dslreports logo
site
 
    All Forums Hot Topics Gallery
spc

spacer




how-to block ads


Search Topic:
uniqs
1175
share rss forum feed


Mance

@plus.com

Netgear Security Log - "TELNET Rule Match"

Hi,

I have my Firewall settings to block all in and outbound TELNET connections. My Netgear router emails me attempts and I just want to clarify that it's refusing these attempts. They seem to come in blocks of time from random locations. Can you confirm it's doing it's job!

"Sun, 2012-06-10 08:19:32 - TCP Packet - Source:200.121.230.216,4694 Destination:**.**.***.**,23 - [TELNET rule match]
Sun, 2012-06-10 08:50:14 - TCP Packet - Source:27.251.233.123,41092 Destination:**.**.***.**,23 - [TELNET rule match]
Sun, 2012-06-10 09:16:56 - TCP Packet - Source:190.254.94.83,2240 Destination:**.**.***.**,23 - [TELNET rule match]
Sun, 2012-06-10 10:33:47 - TCP Packet - Source:74.90.93.187,3133 Destination:**.**.***.**,23 - [TELNET rule match]
Sun, 2012-06-10 14:37:36 - TCP Packet - Source:190.43.123.113,3092 Destination:**.**.***.**,23 - [TELNET rule match]
Sun, 2012-06-10 17:05:14 - TCP Packet - Source:84.46.239.170,60890 Destination:**.**.***.**,23 - [TELNET rule match]
Sun, 2012-06-10 17:34:24 - TCP Packet - Source:84.60.74.203,3427 Destination:**.**.***.**,23 - [TELNET rule match]
Sun, 2012-06-10 19:18:38 - TCP Packet - Source:78.183.102.3,4231 Destination:**.**.***.**,23 - [TELNET rule match]
Sun, 2012-06-10 19:18:46 - TCP Packet - Source:78.173.189.143,3193 Destination:**.**.***.**,23 - [TELNET rule match]
Sun, 2012-06-10 19:19:06 - TCP Packet - Source:88.249.225.21,3612 Destination:**.**.***.**,23 - [TELNET rule match]
Sun, 2012-06-10 21:29:56 - TCP Packet - Source:78.172.102.166,4922 Destination:**.**.***.**,23 - [TELNET rule match]
Sun, 2012-06-10 23:44:03 - TCP Packet - Source:46.70.228.58,3412 Destination:**.**.***.**,23 - [TELNET rule match]
Mon, 2012-06-11 00:29:08 - TCP Packet - Source:41.227.211.22,2100 Destination:**.**.***.**,23 - [TELNET rule match]
Mon, 2012-06-11 03:28:59 - TCP Packet - Source:62.152.139.153,3337 Destination:**.**.***.**,23 - [TELNET rule match]
Mon, 2012-06-11 06:13:14 - TCP Packet - Source:79.24.44.157,4712 Destination:**.**.***.**,23 - [TELNET rule match]
Mon, 2012-06-11 09:14:35 - TCP Packet - Source:88.247.110.201,4934 Destination:**.**.***.**,23 - [TELNET rule match]
Mon, 2012-06-11 09:14:36 - TCP Packet - Source:88.240.251.175,4099 Destination:**.**.***.**,23 - [TELNET rule match]
Mon, 2012-06-11 09:14:37 - TCP Packet - Source:78.166.149.231,4295 Destination:**.**.***.**,23 - [TELNET rule match]
Mon, 2012-06-11 11:41:49 - TCP Packet - Source:74.124.101.76,3656 Destination:**.**.***.**,23 - [TELNET rule match]
Mon, 2012-06-11 11:41:57 - TCP Packet - Source:74.124.101.76,3961 Destination:**.**.***.**,23 - [TELNET rule match]
Mon, 2012-06-11 19:42:42 - TCP Packet - Source:72.14.73.113,3481 Destination:**.**.***.**,23 - [TELNET rule match]
Mon, 2012-06-11 21:40:40 - TCP Packet - Source:174.29.208.118,3088 Destination:**.**.***.**,23 - [TELNET rule match]
Mon, 2012-06-11 21:53:22 - TCP Packet - Source:190.239.229.30,2055 Destination:**.**.***.**,23 - [TELNET rule match]
Mon, 2012-06-11 23:06:12 - TCP Packet - Source:84.244.67.94,3088 Destination:**.**.***.**,23 - [TELNET rule match]"

Thanks


techguy2012

join:2012-05-17
Mundelein, IL

the log says those IPs are being matched to your Telnet rule

confirm your telnet rule is to block traffic

I'd say it's working

you can also check for yourself here:
»canyouseeme.org
put in port 23, what do you get?
error = it's blocked (or nothing is listening on port 23)



Mance

@plus.com

Thanks very much - all I needed to now. Appreciate you replying!