possible. Otherwise, nice work!
– JakeGould
Dec 11 '15 at 2:01
Thank you for the suggestion! It looks like it's between Transmission and qBittorrent... but I'll probably go with qBittorrent due to the familiar interface. @JakeGould Thanks! I'll keep that in mind for future questions/answers
– lscstu22
Dec 11 '15 at 2:11
Thank you for the suggestion! It looks like it's between Transmission and qBittorrent... but I'll probably go with qBittorrent due to the familiar interface. @JakeGould Thanks! I'll keep that in mind for future questions/answers
– lscstu22
Dec 11 '15 at 2:11
Damn, I was going to say it sounds like UPnP but you beat me to it.
– Richie086
Dec 11 '15 at 2:44
Damn, I was going to say it sounds like UPnP but you beat me to it.
– Richie086
Dec 11 '15 at 2:44
add a comment |
Thanks for contributing an answer to Super User!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f1011861%2frouter-logs-show-constant-unknown-port-mapping-forwarding%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
