I have been getting weird network issues on my ADSL router the last few days, seemingly getting flooded.
My ISP-assigned IP is
I have noted the following entries in
tcp 6 359405 ESTABLISHED src=10.196.65.25 dst=220.127.116.11 sport=36444 dport=5228 [UNREPLIED] src=18.104.22.168 dst=10.196.65.25 sport=5228 dport=36444 use=2 tcp 6 426547 ESTABLISHED src=22.214.171.124 dst=126.96.36.199 sport=33318 dport=443 [UNREPLIED] src=188.8.131.52 dst=184.108.40.206 sport=443 dport=33318 use=2 tcp 6 362658 ESTABLISHED src=220.127.116.11 dst=18.104.22.168 sport=58660 dport=443 [UNREPLIED] src=22.214.171.124 dst=126.96.36.199 sport=443 dport=58660 use=2
The destinations seems to point to Google and Facebook, and the sources are unreachable from me.
Why would this appear on my router?
Why would a private network IP appear there? (My local network is
192.168.1.0/24). Also a trace to
188.8.131.52 shows it going over some routers in the
Is this due to wrongly configured routers on my ISP and/or their backbone?
Sorry if these questions are stupid :)
(I have forwarded the info to my ISP, but still awaiting a response).