Port scanning by Plusnet DNS server?
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
- Plusnet Community
- :
- Forum
- :
- Help with my Plusnet services
- :
- Broadband
- :
- Re: Port scanning by Plusnet DNS server?
Port scanning by Plusnet DNS server?
10-09-2014 12:08 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
Last night, earlier this morning, and currently I have had a few dozen emails, some of which relate to the usual suspects, but many are as follows:
[DOS] UDP Packet - Source:212.159.6.10,53 Destination:XX.XXX.XXX.43,55014 (my current IP address)
The source appears to be PlusNet's own "additional DNS" servers which seems pretty weird to me - does anyone have any idea what might be going on here?
The router is set to use 8.8.8.8 and 8.8.4.4. and has been for years - nothing else has been tweaked or altered either.
Re: Port scanning by Plusnet DNS server?
11-09-2014 9:06 AM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
Could a member of the PlusNet support team please check whether this is a 'feature' of my current IP address, which I obviously don't want to post here?
I shall try to obtain a new address if you believe that may solve the problem.
Re: Port scanning by Plusnet DNS server?
11-09-2014 9:14 AM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
17.173.254.222 is Apple's iMessage server I believe.
Re: Port scanning by Plusnet DNS server?
11-09-2014 9:23 AM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
Quote from: AndyH This is their DNS servers - 212.159.6.10 It's not port scanning you, it's respond to your DNS lookup request.
The router is set to only use Google DNS servers - why would it be trying to look up using PN servers?
Re: Port scanning by Plusnet DNS server?
11-09-2014 9:35 AM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
Are you sure the router is set to use Plusnet's DNS servers?
Re: Port scanning by Plusnet DNS server?
11-09-2014 9:44 AM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
Re: Port scanning by Plusnet DNS server?
11-09-2014 9:46 AM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
Have you rechecked the dns settings in your trusty netgear?
Is it running custom firmware by any chance?
Re: Port scanning by Plusnet DNS server?
11-09-2014 10:11 AM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
No custom firmware (currently 5.01.16 although I note that 5.01.17 was released earlier this year which "fixed TCP port 32764 issue", which I must admit is way beyond my level of IT knowledge to be able to understand the possible implications of it!)
Re: Port scanning by Plusnet DNS server?
11-09-2014 10:34 AM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
ipconfig /all
Also the router may well be using the dns servers (plusnet's) assigned via dhcp for it's own internal lookups. eg to resolve things set in the router like the time server etc.
Re: Port scanning by Plusnet DNS server?
11-09-2014 10:38 AM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
Re: Port scanning by Plusnet DNS server?
11-09-2014 10:50 AM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
If I continue to have problems I'll be trying your suggestions - thanks very much for your help so far.
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
- Plusnet Community
- :
- Forum
- :
- Help with my Plusnet services
- :
- Broadband
- :
- Re: Port scanning by Plusnet DNS server?