Tuesday, September 23, 2008

Blocked on my Router

I decided to log the Ip addresses that are blocked from router. My router has a log function and I posted the blocked Ips in the previous BLOG.


 

Symptoms

I was not having any issues but I wanted to know how often my router was being attacked.


 

Gathering Information

I am not sure what port 1028 is used for. It might be for a calendar program. I found this information on a link logger site . The internet storm site shows a lot activity on this port. Click here

I found this website with this webpage that allows you to find names for IP addresses.

Ip Address

Host

Port Involved

69.59.240.75

ntp1a-wil.klax1.s.vonagenetworks.net

123

67.177.60.58

Host c-67-177-60-58.hsd1.ut.comcast.net

1026,1027,1028

24.64.199.10

S0106001c2346b44e.br.shawcable.net

1028

216.115.23.76

ntp1b-lv3mc.klga1.s.vonagenetworks.net

123


 

Vonage and Comcast are two of my vendors. The only outside IP is Shawcable. I have sent them an abuse email and I will wait to hear from the.

Reflection

I thought it was interesting that several of block ips were legitimate users. I am having time issues with my Vantage phone. I will open those ports and see what happens.


 


 

No comments: