Sign up
 Vonage  

       
 
Vonage Forum Menu

Vonage Forums
Vonage VoIP Forum
tplink Posted:
Im trying to add
my HT802 vonage
adapter to my home
network. I
currently have
...

In The Forum:
Hard Wiring - Installation
Topic:
Vonage behind switch
On Dec 05, 2016 at 06:35:11

DWSupport Posted:
After recent
Vonage update that
took place on the
4th and 5th of
Nov. E-mails with
...

In The Forum:
Vonage
Topic:
Voicemail Not Forwarding to Outlook Accounts
On Nov 10, 2016 at 12:23:26

peterlee Posted:
Had a call from a
Hospital in Ajax,
Ontario to my home
in
Scarborough, Onta
rio
...

In The Forum:
Vonage Canada
Topic:
Hospital Incoming call unable to connect
On Nov 08, 2016 at 11:59:50

TELLDOUG Posted:
I am looking for a
product that will
make my phone ring
louder so I can
hear using
...

In The Forum:
Vonage
Topic:
Looking for a ringer ameliorate
On Oct 26, 2016 at 09:21:30

HildBeft Posted:
You can recollect
password by
connecting the
router to your pc
and open the
browser
...

In The Forum:
Hard Wiring - Installation
Topic:
How to arrive at wifi password?
On Oct 20, 2016 at 05:05:49

HildBeft Posted:
Great tips..
Thanks for sharing
...

In The Forum:
Hard Wiring - Installation
Topic:
How to have Vonage and another land line?
On Oct 20, 2016 at 04:55:03

massrman Posted:
The devices are
available at
different price
margins , please
share your
estimated
...

In The Forum:
Vonage
Topic:
IP PBX for small business
On Sep 30, 2016 at 00:48:03

massrman Posted:
Hi these are most
commonly used SIP
PBX interops and
their
configuration
guides,
...

In The Forum:
Vonage
Topic:
IP PBX for small business
On Sep 30, 2016 at 00:37:45

Sammy00 Posted:
Has anyone setup a
W52p phone for
vonage? I have
a W52p with two
wireless handsets,
...

In The Forum:
Hard Wiring - Installation
Topic:
W52p Setup
On Aug 30, 2016 at 10:38:01

James44 Posted:
Hi, I am
looking for a good
Sip Trunking
provider in
Canada. they
should offer
...

In The Forum:
Vonage
Topic:
A good sip trunking provider
On Jul 17, 2016 at 23:42:46


Vonage VoIP Forums

Vonage In The News
Vonage Holdings Corp. Reports Fourth Quarter and Full Year 2013 Results

Carolyn Katz Elected to Board of Directors of Vonage Holdings Corp.

Syndication

Vonage Customer Reviews
Vonage vs. Time Warner Cable SoCal
Vonage vs. Time Warner Cable SoCal



Vonage UK Review
Vonage UK Review



Vonage Pros and Cons for 2006
Vonage Pros and Cons for 2006



Vonage, a VT2142 and a RTP300, My Experiences - A Detailed Review
Vonage, a VT2142 and a RTP300, My Experiences - A Detailed Review



Salt Lake City: impressions after several months
Salt Lake City: impressions after several months




Vonage Reviews


Post new topic   Reply to topic  Vonage® VoIP Forum - Vonage News, Reviews And Discussion » Vonage Forum Archive
Author Message
Colt1911
New Forum Member
New Forum Member


Joined: Oct 01, 2006
Posts: 4

PostPosted: Sun Oct 01, 2006 9:11 am    Post subject: Internet phone compromised!!!! Reply with quote Back to top

I have a real problem here, no incoming audio ONLY when I place an outgoing call. Incoming calls no problem. When I make an outgoing call, as soon as the number has been dialed, the internet light for 'incoming' connections on my computer comes on and stays on with no outgoing data. My firewall connection has two lights, one for incoming/outgoing data, and they are colored so you can see if the data was passes or blocked, at the same time the firewall incoming light comes on and stays on 'red' which means it is blocking a connection. A quick check of the traffic log reveals an flood of UDP, and the security log says 'Active Resonse' which means I am being attacked.

Edit: This only happens AS SOON as the final digit has been dialed, and ends exactly when I hang up the phone. Time after time after time.

What this does to my phone is no incoming audio, of course the other party can hear me fine. Go figure, my IP is being flooded with incoming connections bogging it down! But how and why? How does someone else know when I am making a call. I suspect a computer somewhere has been compromised. I dont see how it could be mine since the router splits the signal. Why? I suspect hackers are tracing the calls to locate broadband IP's with computers online, OR it is malicious and they want to disrupt service. Now I will give you everything you probably never wanted to know about my system Smile

Computer
CPU: 3.0G
RAM:1G
Network: VIA Rhine II 10/100M
Software:
Windows XP SP1
Sygate Personal firewall Pro
Router: Linksys RTP300
Phone: V-Tech 2.4G
Cable Modem: Scientific Atlanta DPX2100
Connection: Down: 6Mbit 'officially' (but I regularly see peaks in the 10Mbit range) Up: Not exactly sure I think 64k

They IP's seem to be different, but not random, ports ARE scanned 1023, 1024, 1025 etc, since the IP's are usually different from attack to attack, I suspect different people. Hackers have little communities where they share hacking info. I have tried changing my IP multiple times, sometimes three times in a row. No luck, another reason I suspect nothing on MY computer.

I have had few problems with the service in 9 months, nothing was bad enough to make me want to cancel it, until now. This CANNOT continue. It started a few days ago.

I will post some boring log stuff too:

The fields are: Time, Action, Severity, Direction, protocol, remote host, remote MAC, remote port, local host, local MAC, local port

10/01/2006 08:39:26, Blocked,10,Incoming,UDP,64.192.218.226,00-14-BF-90-9A-E6,29962 192.168.15.22,00-0B-6A-96-F5-B6,10064,Normal,427, Block_all

See the 427? thats occurences. Anyway I really need help, if I cant solve this problem in 24 hours I will have to cancel my account. Thanks for a quick resonse, feel free to ask any other questions, I will be checking this post ALL DAY. I can also post an image of my log, but I'm not sure how on this forum.
View user's profile Send private message
navydavy2001
Vonage Forum MVM
Vonage Forum <b>MVM</b>


Joined: May 26, 2005
Posts: 1125
Location: United States

PostPosted: Sun Oct 01, 2006 10:26 am    Post subject: Reply with quote Back to top

I think your firewall is blocking Vonage. An NSLOOKUP on the IP address in your security log revealed who that IP address belongs to:

Level 3 Communications, Inc. LVLT-ORG-64-192
(NET-64-192-0-0-1) 64.192.0.0 - 64.195.255.255
Vonage HOLDING CORP WLCO-TWC02142426-VONAGE-NYC-2 (NET-64-192-218-0-1) 64.192.218.0 - 64.192.218.255

And the occurances are normal, especially UDP, as the unit tries to phone home and check for firmware updates. What other information do you have that indicates an infiltration, rather than improper firewall access list entries?

_________________
http://www.thejeffriestube.com
View user's profile Send private message Visit poster's website
Colt1911
New Forum Member
New Forum Member


Joined: Oct 01, 2006
Posts: 4

PostPosted: Sun Oct 01, 2006 10:34 am    Post subject: Reply with quote Back to top

The cable comes into the modem then CAT 5 the the router , then it splits, CAT 5 to the computer, and phone line RJ11 to the phone. My phone does not go through my computer, but I can see the incoming flood on the external IP address, because my computer is being flooded, and no data can make it through. Thanks though.

//Edit
View user's profile Send private message
navydavy2001
Vonage Forum MVM
Vonage Forum <b>MVM</b>


Joined: May 26, 2005
Posts: 1125
Location: United States

PostPosted: Sun Oct 01, 2006 10:56 am    Post subject: Reply with quote Back to top

Well, the bottom line is if you want a thorough answer, you're going to have to do an NSLOOKUP on ALL of the addresses you see inbound on your PC to determine first if it's a hacker, or perhaps something being misconfigured, or if it's something that normally acts like that. After you have that data, record what IP's your using, and completely restart yuor entire network properly. That is, leave it all down, including the modem for about 10 minutes to purge memory caches. Then restart in order, one by one, waiting till the device is up and communicating before going to the next. Try that, then re-sample the activity. Are you using any sort of softphone, btw?

_________________
http://www.thejeffriestube.com
View user's profile Send private message Visit poster's website
Colt1911
New Forum Member
New Forum Member


Joined: Oct 01, 2006
Posts: 4

PostPosted: Sun Oct 01, 2006 11:41 am    Post subject: Reply with quote Back to top

I am able to limit my search for inbound addresses to when there is no other activity on my connection. I connect to P2P programs that sometimes cache IP's, I find that I get connections to my IP even after shutting down these programs, so I change my IP regularly. When I do there is no activity on my connection. Since the (my) router is setup to port forward, I see all the connections. When I pick up the phone, dial the number, as soon as the last digit is dialed my firewall on my computer is flooded, so I can assume the telephone is also flooded, hence no room for incoming data, so I cant hear. Then at the very moment I turn my phone off, the flood immediately stops. All returns to normal. Admidtly, I should have done a lookup already, I will try your instruction next, thank you. Also I found the speed/QoS test on this site I click the button, but the test never runs, just says 'working' Might you know anything about that? I noticed it was java 1.1. I saw the graph, and it moved, but the tests never run? weird.

//edit Softphone? assume you mean a headset\mic on my pc ? No Will check IP's
View user's profile Send private message
Colt1911
New Forum Member
New Forum Member


Joined: Oct 01, 2006
Posts: 4

PostPosted: Sun Oct 01, 2006 12:32 pm    Post subject: Reply with quote Back to top

Ok, resetting modem, router, and computer seems to have solved the problem for now, it also did clear up for awhile last night, and then started again. Time will see if it lasts. I do have to reset the modem and router everytime I change IP, which is daily, though I only unplug them for a moment. Could it be that 10 minutes really makes a difference? We will see. I suspect it will happen again. But I hope it doesnt!! Thank you very much for your help. I really really appreciate it.
View user's profile Send private message
Display posts from previous:   
Post new topic   Reply to topic

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum


All times are GMT - 5 Hours

Vonage Service Plans


Vonage VoIP Members
Members List Members
New sherriyn18
New Today 4
Yesterday 3
Total 99051

Who Is On Site
Visitors 81
Members 0
Total 81


Vonage VoIP Forum Members:
Login Here
Not a Member? You can Register Here
As a registered member you will have access to the VoIP Speed Test, Vonage Service Announcements and post comments in the
Vonage VoIP Forums

Vonage Stock Price
Value: 6.84
Change:   N/A
Up to 15 Minute Delay

Site Search
 






†AK and HI residents pay $29.95 shipping. ††Limited time offer. Valid for residents of the United States (&DC), 18 years or older, who open new accounts. Offer good while supplies last and only on new account activations. One kit per account/household. Offer cannot be combined with any other discounts, promotions or plans and is not applicable to past purchases. Good while supplies last. Allow up to 2 weeks for shipping. Other restrictions may apply.

1Unlimited calling and other services for all residential plans are based on normal residential, personal, non-commercial use. A combination of factors is used to determine abnormal use, including but not limited to: the number of unique numbers called, calls forwarded, minutes used and other factors. Subject to our Reasonable Use Policy and Terms of Service.

2Shipping and activation fees waived with 1-year agreement. An Early Termination Fee (with periodic pro-rated reductions) applies if service is terminated before the end of the first 12 months. Additional restrictions may apply. See Terms of Service for details.

HIGH SPEED INTERNET REQUIRED. †VALID FOR NEW LINES ONLY. RATES EXCLUDE INTERNET SERVICE, SURCHARGES, FEES AND TAXES. DEVICE MAY BE REFURBISHED. If you subscribe to plans with monthly minutes allotments, all call minutes placed from both from your home and registered ExtensionsTM phones will count toward your monthly minutes allotment. ExtensionsTM calls made from mobiles use airtime and may incur surcharges, depending on your mobile plan. Alarms, TTY and other systems may not be compatible. Vonage 911 service operates differently than traditional 911. See www.vonage.com/911 for details.

** Certain call types excluded.

www.vonage-forum.com is not an official Vonage support website & is independently operated.
All logos and trademarks are property of their respective owners. All comments are property of their posters.
All other www.vonage-forum.com content is © Copyright 2002 - 2013 by 4Sight Media LLC.

Thinking of signing up for Vonage but have questions?
Business and Residential customers can call Toll Free 24 hours a day at: 1-888-692-8074
No Vonage Promotion Code or Coupon Codes are required at www.vonage.com to receive any special,
best Vonage cheap deals, free sign up offers or discounts.

[ | | | | | ]

Vonage Forum Site Maps

Vonage | VoIP Forum | How VoIP Works | Wiring and Installation Page Two | International Rate Plans 2 | Internet Phone
Promotion | Vonage Review | VoIP | Broadband Phone | Free Month | Rebate | Vonnage | Vontage | VoIP | Phone Service
Phone | llamadas ilimitadas a Mexico | Latest News | VoIP Acronyms | Deal | Philippines Globe Phone | Site Maps

The Vonage Forum provides the Vonage sign up Best Offer Promotion Deal.
If you are considering signing up for Vonage and have found our Vonage News, Customer Reviews, Forums
& all other parts of this site useful, please use our Vonage Sign up page.


Vonage VoIP Phone Service is redefining communications by offering consumers
& small business VoIP Internet phones, an affordable alternative to traditional phone service.
The Vonage VoIP Forum Generated This Page In: 0.74 Seconds and 510 Pages In The Last 60 Seconds
The Vonage VoIP Forum