According to my router logs, someone at IP 71.154.243.231 is knocking on port 39726 every few minutes. I don't know for how long this has been going on (the router log is not very deep). I also don't know if it's TCP or UDP.
Very sketchy info that port 39726 might have something to do with VPN
- anyone know for sure?
Any central list of ports used by known malware, botnets, etc?
Virus Guy wrote in news: snipped-for-privacy@Guy.com:
Try
Below is the WhoIs info. Use the abuse address:
OrgName: AT&T Internet Services OrgID: SIS-80 Address: 2701 N. Central Expwy # 2205.14 City: Richardson StateProv: TX PostalCode: 75080 Country: US
NetRange: 71.128.0.0 - 71.159.255.255 CIDR: 71.128.0.0/11 NetName: SBCIS-SIS80 NetHandle: NET-71-128-0-0-1 Parent: NET-71-0-0-0-0 NetType: Direct Allocation NameServer: NS1.PBI.NET NameServer: NS2.PBI.NET Comment: Contact snipped-for-privacy@sbcis.sbc.com for general IP Comment: support. Contact snipped-for-privacy@pacbell.net for technical support issues. Contact Comment: snipped-for-privacy@pacbell.net for policy abuse issues. RegDate: 2005-01-11 Updated: 2007-05-25 RTechHandle: PIA2-ORG-ARIN RTechName: IPAdmin-PBI RTechPhone: +1-800-648-1626 RTechEmail: snipped-for-privacy@txmail.sbc.com
OrgAbuseHandle: ABUSE6-ARIN OrgAbuseName: Abuse - Southwestern Bell Internet OrgAbusePhone: +1-800-648-1626 OrgAbuseEmail: snipped-for-privacy@sbcglobal.net
OrgNOCHandle: SUPPO-ARIN OrgNOCName: Support - Southwestern Bell Internet Services OrgNOCPhone: 800-648-1626 OrgNOCEmail: snipped-for-privacy@swbell.net
OrgTechHandle: IPADM2-ARIN OrgTechName: IPAdmin-SBIS OrgTechPhone: 800-648-1626 OrgTechEmail: snipped-for-privacy@swbell.net
CustName: PPPoX Pool - rback18.hstntx Address: 2701 W. 15th St. Address: PMB 236 City: Plano StateProv: TX PostalCode: 75075 Country: US RegDate: 2006-02-15 Updated: 2006-02-15
NetRange: 71.154.242.0 - 71.154.243.255 CIDR: 71.154.242.0/23 NetName: SBCIS-021506074651 NetHandle: NET-71-154-242-0-1 Parent: NET-71-128-0-0-1 NetType: Reassigned Comment: RegDate: 2006-02-15 Updated: 2006-02-15
RTechHandle: PIA2-ORG-ARIN RTechName: IPAdmin-PBI RTechPhone: +1-800-648-1626 RTechEmail: snipped-for-privacy@txmail.sbc.com
OrgAbuseHandle: ABUSE6-ARIN OrgAbuseName: Abuse - Southwestern Bell Internet OrgAbusePhone: +1-800-648-1626 OrgAbuseEmail: snipped-for-privacy@sbcglobal.net
OrgNOCHandle: SUPPO-ARIN OrgNOCName: Support - Southwestern Bell Internet Services OrgNOCPhone: 800-648-1626 OrgNOCEmail: snipped-for-privacy@swbell.net
OrgTechHandle: IPADM2-ARIN OrgTechName: IPAdmin-SBIS OrgTechPhone: 800-648-1626 OrgTechEmail: snipped-for-privacy@swbell.net
# ARIN WHOIS database, last updated 2007-09-22 19:10 # Enter ? for additional hints on searching ARIN's WHOIS database.
Bob S.
Cabling-Design.com Forums website is not affiliated with any of the manufacturers or service providers discussed here. All logos and trade names are the property of their respective owners.