I am analyzing my incoming connection log from my Linksys E1000 wireless router. [Bonus points if anyone can tell me how long these routers store logs because I can't figure it out anywhere, so I can't really correlate well.]
I have three entries. One is a known entry as it shows my friend's ISP and says the port that I have Mumble server configured on.
The other two entries are from unknown IPs. One resolves to a Serbian IP. The other one somewhere just as concerning. The destination port is 54876.
What am I seeing here? The only port I have forwarded in my router is for Mumble/Murmur. Isn't everything else implicit deny? What is port 54876 used for and is this scanning or what could this entry be?
The syntax in the entry is
'External IP' from wan to port 54876 is accepted