Hi!
EDIT: You're right in that I've rebooted the router many times after this started!
I see the icmp request and some noise; some probably caused by the ongoing SSH connections from my desktop to the router (hopefully nothying too fishy; I tried to shut down all other programs / services possibly using the NET and there should be no other devices currently in my home LAN save for a few sockets running Sonoff-Tasmota - but they shouldn't connect the outside WAN).
The first sequence (18 packets) was from the router itself @87.92.81.146 (or 192.168.66.6, if you will, but I believe the LAN IP is irrelevant); the second sequence of 8 packets was run from a desktop computer:
19:05:11.706439 IP (tos 0x0, ttl 64, id 22239, offset 0, flags [DF], proto ICMP (1), length 84)
87.92.81.146 > 8.8.8.8: ICMP echo request, id 24481, seq 0, length 64
19:05:12.707199 IP (tos 0x0, ttl 64, id 22265, offset 0, flags [DF], proto ICMP (1), length 84)
87.92.81.146 > 8.8.8.8: ICMP echo request, id 24481, seq 1, length 64
19:05:12.821692 IP (tos 0x0, ttl 60, id 28672, offset 0, flags [none], proto TCP (6), length 40)
80.247.32.241.80 > 85.23.43.255.49708: Flags [.], cksum 0x4928 (correct), seq 1109292666, ack 1109292666, win 16384, length 0
19:05:12.822510 IP (tos 0x0, ttl 58, id 28672, offset 0, flags [none], proto TCP (6), length 40)
87.92.78.225.80 > 85.23.43.255.49708: Flags [.], cksum 0x14d3 (correct), seq 1109292666, ack 1109292666, win 16384, length 0
19:05:12.823274 IP (tos 0x0, ttl 56, id 28672, offset 0, flags [none], proto TCP (6), length 40)
87.92.78.225.50479 > 85.23.43.255.49708: Flags [.], cksum 0x4ff3 (correct), seq 1109292666, ack 1109292666, win 16384, length 0
19:05:12.823921 IP (tos 0x0, ttl 54, id 28672, offset 0, flags [none], proto TCP (6), length 40)
87.92.78.225.54101 > 85.23.43.255.49708: Flags [.], cksum 0x41cd (correct), seq 1109292666, ack 1109292666, win 16384, length 0
19:05:12.824632 IP (tos 0x0, ttl 52, id 28672, offset 0, flags [none], proto TCP (6), length 40)
87.92.78.225.61400 > 85.23.43.255.49708: Flags [.], cksum 0x254a (correct), seq 1109292666, ack 1109292666, win 16384, length 0
19:05:12.825352 IP (tos 0x0, ttl 50, id 28672, offset 0, flags [none], proto TCP (6), length 40)
87.92.78.225.43623 > 85.23.43.255.49708: Flags [.], cksum 0x6abb (correct), seq 1109292666, ack 1109292666, win 16384, length 0
19:05:12.826069 IP (tos 0x0, ttl 48, id 28672, offset 0, flags [none], proto TCP (6), length 40)
87.92.78.225.46127 > 85.23.43.255.49708: Flags [.], cksum 0x60f3 (correct), seq 1109292666, ack 1109292666, win 16384, length 0
19:05:12.826772 IP (tos 0x0, ttl 46, id 28672, offset 0, flags [none], proto TCP (6), length 40)
87.92.78.225.57289 > 85.23.43.255.49708: Flags [.], cksum 0x3559 (correct), seq 1109292666, ack 1109292666, win 16384, length 0
19:05:12.827514 IP (tos 0x0, ttl 44, id 28672, offset 0, flags [none], proto TCP (6), length 40)
87.92.78.225.60840 > 85.23.43.255.49708: Flags [.], cksum 0x277a (correct), seq 1109292666, ack 1109292666, win 16384, length 0
19:05:12.828224 IP (tos 0x0, ttl 42, id 28672, offset 0, flags [none], proto TCP (6), length 40)
87.92.78.225.56985 > 85.23.43.255.49708: Flags [.], cksum 0x3689 (correct), seq 1109292666, ack 1109292666, win 16384, length 0
19:05:12.828917 IP (tos 0x0, ttl 40, id 28672, offset 0, flags [none], proto TCP (6), length 40)
87.92.78.225.59317 > 85.23.43.255.49708: Flags [.], cksum 0x2d6d (correct), seq 1109292666, ack 1109292666, win 16384, length 0
19:05:12.829993 IP (tos 0x0, ttl 38, id 28672, offset 0, flags [none], proto TCP (6), length 40)
87.92.78.225.47810 > 85.23.43.255.49708: Flags [.], cksum 0x5a60 (correct), seq 1109292666, ack 1109292666, win 16384, length 0
19:05:12.830673 IP (tos 0x0, ttl 36, id 28672, offset 0, flags [none], proto TCP (6), length 40)
87.92.78.225.49180 > 85.23.43.255.49708: Flags [.], cksum 0x5506 (correct), seq 1109292666, ack 1109292666, win 16384, length 0
19:05:12.831386 IP (tos 0x0, ttl 34, id 28672, offset 0, flags [none], proto TCP (6), length 40)
87.92.78.225.60509 > 85.23.43.255.49708: Flags [.], cksum 0x28c5 (correct), seq 1109292666, ack 1109292666, win 16384, length 0
19:05:12.832106 IP (tos 0x0, ttl 32, id 28672, offset 0, flags [none], proto TCP (6), length 40)
87.92.78.225.36219 > 85.23.43.255.49708: Flags [.], cksum 0x87a7 (correct), seq 1109292666, ack 1109292666, win 16384, length 0
19:05:12.832825 IP (tos 0x0, ttl 30, id 28672, offset 0, flags [none], proto TCP (6), length 40)
87.92.78.225.55705 > 85.23.43.255.49708: Flags [.], cksum 0x3b89 (correct), seq 1109292666, ack 1109292666, win 16384, length 0
19:05:12.833541 IP (tos 0x0, ttl 28, id 28672, offset 0, flags [none], proto TCP (6), length 40)
87.92.78.225.43337 > 85.23.43.255.49708: Flags [.], cksum 0x6bd9 (correct), seq 1109292666, ack 1109292666, win 16384, length 0
19:05:12.834262 IP (tos 0x0, ttl 26, id 28672, offset 0, flags [none], proto TCP (6), length 40)
87.92.78.225.49703 > 85.23.43.255.49708: Flags [.], cksum 0x52fb (correct), seq 1109292666, ack 1109292666, win 16384, length 0
19:05:12.834980 IP (tos 0x0, ttl 24, id 28672, offset 0, flags [none], proto TCP (6), length 40)
87.92.78.225.38088 > 85.23.43.255.49708: Flags [.], cksum 0x805a (correct), seq 1109292666, ack 1109292666, win 16384, length 0
19:05:12.835692 IP (tos 0x0, ttl 22, id 28672, offset 0, flags [none], proto TCP (6), length 40)
87.92.78.225.35859 > 85.23.43.255.49708: Flags [.], cksum 0x890f (correct), seq 1109292666, ack 1109292666, win 16384, length 0
19:05:12.836403 IP (tos 0x0, ttl 20, id 28672, offset 0, flags [none], proto TCP (6), length 40)
87.92.78.225.32781 > 85.23.43.255.49708: Flags [.], cksum 0x9515 (correct), seq 1109292666, ack 1109292666, win 16384, length 0
19:05:12.837106 IP (tos 0x0, ttl 18, id 28672, offset 0, flags [none], proto TCP (6), length 40)
87.92.78.225.35963 > 85.23.43.255.49708: Flags [.], cksum 0x88a7 (correct), seq 1109292666, ack 1109292666, win 16384, length 0
19:05:12.837813 IP (tos 0x0, ttl 16, id 28672, offset 0, flags [none], proto TCP (6), length 40)
87.92.78.225.63230 > 85.23.43.255.49708: Flags [.], cksum 0x1e24 (correct), seq 1109292666, ack 1109292666, win 16384, length 0
19:05:12.838681 IP (tos 0x0, ttl 14, id 28672, offset 0, flags [none], proto TCP (6), length 40)
87.92.78.225.49061 > 85.23.43.255.49708: Flags [.], cksum 0x557d (correct), seq 1109292666, ack 1109292666, win 16384, length 0
19:05:12.839346 IP (tos 0x0, ttl 12, id 28672, offset 0, flags [none], proto TCP (6), length 40)
87.92.78.225.54127 > 85.23.43.255.49708: Flags [.], cksum 0x41b3 (correct), seq 1109292666, ack 1109292666, win 16384, length 0
19:05:12.840046 IP (tos 0x0, ttl 10, id 28672, offset 0, flags [none], proto TCP (6), length 40)
87.92.78.225.54559 > 85.23.43.255.49708: Flags [.], cksum 0x4003 (correct), seq 1109292666, ack 1109292666, win 16384, length 0
19:05:12.840767 IP (tos 0x0, ttl 8, id 28672, offset 0, flags [none], proto TCP (6), length 40)
87.92.78.225.35986 > 85.23.43.255.49708: Flags [.], cksum 0x8890 (correct), seq 1109292666, ack 1109292666, win 16384, length 0
19:05:12.841490 IP (tos 0x0, ttl 6, id 28672, offset 0, flags [none], proto TCP (6), length 40)
87.92.78.225.60879 > 85.23.43.255.49708: Flags [.], cksum 0x2753 (correct), seq 1109292666, ack 1109292666, win 16384, length 0
19:05:12.842206 IP (tos 0x0, ttl 4, id 28672, offset 0, flags [none], proto TCP (6), length 40)
87.92.78.225.33452 > 85.23.43.255.49708: Flags [.], cksum 0x9276 (correct), seq 1109292666, ack 1109292666, win 16384, length 0
19:05:12.842919 IP (tos 0x0, ttl 2, id 28672, offset 0, flags [none], proto TCP (6), length 40)
87.92.78.225.61631 > 85.23.43.255.49708: Flags [.], cksum 0x2463 (correct), seq 1109292666, ack 1109292666, win 16384, length 0
19:05:13.015371 IP (tos 0x0, ttl 63, id 52321, offset 0, flags [DF], proto TCP (6), length 60)
87.92.81.146.52434 > 82.196.7.246.80: Flags [S], cksum 0x3519 (correct), seq 3327175125, win 64240, options [mss 1460,sackOK,TS val 3554411304 ecr 0,nop,wscale 7], length 0
19:05:13.707392 IP (tos 0x0, ttl 64, id 22333, offset 0, flags [DF], proto ICMP (1), length 84)
87.92.81.146 > 8.8.8.8: ICMP echo request, id 24481, seq 2, length 64
19:05:14.183154 IP (tos 0x0, ttl 64, id 43940, offset 0, flags [DF], proto UDP (17), length 65)
87.92.81.146.30010 > 62.241.198.246.53: [udp sum ok] 56489+ A? 0.lede.pool.ntp.org. (37)
19:05:14.183261 IP (tos 0x0, ttl 64, id 23727, offset 0, flags [DF], proto UDP (17), length 65)
87.92.81.146.30010 > 62.241.198.245.53: [udp sum ok] 56489+ A? 0.lede.pool.ntp.org. (37)
19:05:14.183448 IP6 (flowlabel 0xaf267, hlim 64, next-header UDP (17) payload length: 45) 2001:14ba:8b00::1:6555.32514 > 2001:14b8:1000::1.53: [udp sum ok] 56489+ A? 0.lede.pool.ntp.org. (37)
19:05:14.183557 IP6 (flowlabel 0x183db, hlim 64, next-header UDP (17) payload length: 45) 2001:14ba:8b00::1:6555.32514 > 2001:14b8:1000::2.53: [udp sum ok] 56489+ A? 0.lede.pool.ntp.org. (37)
19:05:14.195268 IP6 (flowlabel 0xdb6cf, hlim 62, next-header UDP (17) payload length: 109) 2001:14b8:1000::2.53 > 2001:14ba:8b00::1:6555.32514: [udp sum ok] 56489 q: A? 0.lede.pool.ntp.org. 4/0/0 0.lede.pool.ntp.org. A 95.216.147.242, 0.lede.pool.ntp.org. A 95.216.78.223, 0.lede.pool.ntp.org. A 95.216.101.162, 0.lede.pool.ntp.org. A 62.80.139.68 (101)
19:05:14.195546 IP6 (flowlabel 0x26dc1, hlim 62, next-header UDP (17) payload length: 109) 2001:14b8:1000::1.53 > 2001:14ba:8b00::1:6555.32514: [udp sum ok] 56489 q: A? 0.lede.pool.ntp.org. 4/0/0 0.lede.pool.ntp.org. A 194.100.206.70, 0.lede.pool.ntp.org. A 95.216.138.141, 0.lede.pool.ntp.org. A 80.69.163.42, 0.lede.pool.ntp.org. A 62.80.139.57 (101)
19:05:14.707591 IP (tos 0x0, ttl 64, id 22410, offset 0, flags [DF], proto ICMP (1), length 84)
87.92.81.146 > 8.8.8.8: ICMP echo request, id 24481, seq 3, length 64
19:05:15.707782 IP (tos 0x0, ttl 64, id 22450, offset 0, flags [DF], proto ICMP (1), length 84)
87.92.81.146 > 8.8.8.8: ICMP echo request, id 24481, seq 4, length 64
19:05:16.495010 04:f9:38:86:73:90 > 01:80:c2:00:00:0a, ethertype Unknown (0x9998), length 60:
0x0000: 0001 0000 000c 0000 0003 0000 0000 0000 ................
0x0010: 0000 0000 0000 0000 0000 0000 0000 0000 ................
0x0020: 0000 0000 0000 0000 0000 0000 0000 ..............
19:05:16.707976 IP (tos 0x0, ttl 64, id 22465, offset 0, flags [DF], proto ICMP (1), length 84)
87.92.81.146 > 8.8.8.8: ICMP echo request, id 24481, seq 5, length 64
19:05:17.708171 IP (tos 0x0, ttl 64, id 22534, offset 0, flags [DF], proto ICMP (1), length 84)
87.92.81.146 > 8.8.8.8: ICMP echo request, id 24481, seq 6, length 64
19:05:18.708367 IP (tos 0x0, ttl 64, id 22605, offset 0, flags [DF], proto ICMP (1), length 84)
87.92.81.146 > 8.8.8.8: ICMP echo request, id 24481, seq 7, length 64
19:05:19.249344 IP6 (hlim 255, next-header ICMPv6 (58) payload length: 32) fe80::f6f2:6dff:feaf:24f4 > fe80::200:5eff:fe00:101: [icmp6 sum ok] ICMP6, neighbor solicitation, length 32, who has fe80::200:5eff:fe00:101
source link-address option (1), length 8 (1): f4:f2:6d:af:24:f4
0x0000: f4f2 6daf 24f4
19:05:19.250262 IP6 (class 0xc0, hlim 255, next-header ICMPv6 (58) payload length: 32) fe80::200:5eff:fe00:101 > fe80::f6f2:6dff:feaf:24f4: [icmp6 sum ok] ICMP6, neighbor advertisement, length 32, tgt is fe80::200:5eff:fe00:101, Flags [router, solicited, override]
destination link-address option (2), length 8 (1): 00:00:5e:00:01:01
0x0000: 0000 5e00 0101
19:05:19.708568 IP (tos 0x0, ttl 64, id 22699, offset 0, flags [DF], proto ICMP (1), length 84)
87.92.81.146 > 8.8.8.8: ICMP echo request, id 24481, seq 8, length 64
19:05:20.708766 IP (tos 0x0, ttl 64, id 22770, offset 0, flags [DF], proto ICMP (1), length 84)
87.92.81.146 > 8.8.8.8: ICMP echo request, id 24481, seq 9, length 64
19:05:21.122087 IP (tos 0x0, ttl 63, id 52322, offset 0, flags [DF], proto TCP (6), length 60)
87.92.81.146.52434 > 82.196.7.246.80: Flags [S], cksum 0x156e (correct), seq 3327175125, win 64240, options [mss 1460,sackOK,TS val 3554419411 ecr 0,nop,wscale 7], length 0
19:05:21.708962 IP (tos 0x0, ttl 64, id 22772, offset 0, flags [DF], proto ICMP (1), length 84)
87.92.81.146 > 8.8.8.8: ICMP echo request, id 24481, seq 10, length 64
19:05:22.199478 IP (tos 0x10, ttl 64, id 27336, offset 0, flags [DF], proto UDP (17), length 76)
87.92.81.146.60078 > 194.100.49.151.123: [udp sum ok] NTPv4, length 48
Client, Leap indicator: (0), Stratum 0 (unspecified), poll 0 (1s), precision 0
Root Delay: 0.000000, Root dispersion: 0.000000, Reference-ID: (unspec)
Reference Timestamp: 0.000000000
Originator Timestamp: 0.000000000
Receive Timestamp: 0.000000000
Transmit Timestamp: 461905579.208294458 (1914/08/22 06:06:19)
Originator - Receive Timestamp: 0.000000000
Originator - Transmit Timestamp: 461905579.208294458 (1914/08/22 06:06:19)
19:05:22.402014 04:f9:38:86:73:90 > 01:80:c2:00:00:0a, ethertype Unknown (0x9998), length 60:
0x0000: 0001 0000 000c 0000 0003 0000 0000 0000 ................
0x0010: 0000 0000 0000 0000 0000 0000 0000 0000 ................
0x0020: 0000 0000 0000 0000 0000 0000 0000 ..............
19:05:22.709159 IP (tos 0x0, ttl 64, id 22863, offset 0, flags [DF], proto ICMP (1), length 84)
87.92.81.146 > 8.8.8.8: ICMP echo request, id 24481, seq 11, length 64
19:05:23.709372 IP (tos 0x0, ttl 64, id 22932, offset 0, flags [DF], proto ICMP (1), length 84)
87.92.81.146 > 8.8.8.8: ICMP echo request, id 24481, seq 12, length 64
19:05:23.926992 IP6 (flowlabel 0xe7f73, hlim 63, next-header TCP (6) payload length: 121) 2001:14ba:8852:c000::4d3.38834 > 2001:67c:4e8:f004::a.443: Flags [P.], cksum 0xea99 (correct), seq 267:356, ack 268, win 507, options [nop,nop,TS val 986228519 ecr 4111471052], length 89
19:05:23.975015 IP6 (class 0x48, hlim 54, next-header TCP (6) payload length: 121) 2001:67c:4e8:f004::a.443 > 2001:14ba:8852:c000::4d3.38834: Flags [P.], cksum 0xc2fb (correct), seq 268:357, ack 356, win 4374, options [nop,nop,TS val 4111482303 ecr 986228519], length 89
19:05:23.975440 IP6 (flowlabel 0xe7f73, hlim 63, next-header TCP (6) payload length: 32) 2001:14ba:8852:c000::4d3.38834 > 2001:67c:4e8:f004::a.443: Flags [.], cksum 0xc7a1 (correct), seq 356, ack 357, win 507, options [nop,nop,TS val 986228567 ecr 4111482303], length 0
19:05:24.134681 00:e0:fc:09:bc:f9 > 01:80:c2:00:00:0a, ethertype Unknown (0x88a7), length 211:
0x0000: 0003 0000 01b4 5ff7 0001 000e 0000 0000 ......_.........
0x0010: 04f9 3886 7390 0007 0014 6f75 6c2d 7369 ..8.s.....oul-si
0x0020: 696c 6f74 3231 2d61 7335 000f 001b 5335 ilot21-as5....S5
0x0030: 3330 3020 5632 3030 5230 3035 4330 3053 300.V200R005C00S
0x0040: 5043 3330 3000 1200 2356 6572 7369 6f6e PC300...#Version
0x0050: 2035 2e31 3530 2056 3230 3052 3030 3543 .5.150.V200R005C
0x0060: 3030 5350 4333 3030 0011 0023 5665 7273 00SPC300...#Vers
0x0070: 696f 6e20 352e 3135 3020 5632 3030 5230 ion.5.150.V200R0
0x0080: 3035 4330 3053 5043 3330 3000 0c00 1410 05C00SPC300.....
0x0090: 0000 0000 0000 0000 0000 0000 0000 0000 ................
0x00a0: 1300 0800 0000 0c00 0200 1847 6967 6162 ...........Gigab
0x00b0: 6974 4574 6865 726e 6574 302f 302f 3700 itEthernet0/0/7.
0x00c0: 0b00 0600 01 .....
19:05:24.709568 IP (tos 0x0, ttl 64, id 22968, offset 0, flags [DF], proto ICMP (1), length 84)
87.92.81.146 > 8.8.8.8: ICMP echo request, id 24481, seq 13, length 64
19:05:25.709764 IP (tos 0x0, ttl 64, id 23008, offset 0, flags [DF], proto ICMP (1), length 84)
87.92.81.146 > 8.8.8.8: ICMP echo request, id 24481, seq 14, length 64
19:05:25.803271 IP (tos 0x0, ttl 63, id 59846, offset 0, flags [DF], proto TCP (6), length 60)
87.92.81.146.37400 > 37.139.20.5.80: Flags [S], cksum 0x1c43 (correct), seq 5018938, win 64240, options [mss 1460,sackOK,TS val 291509503 ecr 0,nop,wscale 7], length 0
19:05:26.709961 IP (tos 0x0, ttl 64, id 23020, offset 0, flags [DF], proto ICMP (1), length 84)
87.92.81.146 > 8.8.8.8: ICMP echo request, id 24481, seq 15, length 64
19:05:27.710158 IP (tos 0x0, ttl 64, id 23105, offset 0, flags [DF], proto ICMP (1), length 84)
87.92.81.146 > 8.8.8.8: ICMP echo request, id 24481, seq 16, length 64
19:05:28.194828 04:f9:38:86:73:90 > 01:80:c2:00:00:0a, ethertype Unknown (0x9998), length 60:
0x0000: 0001 0000 000c 0000 0003 0000 0000 0000 ................
0x0010: 0000 0000 0000 0000 0000 0000 0000 0000 ................
0x0020: 0000 0000 0000 0000 0000 0000 0000 ..............
19:05:28.710356 IP (tos 0x0, ttl 64, id 23155, offset 0, flags [DF], proto ICMP (1), length 84)
87.92.81.146 > 8.8.8.8: ICMP echo request, id 24481, seq 17, length 64
19:05:29.377591 IP6 (hlim 255, next-header ICMPv6 (58) payload length: 32) fe80::200:5eff:fe00:101 > ff02::1:ff9f:9100: [icmp6 sum ok] ICMP6, neighbor solicitation, length 32, who has fe80::4d10:8441:a29f:9100
source link-address option (1), length 8 (1): 00:00:5e:00:01:01
0x0000: 0000 5e00 0101
19:05:34.044503 IP (tos 0x0, ttl 63, id 1140, offset 0, flags [DF], proto ICMP (1), length 84)
87.92.81.146 > 8.8.8.8: ICMP echo request, id 2297, seq 1, length 64
19:05:34.193525 04:f9:38:86:73:90 > 01:80:c2:00:00:0a, ethertype Unknown (0x9998), length 60:
0x0000: 0001 0000 000c 0000 0003 0000 0000 0000 ................
0x0010: 0000 0000 0000 0000 0000 0000 0000 0000 ................
0x0020: 0000 0000 0000 0000 0000 0000 0000 ..............
19:05:35.068879 IP (tos 0x0, ttl 63, id 1257, offset 0, flags [DF], proto ICMP (1), length 84)
87.92.81.146 > 8.8.8.8: ICMP echo request, id 2297, seq 2, length 64
19:05:36.082201 IP (tos 0x0, ttl 63, id 1380, offset 0, flags [DF], proto ICMP (1), length 84)
87.92.81.146 > 8.8.8.8: ICMP echo request, id 2297, seq 3, length 64
19:05:37.095548 IP (tos 0x0, ttl 63, id 1404, offset 0, flags [DF], proto ICMP (1), length 84)
87.92.81.146 > 8.8.8.8: ICMP echo request, id 2297, seq 4, length 64
19:05:38.108891 IP (tos 0x0, ttl 63, id 1460, offset 0, flags [DF], proto ICMP (1), length 84)
87.92.81.146 > 8.8.8.8: ICMP echo request, id 2297, seq 5, length 64
19:05:39.122229 IP (tos 0x0, ttl 63, id 1580, offset 0, flags [DF], proto ICMP (1), length 84)
87.92.81.146 > 8.8.8.8: ICMP echo request, id 2297, seq 6, length 64
19:05:40.135569 IP (tos 0x0, ttl 63, id 1769, offset 0, flags [DF], proto ICMP (1), length 84)
87.92.81.146 > 8.8.8.8: ICMP echo request, id 2297, seq 7, length 64