pejacoby
join:2009-02-03
Saint Paul, MN
| reply to colorbars
Re: Who is pqwest1.qwest.motive.com? Logging onto my router!
First, I log to a syslog server, so I have logs back to January. This is the first time I've seen this type of access.
Second, my admin password is very strong, and something that would take many many tries to dictionary attack. The fact that the login success here occurred after just 9 attempts tells me this is some "other" administrative login, special to Qwest & Motive.com.
Third, the destination port is 7547/TCP, which appears to be something special on the WAN interface. I can telnet to it also, but it closes the connection immediately. This isn't a port that is mapped to any system on my internal network.
From a look at the motive.com site, it appears this might(?) be a router firmware version check or update attempt of some sort. I'm still searching the Motorola docs, and plan to send in a support case to Qwest. |
