Should I let this NTL IP address through?

Discussion in 'Broadband' started by Sandi, Apr 4, 2005.

  1. Sandi

    Sandi Guest

    I am on NTL. What exactly is incoming IP address 80.7.172.78 trying
    to do?

    Sandi

    ------

    DETAILS:

    For about one day my Sygate firewall was trapping incoming contact
    from that IP address 80.7.172.78 and sometimes flagging the contact
    as "major" and sometimes as "minor".

    Sometimes the contact was by TCP but most times there was no protocol
    recorded. It did not try repeatedly if it doesn't get through but
    just tried once.

    I am on NTL and that IP address resolves to NTL but exactly what is
    it address trying to do? S

    descr: NTL-UK-IP-BLOCK
    origin: AS5089
    mnt-by: AS5089-MNT
    changed: 20040929
    source: RIPE

    role: NTLI Network Management Centre
    address: NTL Internet
    address: Crawley Court
    address: Winchester
     
    Sandi, Apr 4, 2005
    #1
    1. Advertisements

  2. Sandi

    Brax Guest

    80.7.172.78 traced to: cpc1-seve3-3-0-cust78.popl.cable.ntl.com
     
    Brax, Apr 4, 2005
    #2
    1. Advertisements

  3. Sandi

    buzzbomb Guest

    Do you have the port number 80.7.172.78 is trying to connect to ?
    Without that its only possible to make wild guesses as to what its
    trying to do. As to whether or not to let it through - don't!!

    B.
     
    buzzbomb, Apr 4, 2005
    #3
  4. Sandi

    Sandi Guest

    On Mon 04 Apr 2005 10:31:12, buzzbomb wrote:
    Don't have the port numbers. They are no longer in the logs.
     
    Sandi, Apr 4, 2005
    #4
  5. Sandi

    cw Guest

    Looks like just another customer machine so no point in letting it
    through.
    If everything is working fine then there's no need to open your computer
    up.
     
    cw, Apr 4, 2005
    #5
  6. Sandi

    buzzbomb Guest

    With no port number it could be anything from a deliberate malicious
    crack attempt, to a trojan on the other guys machine to some P2P app
    attempting to connect to an old cached address.

    As a general rule NEVER allow anything to connect to you computer unless
    you know what it it, where/who it comes from and are expecting it.

    B.
     
    buzzbomb, Apr 4, 2005
    #6
  7. Sandi

    David Wade Guest

    Unless you are running a P2P package such as KazaLite, Morpheus, WinMX or
    using an IP telepony service, or running some kind of server, but in general
    for web surfing, POP e-mail, usenet news etc you don't need allow in bound
    connects.
     
    David Wade, Apr 5, 2005
    #7
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.