site Search:


 
    All Forums Hot Topics Gallery






how-to block ads


 
Search Topic:
Uniqs:
957
Share Topic
Posting?
Post a:
Post a:
AuthorAll Replies


Mance

@plus.com

Netgear Security Log - "TELNET Rule Match"

Hi,

I have my Firewall settings to block all in and outbound TELNET connections. My Netgear router emails me attempts and I just want to clarify that it's refusing these attempts. They seem to come in blocks of time from random locations. Can you confirm it's doing it's job!

"Sun, 2012-06-10 08:19:32 - TCP Packet - Source:200.121.230.216,4694 Destination:**.**.***.**,23 - [TELNET rule match]
Sun, 2012-06-10 08:50:14 - TCP Packet - Source:27.251.233.123,41092 Destination:**.**.***.**,23 - [TELNET rule match]
Sun, 2012-06-10 09:16:56 - TCP Packet - Source:190.254.94.83,2240 Destination:**.**.***.**,23 - [TELNET rule match]
Sun, 2012-06-10 10:33:47 - TCP Packet - Source:74.90.93.187,3133 Destination:**.**.***.**,23 - [TELNET rule match]
Sun, 2012-06-10 14:37:36 - TCP Packet - Source:190.43.123.113,3092 Destination:**.**.***.**,23 - [TELNET rule match]
Sun, 2012-06-10 17:05:14 - TCP Packet - Source:84.46.239.170,60890 Destination:**.**.***.**,23 - [TELNET rule match]
Sun, 2012-06-10 17:34:24 - TCP Packet - Source:84.60.74.203,3427 Destination:**.**.***.**,23 - [TELNET rule match]
Sun, 2012-06-10 19:18:38 - TCP Packet - Source:78.183.102.3,4231 Destination:**.**.***.**,23 - [TELNET rule match]
Sun, 2012-06-10 19:18:46 - TCP Packet - Source:78.173.189.143,3193 Destination:**.**.***.**,23 - [TELNET rule match]
Sun, 2012-06-10 19:19:06 - TCP Packet - Source:88.249.225.21,3612 Destination:**.**.***.**,23 - [TELNET rule match]
Sun, 2012-06-10 21:29:56 - TCP Packet - Source:78.172.102.166,4922 Destination:**.**.***.**,23 - [TELNET rule match]
Sun, 2012-06-10 23:44:03 - TCP Packet - Source:46.70.228.58,3412 Destination:**.**.***.**,23 - [TELNET rule match]
Mon, 2012-06-11 00:29:08 - TCP Packet - Source:41.227.211.22,2100 Destination:**.**.***.**,23 - [TELNET rule match]
Mon, 2012-06-11 03:28:59 - TCP Packet - Source:62.152.139.153,3337 Destination:**.**.***.**,23 - [TELNET rule match]
Mon, 2012-06-11 06:13:14 - TCP Packet - Source:79.24.44.157,4712 Destination:**.**.***.**,23 - [TELNET rule match]
Mon, 2012-06-11 09:14:35 - TCP Packet - Source:88.247.110.201,4934 Destination:**.**.***.**,23 - [TELNET rule match]
Mon, 2012-06-11 09:14:36 - TCP Packet - Source:88.240.251.175,4099 Destination:**.**.***.**,23 - [TELNET rule match]
Mon, 2012-06-11 09:14:37 - TCP Packet - Source:78.166.149.231,4295 Destination:**.**.***.**,23 - [TELNET rule match]
Mon, 2012-06-11 11:41:49 - TCP Packet - Source:74.124.101.76,3656 Destination:**.**.***.**,23 - [TELNET rule match]
Mon, 2012-06-11 11:41:57 - TCP Packet - Source:74.124.101.76,3961 Destination:**.**.***.**,23 - [TELNET rule match]
Mon, 2012-06-11 19:42:42 - TCP Packet - Source:72.14.73.113,3481 Destination:**.**.***.**,23 - [TELNET rule match]
Mon, 2012-06-11 21:40:40 - TCP Packet - Source:174.29.208.118,3088 Destination:**.**.***.**,23 - [TELNET rule match]
Mon, 2012-06-11 21:53:22 - TCP Packet - Source:190.239.229.30,2055 Destination:**.**.***.**,23 - [TELNET rule match]
Mon, 2012-06-11 23:06:12 - TCP Packet - Source:84.244.67.94,3088 Destination:**.**.***.**,23 - [TELNET rule match]"

Thanks

techguy2012

join:2012-05-17
Mundelein, IL

the log says those IPs are being matched to your Telnet rule

confirm your telnet rule is to block traffic

I'd say it's working

you can also check for yourself here:
»canyouseeme.org
put in port 23, what do you get?
error = it's blocked (or nothing is listening on port 23)



Mance

@plus.com

Thanks very much - all I needed to now. Appreciate you replying!


Thursday, 23-May 10:11:37 Terms of Use & Privacy | feedback | contact | Hosting by nac.net - DSL,Hosting & Co-lo
over 13.5 years online © 1999-2013 dslreports.com.
Most commented news this week
Hot Topics