Unknown IPs trying to access my network on port 23870

[Waltz]

Hey guys,

Many unknown IPs address are trying to access my network but my router is blocking the connection

[iNFO] Thu Jul 16 16:03:16 2009 Blocked incoming TCP connection request from 24.109.254.237:63156 to (my personal ip):23870

[iNFO] Thu Jul 16 16:09:03 2009 Blocked incoming TCP connection request from 194.152.12.224:3749 to (my personal ip):23871

[iNFO] Thu Jul 16 16:03:13 2009 Blocked incoming TCP connection request from 86.12.200.137:49925 to (my personal ip):23870

[iNFO] Thu Jul 16 16:03:10 2009 Blocked incoming TCP connection request from 24.109.254.237:63156 to (my personal ip):23870

[iNFO] Thu Jul 16 16:03:53 2009 Blocked incoming TCP connection request from 71.238.254.197:2318 to (my personal ip):23870

[iNFO] Thu Jul 16 16:03:07 2009 Blocked incoming TCP connection request from 24.109.254.237:63156 to (my personal ip):23870

[iNFO] Thu Jul 16 16:03:04 2009 Blocked incoming TCP connection request from 86.12.200.137:49925 to (my personal ip):23870

I have tried to know what port 23870 is used for but i cant find anything on google. Does anyone know what the hell is this port ?

My router : D-link DIR 615

I only have a laptop currently connected to the network and the laptop have a fresh install of Windows 7

Your help is appreciated.

[Joel]

23458-23999 Unassigned

Running any torrents on that port?

http://www.iana.org/assignments/port-numbers

[Waltz]

My torrent application is currently closed and I use port 1723 for my torrent

  Joel said:

23458-23999 Unassigned

Running any torrents on that port?

http://www.iana.org/assignments/port-numbers

[haefft]

can't you just reissue yourself a new ip address by rebooting your router that way you have a new ip address.

[+BudMan MVC]

Yeah but what about the guy that had your ip yesterday or 2 days ago. You can see traffic from p2p for DAYS after you have finished with a torrent.

I wouldn't worry about it, your router is blocking it. Its NOISE!! there is lots of NOISE on the public net -- LOT OF IT!!

Are you seeing 1000's of these a second or a minute? A day? Or is that 7 it? Couple of the those are from the same IP.

You can look at it couple of ways -- its p2p traffic (someone that was running p2p on that port with your IP sometime in the near past) or Those are machines that are infected looking for other machines that are infected? That is not a standard service port - and you would normally would not have a application listening on it to be exploited, etc.

Look on machines on your network (maybe some other machine is running p2p) -- are you making connections outbound with that source port? If not -- its NOISE, and your router is doing its job.. No reason to worry about a few stray packets here and there.. Now if you were seeing 1000's a second/minute/hour then might be something to be concerned about.