Sign up
 Vonage  

       
 
Vonage Forum Menu

Vonage Forums
Vonage VoIP Forum
tplink Posted:
Im trying to add
my HT802 vonage
adapter to my home
network. I
currently have
...

In The Forum:
Hard Wiring - Installation
Topic:
Vonage behind switch
On Dec 05, 2016 at 06:35:11

DWSupport Posted:
After recent
Vonage update that
took place on the
4th and 5th of
Nov. E-mails with
...

In The Forum:
Vonage
Topic:
Voicemail Not Forwarding to Outlook Accounts
On Nov 10, 2016 at 12:23:26

peterlee Posted:
Had a call from a
Hospital in Ajax,
Ontario to my home
in
Scarborough, Onta
rio
...

In The Forum:
Vonage Canada
Topic:
Hospital Incoming call unable to connect
On Nov 08, 2016 at 11:59:50

TELLDOUG Posted:
I am looking for a
product that will
make my phone ring
louder so I can
hear using
...

In The Forum:
Vonage
Topic:
Looking for a ringer ameliorate
On Oct 26, 2016 at 09:21:30

HildBeft Posted:
You can recollect
password by
connecting the
router to your pc
and open the
browser
...

In The Forum:
Hard Wiring - Installation
Topic:
How to arrive at wifi password?
On Oct 20, 2016 at 05:05:49

HildBeft Posted:
Great tips..
Thanks for sharing
...

In The Forum:
Hard Wiring - Installation
Topic:
How to have Vonage and another land line?
On Oct 20, 2016 at 04:55:03

massrman Posted:
The devices are
available at
different price
margins , please
share your
estimated
...

In The Forum:
Vonage
Topic:
IP PBX for small business
On Sep 30, 2016 at 00:48:03

massrman Posted:
Hi these are most
commonly used SIP
PBX interops and
their
configuration
guides,
...

In The Forum:
Vonage
Topic:
IP PBX for small business
On Sep 30, 2016 at 00:37:45

Sammy00 Posted:
Has anyone setup a
W52p phone for
vonage? I have
a W52p with two
wireless handsets,
...

In The Forum:
Hard Wiring - Installation
Topic:
W52p Setup
On Aug 30, 2016 at 10:38:01

James44 Posted:
Hi, I am
looking for a good
Sip Trunking
provider in
Canada. they
should offer
...

In The Forum:
Vonage
Topic:
A good sip trunking provider
On Jul 17, 2016 at 23:42:46


Vonage VoIP Forums

Vonage In The News
Vonage Holdings Corp. Reports Fourth Quarter and Full Year 2013 Results

Carolyn Katz Elected to Board of Directors of Vonage Holdings Corp.

Syndication

Vonage Customer Reviews
Vonage vs. Time Warner Cable SoCal
Vonage vs. Time Warner Cable SoCal



Vonage UK Review
Vonage UK Review



Vonage Pros and Cons for 2006
Vonage Pros and Cons for 2006



Vonage, a VT2142 and a RTP300, My Experiences - A Detailed Review
Vonage, a VT2142 and a RTP300, My Experiences - A Detailed Review



Salt Lake City: impressions after several months
Salt Lake City: impressions after several months




Vonage Reviews


Post new topic   Reply to topic  Vonage® VoIP Forum - Vonage News, Reviews And Discussion » Vonage Forum Archive
Author Message
Tallance
New Forum Member
New Forum Member


Joined: Dec 02, 2005
Posts: 4

PostPosted: Fri Dec 02, 2005 3:33 pm    Post subject: Why is 216.115.24.192 port scanning Reply with quote Back to top

When a consultant checks his phone list on the vonage.comat my location. A port scan from 216.115.24.192 is logged at our firewall. There is no Vonage phone being used on the network (that is known anyway). It happens when he logs into check his account.
Why is this happening?

Thanks,
Tal
View user's profile Send private message
NateHoy
Vonage Forum MVM
Vonage Forum <b>MVM</b>


Joined: Nov 01, 2005
Posts: 2257
Location: New England

PostPosted: Fri Dec 02, 2005 3:50 pm    Post subject: Re: Why is 216.115.24.192 port scanning Reply with quote Back to top

Tallance wrote:
When a consultant checks his phone list on the vonage.comat my location. A port scan from 216.115.24.192 is logged at our firewall. There is no Vonage phone being used on the network (that is known anyway). It happens when he logs into check his account.
Why is this happening?

Thanks,
Tal


That IP address (according to Arin) is owned by Vonage.

What do you mean by "checks his phone list"? Do you mean his voicemail? Hmm. That "should" just be a regular web page, albeit an SSL one.

What port is being scanned?

_________________
Comcast Cable (3m down / 256k up) -> Linksys BEFCMU10 v2 (DOCSIS 1.0) -> WRT54G v4 ("Tomato" firmware) -> the rest of my network including a WRTP54G (Firmware: 5.01.04)
My Vonage Self-Help Guides: http://vonage.nmhoy.net
View user's profile Send private message
Tallance
New Forum Member
New Forum Member


Joined: Dec 02, 2005
Posts: 4

PostPosted: Fri Dec 02, 2005 4:18 pm    Post subject: Reply with quote Back to top

The person logs onto the Vonage site and looks at the phone number list of sent and received calls for his Vonage phones.
I know that the ip is Vonage that is why I post the question here, hoping that some else had noticed it, or knew why.
There appears to be 1 to 2 port scans per times he access the Vonage web site.
The port scans
[22/Nov/2005 11:01:23] PORTSCAN hostip="216.115.24.192" log="protocol:TCP, source: 216.115.24.192, destination: xx.xxx.xx.xx, ports: 65281, 65282, 65283, 65284, 65285, 65286, 65287, 65288, 65289, 65279, ..."
[22/Nov/2005 11:01:43] PORTSCAN hostip="216.115.24.192" log="protocol:TCP, source: 216.115.24.192, destination: xx.xxx.xx.xx, ports: 65281, 65282, 65283, 65284, 65285, 65286, 65288, 65289, 65303, 65279, ..."
[22/Nov/2005 11:02:19] PORTSCAN hostip="216.115.24.192" log="protocol:TCP, source: 216.115.24.192, destination: xx.xxx.xx.xx, ports: 65303, 65313, 65314, 65316, 65318, 65319, 65320, 65321, 65322, 65323, ..."
[22/Nov/2005 11:02:59] PORTSCAN hostip="216.115.24.192" log="protocol:TCP, source: 216.115.24.192, destination: xx.xxx.xx.xx, ports: 65313, 65314, 65316, 65318, 65319, 65320, 65321, 65323, 65334, 65335, ..."

[29/Nov/2005 10:02:55] PORTSCAN hostip="216.115.24.192" log="protocol:TCP, source: 216.115.24.192, destination: xx.xxx.xx.xx, ports: 61003, 61007, 61008, 61009, 61010, 61011, 61012, 61013, 61014, 61015, ..."
[29/Nov/2005 10:03:15] PORTSCAN hostip="216.115.24.192" log="protocol:TCP, source: 216.115.24.192, destination: xx.xxx.xx.xx, ports: 61003, 61007, 61008, 61009, 61010, 61011, 61012, 61013, 61014, 61015, ..."
[29/Nov/2005 10:03:55] PORTSCAN hostip="216.115.24.192" log="protocol:TCP, source: 216.115.24.192, destination: xx.xxx.xx.xx, ports: 61003, 61007, 61008, 61009, 61010, 61011, 61012, 61013, 61014, 61016, ..."
[29/Nov/2005 13:18:38] PORTSCAN hostip="216.115.24.192" log="protocol:TCP, source: 216.115.24.192, destination: xx.xxx.xx.xx, ports: 51567, 51569, 51571, 51573, 51574, 51578, 51580, 51581, 51582, 51583, ..."
[29/Nov/2005 13:19:38] PORTSCAN hostip="216.115.24.192" log="protocol:TCP, source: 216.115.24.192, destination: xx.xxx.xx.xx, ports: 51578, 51580, 51581, 51582, 51583, 51584, 51585, 51587, 51590, 51591, ..."

[01/Dec/2005 15:33:37] PORTSCAN hostip="216.115.24.192" log="protocol:TCP, source: 216.115.24.192, destination: xx.xxx.xx.xx, ports: 61466, 61470, 61473, 61474, 61475, 61477, 61478, 61479, 61481, 61482, ..."
[01/Dec/2005 15:33:57] PORTSCAN hostip="216.115.24.192" log="protocol:TCP, source: 216.115.24.192, destination: xx.xxx.xx.xx, ports: 61466, 61470, 61473, 61474, 61475, 61477, 61478, 61479, 61481, 61482, ..."
[01/Dec/2005 15:34:37] PORTSCAN hostip="216.115.24.192" log="protocol:TCP, source: 216.115.24.192, destination: xx.xxx.xx.xx, ports: 61466, 61470, 61473, 61474, 61475, 61477, 61478, 61479, 61481, 61482, ..."
[01/Dec/2005 15:38:57] PORTSCAN hostip="216.115.24.192" log="protocol:TCP, source: 216.115.24.192, destination: xx.xxx.xx.xx, ports: 61640, 61642, 61643, 61644, 61645, 61647, 61648, 61650, 61652, 61653, ..."
[01/Dec/2005 15:39:47] PORTSCAN hostip="216.115.24.192" log="protocol:TCP, source: 216.115.24.192, destination: xx.xxx.xx.xx, ports: 61640, 61642, 61643, 61644, 61645, 61647, 61648, 61649, 61650, 61652, ..."
View user's profile Send private message
NateHoy
Vonage Forum MVM
Vonage Forum <b>MVM</b>


Joined: Nov 01, 2005
Posts: 2257
Location: New England

PostPosted: Fri Dec 02, 2005 4:57 pm    Post subject: Reply with quote Back to top

WOW! Is that a partial extract? As in, does it port scan the ENTIRE port range?

Even if it's just the ports you posted... Holy cow! There's no reason for Vonage do be doing that to serve up a web page. Good catch.

Vonage, even if it was contacting the phone adapter for some bizarre reason, or trying to, should already have a different IP address for the adapter, and shouldn't be anywhere NEAR those ranges, and would have absolutely no reason to be pumping port scans to ports their adapters don't even use.

I'd have your consultant call Customer Service directly on this one, and insist on going up the support chain a couple of steps. Straaaaange.

_________________
Comcast Cable (3m down / 256k up) -> Linksys BEFCMU10 v2 (DOCSIS 1.0) -> WRT54G v4 ("Tomato" firmware) -> the rest of my network including a WRTP54G (Firmware: 5.01.04)
My Vonage Self-Help Guides: http://vonage.nmhoy.net
View user's profile Send private message
KDWycha
Vonage Forum Evangelist
Vonage Forum Evangelist


Joined: Jan 19, 2005
Posts: 605
Location: Tampa, Florida USA (813)

PostPosted: Fri Dec 02, 2005 6:06 pm    Post subject: Reply with quote Back to top

I should contact one of my many consultants and see if i am being probed too. Rolling Eyes


_________________
Kevin Wycha
Vonage Subscriber Since: Jan 17, 2005
Linksys RT31P2 Router/ATA
Motorola SB5100 Cablemodem
Roadrunner TampaBay (10mb down/1mb up)
---
Dancing w00t! Dancing
View user's profile Send private message
Tallance
New Forum Member
New Forum Member


Joined: Dec 02, 2005
Posts: 4

PostPosted: Mon Dec 05, 2005 1:40 pm    Post subject: Reply with quote Back to top

Yes that is a partial , it does appear to scan more, but that is all the firewall is logging to the accessible log. I will contact my consultant and see what happens. Thanks for the confirmation that something is wrong.
View user's profile Send private message
ColdGin
Vonage Forum Evangelist
Vonage Forum Evangelist


Joined: Oct 03, 2005
Posts: 423

PostPosted: Mon Dec 05, 2005 2:20 pm    Post subject: Reply with quote Back to top

yes the phone device actually sends us its IP address and the open port from behind the NAT router. I can look at a devices debug log and see 192.168.x.x.:459382 or something similar. I have no idea why the site would be scanning those IPs.

Of course anyone I ask here about that looks at me like I just suggested a coleslaw wrestling tournament right here in the call center and then they yell at me and chase me back to my phone. So no luck on my initial inquiries...
View user's profile Send private message
j-card
Vonage Forum Senior
Vonage Forum Senior


Joined: Nov 23, 2005
Posts: 119
Location: Victoria, British Columbia, Canada

PostPosted: Mon Dec 05, 2005 2:30 pm    Post subject: Port Scan Reply with quote Back to top

How does one check for a port scan?
I have a router, but I don't know how to check for port scans...
Would be interesting to see if this is happening here as well...

_________________
J-Card
-------------------------------------------------
"If you can't dazzle with brilliance, baffle with bull$&!#"
Please vote on how you would rate your service! Lets see what people really think!
Canada
UK
US
View user's profile Send private message Send e-mail Visit poster's website MSN Messenger
NateHoy
Vonage Forum MVM
Vonage Forum <b>MVM</b>


Joined: Nov 01, 2005
Posts: 2257
Location: New England

PostPosted: Mon Dec 05, 2005 2:50 pm    Post subject: Re: Port Scan Reply with quote Back to top

j-card wrote:
How does one check for a port scan?
I have a router, but I don't know how to check for port scans...
Would be interesting to see if this is happening here as well...


Generally, you have to be running a router sophisticated enough to log all connection attempts. In the logs, just look for a whole list of connection attempts from the same IP address to all different ports.

_________________
Comcast Cable (3m down / 256k up) -> Linksys BEFCMU10 v2 (DOCSIS 1.0) -> WRT54G v4 ("Tomato" firmware) -> the rest of my network including a WRTP54G (Firmware: 5.01.04)
My Vonage Self-Help Guides: http://vonage.nmhoy.net
View user's profile Send private message
navydavy2001
Vonage Forum MVM
Vonage Forum <b>MVM</b>


Joined: May 26, 2005
Posts: 1125
Location: United States

PostPosted: Mon Dec 05, 2005 2:58 pm    Post subject: Reply with quote Back to top

The WRT-54G v4.20.7 Linksys Firmware seems to have a log under Admin. Kinda stripped down, but it shows incoming and outgoing. I see lots of www, and even a couple of tftp entries from when I backed up my Cisco router IOS's.

_________________
http://www.thejeffriestube.com
View user's profile Send private message Visit poster's website
Display posts from previous:   
Post new topic   Reply to topic

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum


All times are GMT - 5 Hours

Vonage Service Plans


Vonage VoIP Members
Members List Members
New oliviagw11
New Today 7
Yesterday 10
Total 99033

Who Is On Site
Visitors 108
Members 0
Total 108


Vonage VoIP Forum Members:
Login Here
Not a Member? You can Register Here
As a registered member you will have access to the VoIP Speed Test, Vonage Service Announcements and post comments in the
Vonage VoIP Forums

Vonage Stock Price
Value: 6.849
Change:   N/A
Up to 15 Minute Delay

Site Search
 






†AK and HI residents pay $29.95 shipping. ††Limited time offer. Valid for residents of the United States (&DC), 18 years or older, who open new accounts. Offer good while supplies last and only on new account activations. One kit per account/household. Offer cannot be combined with any other discounts, promotions or plans and is not applicable to past purchases. Good while supplies last. Allow up to 2 weeks for shipping. Other restrictions may apply.

1Unlimited calling and other services for all residential plans are based on normal residential, personal, non-commercial use. A combination of factors is used to determine abnormal use, including but not limited to: the number of unique numbers called, calls forwarded, minutes used and other factors. Subject to our Reasonable Use Policy and Terms of Service.

2Shipping and activation fees waived with 1-year agreement. An Early Termination Fee (with periodic pro-rated reductions) applies if service is terminated before the end of the first 12 months. Additional restrictions may apply. See Terms of Service for details.

HIGH SPEED INTERNET REQUIRED. †VALID FOR NEW LINES ONLY. RATES EXCLUDE INTERNET SERVICE, SURCHARGES, FEES AND TAXES. DEVICE MAY BE REFURBISHED. If you subscribe to plans with monthly minutes allotments, all call minutes placed from both from your home and registered ExtensionsTM phones will count toward your monthly minutes allotment. ExtensionsTM calls made from mobiles use airtime and may incur surcharges, depending on your mobile plan. Alarms, TTY and other systems may not be compatible. Vonage 911 service operates differently than traditional 911. See www.vonage.com/911 for details.

** Certain call types excluded.

www.vonage-forum.com is not an official Vonage support website & is independently operated.
All logos and trademarks are property of their respective owners. All comments are property of their posters.
All other www.vonage-forum.com content is © Copyright 2002 - 2013 by 4Sight Media LLC.

Thinking of signing up for Vonage but have questions?
Business and Residential customers can call Toll Free 24 hours a day at: 1-888-692-8074
No Vonage Promotion Code or Coupon Codes are required at www.vonage.com to receive any special,
best Vonage cheap deals, free sign up offers or discounts.

[ | | | | | ]

Vonage Forum Site Maps

Vonage | VoIP Forum | How VoIP Works | Wiring and Installation Page Two | International Rate Plans 2 | Internet Phone
Promotion | Vonage Review | VoIP | Broadband Phone | Free Month | Rebate | Vonnage | Vontage | VoIP | Phone Service
Phone | llamadas ilimitadas a Mexico | Latest News | VoIP Acronyms | Deal | Philippines Globe Phone | Site Maps

The Vonage Forum provides the Vonage sign up Best Offer Promotion Deal.
If you are considering signing up for Vonage and have found our Vonage News, Customer Reviews, Forums
& all other parts of this site useful, please use our Vonage Sign up page.


Vonage VoIP Phone Service is redefining communications by offering consumers
& small business VoIP Internet phones, an affordable alternative to traditional phone service.
The Vonage VoIP Forum Generated This Page In: 0.70 Seconds and 397 Pages In The Last 60 Seconds
The Vonage VoIP Forum