I decided to log the Ip addresses that are blocked from router. My router has a log function and I posted the blocked Ips in the previous BLOG.
Symptoms
I was not having any issues but I wanted to know how often my router was being attacked.
Gathering Information
I am not sure what port 1028 is used for. It might be for a calendar program. I found this information on a link logger site . The internet storm site shows a lot activity on this port. Click here
I found this website with this webpage that allows you to find names for IP addresses.
Ip Address | Host | Port Involved | |
69.59.240.75 | ntp1a-wil.klax1.s.vonagenetworks.net | 123 | |
67.177.60.58 | Host c-67-177-60-58.hsd1.ut.comcast.net | 1026,1027,1028 | |
24.64.199.10 | S0106001c2346b44e.br.shawcable.net | 1028 | |
216.115.23.76 | ntp1b-lv3mc.klga1.s.vonagenetworks.net | 123 |
Vonage and Comcast are two of my vendors. The only outside IP is Shawcable. I have sent them an abuse email and I will wait to hear from the.
Reflection
I thought it was interesting that several of block ips were legitimate users. I am having time issues with my Vantage phone. I will open those ports and see what happens.
No comments:
Post a Comment