NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.

Forum Discussion

ChocB's avatar
ChocB
Aspirant
Jun 02, 2026

Port forwarding allow other external ports on Orbi RBR850

I'm only forwarding one external port to internal port 22, however, the logs show various external ports forwarding to internal port 22.  Those external ports have no entries in the "Port Forwarding / Port Triggering" section in the Orbi web admin page. Why is it allowing and how can I block?

Here are some log entries (removed non-related lines):

[LAN access from remote] from 183.91.14.197 port 37529 to 10.0.0.134 port 22 Monday, Jun 01,2026 16:39:42

[LAN access from remote] from 183.91.14.197 port 54174 to 10.0.0.134 port 22 Monday, Jun 01,2026 16:39:30

[LAN access from remote] from 183.91.14.197 port 3872 to 10.0.0.134 port 22 Monday, Jun 01,2026 16:39:19

[LAN access from remote] from 183.91.14.197 port 28671 to 10.0.0.134 port 22 Monday, Jun 01,2026 16:39:07

[LAN access from remote] from 183.91.14.197 port 13185 to 10.0.0.134 port 22 Monday, Jun 01,2026 16:38:54

[LAN access from remote] from 183.91.14.197 port 48296 to 10.0.0.134 port 22 Monday, Jun 01,2026 16:38:42

[LAN access from remote] from 183.91.14.197 port 24039 to 10.0.0.134 port 22 Monday, Jun 01,2026 16:38:30

[LAN access from remote] from 183.91.14.197 port 2803 to 10.0.0.134 port 22 Monday, Jun 01,2026 16:38:18

[LAN access from remote] from 183.91.14.197 port 64576 to 10.0.0.134 port 22 Monday, Jun 01,2026 16:38:06

[LAN access from remote] from 183.91.14.197 port 10676 to 10.0.0.134 port 22 Monday, Jun 01,2026 16:37:54

[LAN access from remote] from 183.91.14.197 port 45794 to 10.0.0.134 port 22 Monday, Jun 01,2026 16:37:42

[LAN access from remote] from 183.91.14.197 port 45558 to 10.0.0.134 port 22 Monday, Jun 01,2026 16:37:30

rbk850

1 Reply

  • KevinLiT's avatar
    KevinLiT
    NETGEAR Moderator
    Jun 02, 2026

    Hello ChocB , 

     

    Welcome to the NETGEAR Community!

     

    Understanding port numbers can be tedious due to the number of processes that are used to create instances such as sessions for TCP/UDP configurations. The ports mentioned are mainly listener ports used by your internal application. These ports cannot be blocked because they are dynamic ports that are used to fulfill a purpose. This is the reason why all of the mentioned ports are only logged once.

     

    Best,

    Kevin

    NETGEAR Team