A Broadband and ADSL forum. BroadbanterBanter

Welcome to BroadbanterBanter.

You are currently viewing as a guest which gives you limited access to view most discussions and other FREE features. By joining our free community you will have access to post topics, communicate privately with other members (PM), respond to polls, upload your own photos and access many other special features. Registration is fast, simple and absolutely free so please, join our community today.

Go Back   Home » BroadbanterBanter forum » Newsgroup Discussions » uk.telecom.broadband (UK broadband)
Site Map Home Register Authors List Search Today's Posts Mark Forums Read Web Partners

uk.telecom.broadband (UK broadband) (uk.telecom.broadband) Discussion of broadband services, technology and equipment as provided in the UK. Discussions of specific services based on ADSL, cable modems or other broadband technology are also on-topic. Advertising is not allowed.

Frewall log query.



 
 
Thread Tools Display Modes
  #1  
Old April 28th 06, 04:03 PM posted to uk.telecom.broadband
Peter Crosland
external usenet poster
 
Posts: 1,463
Default Frewall log query.

My Draytek 2800 router blocked the following yesterday.

134Apr 27 19:20:34VigorIM Block(Yahoo messenger) wan
216.155.193.129,23 - 87.113.12.243,2122 PR 6 len 20 60
134Apr 27 19:20:36VigorIM Block(Yahoo messenger) wan
216.155.193.129,23 - 87.113.12.243,2122 PR 6 len 20 60
134Apr 27 19:20:38VigorIM Block(Yahoo messenger) wan
216.155.193.129,23 - 87.113.12.243,2122 PR 6 len 20 60
134Apr 27 19:20:42VigorIM Block(Yahoo messenger) wan
216.155.193.129,23 - 87.113.12.243,2122 PR 6 len 20 60
134Apr 27 19:20:50VigorIM Block(Yahoo messenger) wan
216.155.193.129,23 - 87.113.12.243,2122 PR 6 len 20 60
134Apr 27 19:21:07VigorIM Block(Yahoo messenger) wan
216.155.193.129,23 - 87.113.12.243,2122 PR 6 len 20 60
134Apr 27 19:21:39VigorIM Block(Yahoo messenger) wan
216.155.193.129,23 - 87.113.12.243,2122 PR 6 len 20 60
134Apr 27 19:21:55VigorP2P Block(eDonkey) wan 84.222.193.211,1755 -
87.113.12.243,2832 PR 6 len 20 46
134Apr 27 19:22:00VigorP2P Block(eDonkey) wan 82.25.90.81,4661 -
87.113.12.243,2920 PR 6 len 20 46
134Apr 27 19:22:04VigorP2P Block(eDonkey) wan 82.25.90.81,4661 -
87.113.12.243,2920 PR 6 len 20 46
134Apr 27 19:22:07VigorP2P Block(eDonkey) wan 86.3.23.100,4662 -
87.113.12.243,2900 PR 6 len 20 46
134Apr 27 19:22:13VigorP2P Block(eDonkey) wan 82.25.90.81,4661 -
87.113.12.243,2920 PR 6 len 20 46
134Apr 27 19:22:43VigorIM Block(Yahoo messenger) wan
216.155.193.129,23 - 87.113.12.243,2122 PR 6 len 20 60
134Apr 27 19:23:04VigorP2P Block(eDonkey) wan 82.25.90.81,4661 -
87.113.12.243,2920 PR 6 len 20 46
134Apr 27 19:23:47VigorIM Block(Yahoo messenger) wan
216.155.193.129,23 - 87.113.12.243,2122 PR 6 len 20 60
134Apr 27 19:24:33VigorP2P Block(eDonkey) wan 80.239.200.103,3000 -
87.113.12.243,2155 PR 6 len 20 54
134Apr 27 19:24:34VigorP2P Block(eDonkey) wan 80.239.200.103,3000 -
87.113.12.243,2155 PR 6 len 20 54
134Apr 27 19:24:35VigorP2P Block(eDonkey) wan 80.239.200.103,3000 -
87.113.12.243,2155 PR 6 len 20 54
134Apr 27 19:24:36VigorP2P Block(eDonkey) wan 80.239.200.103,3000 -
87.113.12.243,2155 PR 6 len 20 54
134Apr 27 19:24:40VigorP2P Block(eDonkey) wan 80.239.200.103,3000 -
87.113.12.243,2155 PR 6 len 20 54
134Apr 27 19:24:47VigorP2P Block(eDonkey) wan 80.239.200.103,3000 -
87.113.12.243,2155 PR 6 len 20 54
134Apr 27 19:24:51VigorIM Block(Yahoo messenger) wan
216.155.193.129,23 - 87.113.12.243,2122 PR 6 len 20 60
134Apr 27 19:25:01VigorP2P Block(eDonkey) wan 80.239.200.103,3000 -
87.113.12.243,2155 PR 6 len 20 54
134Apr 27 19:25:28VigorP2P Block(eDonkey) wan 80.239.200.103,3000 -
87.113.12.243,2155 PR 6 len 20 54
134Apr 27 19:25:55VigorIM Block(Yahoo messenger) wan
216.155.193.129,23 - 87.113.12.243,2122 PR 6 len 20 60
134Apr 27 19:26:23VigorP2P Block(eDonkey) wan 80.239.200.103,3000 -
87.113.12.243,2155 PR 6 len 20 54
134Apr 27 19:26:59VigorIM Block(Yahoo messenger) wan
216.155.193.129,23 - 87.113.12.243,2122 PR 6 len 20 60
134Apr 27 19:28:03VigorIM Block(Yahoo messenger) wan
216.155.193.129,23 - 87.113.12.243,2122 PR 6 len 20 60
134Apr 27 19:28:14VigorP2P Block(eDonkey) wan 80.239.200.103,3000 -
87.113.12.243,2155 PR 6 len 20 54
134Apr 27 19:30:14VigorP2P Block(eDonkey) wan 80.239.200.103,3000 -
87.113.12.243,2155 PR 6 len 20 54
134Apr 27 19:32:15VigorP2P Block(eDonkey) wan 80.239.200.103,3000 -
87.113.12.243,2155 PR 6 len 20 54
134Apr 27 19:34:14VigorP2P Block(eDonkey) wan 80.239.200.103,3000 -
87.113.12.243,2155 PR 6 len 20 54
134Apr 27 19:36:14VigorP2P Block(eDonkey) wan 80.239.200.103,3000 -
87.113.12.243,2155 PR 6 len 20 54
134Apr 27 19:38:15VigorP2P Block(eDonkey) wan 80.239.200.103,3000 -
87.113.12.243,2155 PR 6 len 20 54
134Apr 27 19:40:14VigorP2P Block(eDonkey) wan 80.239.200.103,3000 -
87.113.12.243,2155 PR 6 len 20 54

Can anyone suggest what caused this? I assume it is some form of attempt to
compromise my machine. I don't use P2P or Yahoo messenger. ANy suggestions
as to the appropriate course of action would be welcome. TIA

--
Peter Crosland


  #2  
Old April 28th 06, 08:32 PM posted to uk.telecom.broadband
ken r
external usenet poster
 
Posts: 6
Default Frewall log query.


"Peter Crosland" wrote in message
...
My Draytek 2800 router blocked the following yesterday.

Can anyone suggest what caused this? I assume it is some form of attempt
to compromise my machine. I don't use P2P or Yahoo messenger. ANy
suggestions as to the appropriate course of action would be welcome. TIA

--
Peter Crosland

If you use an ISP with dynamic IP allocation it can happen once the previous
user has had certain programs running. Once you have been allocated their
old IP address the other systems don't seem to know you are a different
user. So they still try to resume or connect again if that particulr IP
number is stored on another computer as one holding certain programs or
pictures. It will eventually give up.
At least the router works.
If you have a static IP then someone has put your IP number in to attempt a
direct connection.
Get a decent firewall installed.


  #3  
Old April 28th 06, 08:49 PM posted to uk.telecom.broadband
Peter Crosland
external usenet poster
 
Posts: 1,463
Default Frewall log query.

My Draytek 2800 router blocked the following yesterday.

Can anyone suggest what caused this? I assume it is some form of attempt
to compromise my machine. I don't use P2P or Yahoo messenger. ANy
suggestions as to the appropriate course of action would be welcome. TIA

If you use an ISP with dynamic IP allocation it can happen once the
previous user has had certain programs running. Once you have been
allocated their old IP address the other systems don't seem to know you
are a different user. So they still try to resume or connect again if
that particulr IP number is stored on another computer as one holding
certain programs or pictures. It will eventually give up.
At least the router works.
If you have a static IP then someone has put your IP number in to attempt
a direct connection.
Get a decent firewall installed.



Thanks for that. Surely the fact that the router's firewall rejected the it
means it works. Or have I missed something? I also run a software firewall
but it never reached that.

Peter Crosland


  #4  
Old April 28th 06, 11:44 PM posted to uk.telecom.broadband
Andy Furniss
external usenet poster
 
Posts: 76
Default Frewall log query.

Peter Crosland wrote:
My Draytek 2800 router blocked the following yesterday.

Can anyone suggest what caused this? I assume it is some form of attempt
to compromise my machine. I don't use P2P or Yahoo messenger. ANy
suggestions as to the appropriate course of action would be welcome. TIA


If you use an ISP with dynamic IP allocation it can happen once the
previous user has had certain programs running. Once you have been
allocated their old IP address the other systems don't seem to know you
are a different user. So they still try to resume or connect again if
that particulr IP number is stored on another computer as one holding
certain programs or pictures. It will eventually give up.
At least the router works.
If you have a static IP then someone has put your IP number in to attempt
a direct connection.
Get a decent firewall installed.




Thanks for that. Surely the fact that the router's firewall rejected the it
means it works. Or have I missed something? I also run a software firewall
but it never reached that.

Peter Crosland



Should be OK - I am also on a dynamic IP, but don't log detail - which
is just as well as I got 72000 the other day :-)

Andy.
  #6  
Old May 6th 06, 11:51 PM posted to uk.telecom.broadband
[email protected]
external usenet poster
 
Posts: 1
Default Frewall log query.

Could it be that you have firewall blocking P2P and IM services? This
is quite useful and is under
the firewall settings

 




Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
NTL query Cuprager uk.telecom.broadband (UK broadband) 7 January 22nd 06 09:18 AM
NIC Query Paul Felton uk.telecom.broadband (UK broadband) 4 April 24th 04 06:12 PM
Frewall Question Mike Saunders uk.telecom.broadband (UK broadband) 0 April 24th 04 04:30 PM
another newbie query Stef uk.telecom.broadband (UK broadband) 1 January 26th 04 11:53 AM
HH to ADSL query andrew dunlop uk.telecom.broadband (UK broadband) 9 August 17th 03 09:01 PM


All times are GMT +1. The time now is 06:24 AM.


Powered by vBulletin® Version 3.6.4
Copyright ©2000 - 2019, Jelsoft Enterprises Ltd.Content Relevant URLs by vBSEO 2.4.0
Copyright 2004-2019 BroadbanterBanter.
The comments are property of their posters.