New info in system log. Does anyone know what it might be?

  • ATTENTION! As of November 1, 2020, you are not able to reply to threads 6 months after the thread is opened if there are more than 500 posts in the thread.
    Threads will not be locked, so posts may still be edited by their authors.
    Just start a new thread on the topic to post if you get an error message when trying to reply to a thread.


Regular Contributor
Jan 2 13:00:14 kernel: [BLOCKED - INBOUND] IN=eth0 OUT= MAC=0c:9d:92:45:99:b0:70:01:b5:cd:2c:19:08:00 SRC= DST=35.***.***.*** LEN=40 TOS=0x00 PREC=0x00 TTL=239 ID=12652 PROTO=TCP SPT=55488 DPT=28939 SEQ=724863677 ACK=0 WINDOW=1024 RES=0x00 SYN URGP=0 MARK=0x8000000

Never seen this in the log before, but it is in there constantly, now. Flooding the log.


Merlin 386.1 Alpha

Thanks in advance.
Last edited:


Part of the Furniture
Looks like a standard port scan from Russia being reported by Skynet.


Very Senior Member
It's a bot scanning for open ports.

SPDmitriy Panchenko
Usage TypeData Center/Web Hosting/Transit
CityWarsaw, Mazowieckie

David, edit your post to remove your IP address


Regular Contributor
Ok, done and thanks.

Any idea why they just started?

Will they stop?


Regular Contributor
Unlikely that it just started, it's been going on for year ... decades even.

If you just updated the router software / added skynet, you're just seeing it now. Before it wouldn't have been registered, but it always happened.


Regular Contributor
Been running Skynet for several years. Firmware was updated in November. Only thing I can think of is the level of reporting has changed in the log.

Is there a setting that will make it go away without restricting good or need to know reporting?

Right now it's info/debug


Very Senior Member
Is it always the same up?

whould it be wise to just block that IP address?

I get it, they can change just like that.

Similar threads

Latest threads

Sign Up For SNBForums Daily Digest

Get an update of what's new every day delivered to your mailbox. Sign up here!