 | reply to ewth8tr
Re: Who is pqwest1.qwest.motive.com? Logging onto my router!ewth8tr, thanks for the explanation. I found the configuration items you noted:
>show config
set dslf-cpewan option on
set dslf-cpewan acs-url "http://pqwesthdm.qwest.motive.com/cwmpWeb/WGCPEMgt"
set dslf-cpewan acs-user-name "xxxxxxx"
set dslf-cpewan acs-user-password "yyyy"
And sure enough, a configuration dump I made in February shows the old server:
set dslf-cpewan acs-url "https://cwmp.cms.acs.qwest.com"
Interesting that the username and password are stored CLEAR TEXT in the config file. Accessing the referenced URL with the supplied credentials results in a page showing:
CPE Servlet responding
* Active session count = 20
The IP of the configured server (64.186.176.128) doesn't match any of the IPs that accessed my router, so there are evidently a number of systems in play here for inbound updates and outbound checks.
Thanks for the pointer...off to do some more Googling to see what else is happening ;-) |