[tomik]

HI DD-WRT Champs,

TP-Link ARCHER-C7 v5; Qualcomm Atheros QCA9563 ver 1 rev 1.0 (0x1150) ; MIPS32r1 MIPS32r2 MIPS16 ; 775MHz

My router is somewhat introverted.
Turning it on the number of active IP connections goes up to over 4000.
Checking the details the majority is UDP, source address 127.0.0.1 remote address 127.0.0.1 Service name 6053 and state unreplied.

I believe that this must be the reason of my connectivity issues. Even intranet becomes sometimes irresponsible or drops nodes etc.

Flashing the latest firmware DD-WRT v3.0-r43420 std (06/15/20) the symptom stays.

The config is:
AP
NG-Mixed
DHCP with number of static leases

If I am not mistaken, my router tries to talk to itself on port 6053 but than nothing happens.
This eats up it’s memory then sooner or later it starts making trouble.

Not sure how to debug this. Any hints / thoughts would be highly appreciated.

Thanks
Tomi

[msoengineer]

telnet into the router.
U:root
PW: same as gui PW.

Then issue the command:

NVRAM ERASE && REBOOT

This will kill off anything in the low level memory of the device and reset everything back to default.

Re-enter your settings and see what's up then.
Make sure to use a strong gui password.

And looks like hackers might be trying something...pings on that port are up on the interwebs...

https://isc.sans.edu/port.html?port=6053

[tomik]

Hi msoengineer!

Thanks a lot for your hint.
It helped.
Apparently no more 127.0.0.1 requests are flying around.
Let's see if this stays like this after setting up the earlier configuration.

With many thanks
Tomi

[joedow]

How did you found out the requests to 127.0.0.1?
I want to find out if my sh router is safe to use..
I wonder if this low level memory code remains when i flahs dd wrt on a stock fw.