Multiple attempts to access router
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
- Plusnet Community
- :
- Forum
- :
- Help with my Plusnet services
- :
- My Router
- :
- Multiple attempts to access router
Multiple attempts to access router
09-10-2018 8:43 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
Been having a lot of issues with speed - speed tests are okay but the actual speed doesn't resemble what we see.
Yesterday I looked at the hub log and noticed that all day there was a circle of three ports opening (9091 9092 and 9093) adding a port forwarding rule, deleting a port forwarding rule, closing the connection then opening the next one. This has been going on as far as the log goes back. I reset the hub and this has stopped however there are multiple instances of something trying to remote in and getting blocked. Now I know there are those that will say ignore it its the firewall doing its job however these are 6-15 an hour all from different IPs - the first few being USA, Ukraine, Netherlands, China and Brazil.
Can anyone throw any light on this
163.158.118.83 |
143.0.60.93 |
184.105.139.67 |
116.62.168.116 |
36.189.253.232 |
37.49.224.150 |
196.52.43.90 |
104.192.224.10 |
107.170.194.164 |
193.106.31.194 |
189.78.66.109 |
5.160.215.184 |
185.143.223.12 |
58.218.66.104 |
221.229.166.69 |
182.119.228.20 |
150.255.6.1 |
182.119.228.20 |
223.166.74.229 |
182.119.228.20 |
223.166.74.214 |
121.225.246.10 |
150.255.86.79 |
216.201.240.242 |
209.17.96.58 |
Re: Multiple attempts to access router
10-10-2018 11:53 AM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
Thanks for getting in touch.
This is a tough one to diagnose as the IP's you've highlighted are from a range of purported locations and sources. From our perspective, I'd recommend ensuring that your router admin password is secure and that any internal firewalls you have on your devices along with anti-virus etc are up to date.
Other than that, I'd perhaps throw this open to our community and the hallowed knowledge of @bobpullen to see if they have any further ideas.
As you've stated, the firewall on the router IS doing its job by logging the access and blocking it, so there's no imminent danger to your connection.
Best wishes
Dave
Re: Multiple attempts to access router
10-10-2018 2:05 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
@WhatsWrongNow wrote:
Yesterday I looked at the hub log and noticed that all day there was a circle of three ports opening (9091 9092 and 9093) adding a port forwarding rule, deleting a port forwarding rule, closing the connection then opening the next one.
That's probably something on your LAN/WLAN using UPnP to open ports for communication. I'd be surprised if it's anything sinister.
Now I know there are those that will say ignore it its the firewall doing its job however these are 6-15 an hour all from different IPs - the first few being USA, Ukraine, Netherlands, China and Brazil.
Can anyone throw any light on this
You can ignore this. It's just the firewall doing its job
Bob Pullen
Plusnet Product Team
If I've been helpful then please give thanks ⤵
Re: Multiple attempts to access router
10-10-2018 2:40 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
The ports I mentioned are coming up as gaming for championship master commonly used.
UDP is blocked because it causes huge problems if not.
I get that you’d “be surprised if it was anything sinister” and it get that the router is stopping these attempts. What I don’t get is why the world is trying to access us in the first place
Re: Multiple attempts to access router
10-10-2018 2:49 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
Yep @WhatsWrongNow
It sounds like it is just one of those things and there is not much you can do. I take it you don't do gaming or run servers? So you have no ports open and the router is doing its job, though I can understand your concern about the number of attempts.
Maybe @bobpullen can check your account to make sure whether he can see something going on their side.
Re: Multiple attempts to access router
10-10-2018 2:56 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
So you've explicitly disabled UPnP in the router interface?
If the probes were to have an impact on your speed then I'd expect to see this reflected in your usage, which at a glance is pretty low.
As to why - the Internet is a funny place. You do have a static IP, so if somebody was intentionally (repeatedly) targeting you, then I guess that makes it a tad easier. Unless you can think of a reason why somebody would do this though, then it's unlikely.
A quick scan of your device doesn't show anything open that shouldn't be.
Bob Pullen
Plusnet Product Team
If I've been helpful then please give thanks ⤵
Re: Multiple attempts to access router
10-10-2018 3:06 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
Re: Multiple attempts to access router
10-10-2018 4:07 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
Apologies, you don't. I was looking at the wrong thing
Bob Pullen
Plusnet Product Team
If I've been helpful then please give thanks ⤵
Re: Multiple attempts to access router
10-10-2018 5:48 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
Perhaps your router has re- synced recently and the previous ip address owner was a gamer? Would explain the origins being of the gaming ilk.
Mark
Re: Multiple attempts to access router
10-10-2018 6:49 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
Re: Multiple attempts to access router
10-10-2018 6:57 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
Re: Multiple attempts to access router
12-10-2018 2:11 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
Re: Multiple attempts to access router
12-10-2018 2:28 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
Re: Multiple attempts to access router
12-10-2018 7:25 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
At a guess, you have a Chromecast.
I find my IP address is endlessly scanned and probed by those looking for a vulnerability.
Keep a good eye on such matters but don't think you are being specially selected for this attention.
Re: Multiple attempts to access router
12-10-2018 9:05 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
- Plusnet Community
- :
- Forum
- :
- Help with my Plusnet services
- :
- My Router
- :
- Multiple attempts to access router