and here's something I just found. It's a grab of incoming dropped connections from the DDWrt logs...It's from 1-19-2018, I'm trying find the date of the above shot. But here you see the same exact address attempting to come IN...
edit: I've found the dates and times. The first screenshot is 1/20/2018 at 7:26pm. The second, where it's incoming is 1/19/2018 around 12:30pm (times are in top right of shots). This means that over 24 hours before becoming my WAN IP, according to DDWRT Syslog, the same IP was making multiple attempts (I've omitted at least 5 more screenshots from different times on the 19th) on the INCOMING side. Since this is not associated with any website, and according to current tracert/traceroute is not even up and running anymore, what does this show? Should I send this info to Amazon? Will they tell me who, what, where, when and how?
edit: I've found the dates and times. The first screenshot is 1/20/2018 at 7:26pm. The second, where it's incoming is 1/19/2018 around 12:30pm (times are in top right of shots). This means that over 24 hours before becoming my WAN IP, according to DDWRT Syslog, the same IP was making multiple attempts (I've omitted at least 5 more screenshots from different times on the 19th) on the INCOMING side. Since this is not associated with any website, and according to current tracert/traceroute is not even up and running anymore, what does this show? Should I send this info to Amazon? Will they tell me who, what, where, when and how?