Menu
Reply
  • 69
  • 0
  • 3
chaz6
Dialled in
363 Views
Message 1 of 10
Flag for a moderator

Virgin security contact information

I have discovered a security issue in a Virgin Media system. Please provide me with the contact details of your security team. I will not discuss this on the forum.
0 Kudos
Reply

Helpful Answers
  • 12.71K
  • 1.62K
  • 3.74K
Superuser
Superuser
701 Views
Message 2 of 10
Flag for a moderator
Helpful Answer

Re: Virgin security contact information

Hi chaz6,

You can use the Netreport page to contact the Security Team, link: http://netreport.virginmedia.com/netreport/?branding=virginmedia - put it through as a 'security enquiry'

- - - - - -
Any opinions expressed by myself are entirely my own and do not represent Virgin Media in any way.

All Replies
  • 12.71K
  • 1.62K
  • 3.74K
Superuser
Superuser
702 Views
Message 2 of 10
Flag for a moderator
Helpful Answer

Re: Virgin security contact information

Hi chaz6,

You can use the Netreport page to contact the Security Team, link: http://netreport.virginmedia.com/netreport/?branding=virginmedia - put it through as a 'security enquiry'

- - - - - -
Any opinions expressed by myself are entirely my own and do not represent Virgin Media in any way.
  • 69
  • 0
  • 3
chaz6
Dialled in
355 Views
Message 3 of 10
Flag for a moderator

Re: Virgin security contact information

Great thank you.
0 Kudos
Reply
  • 4
  • 0
  • 1
MrWilq
Tuning in
258 Views
Message 4 of 10
Flag for a moderator

Re: Virgin security contact information

Hi there I sent reports about 5 times and nobody respond  and still someone attack my router . Any idea ?

0 Kudos
Reply
  • 12.71K
  • 1.62K
  • 3.74K
Superuser
Superuser
252 Views
Message 5 of 10
Flag for a moderator

Re: Virgin security contact information

If the attacker is on the VM network then VM would deal with them, but for attacks sourced outside of the network, they generally don't get involved. If you have the IP address of the attacker (and it is not someone on the VM network) have you looked up which ISP it is with and filed a report with them about it?

@ModTeam Can you look into what happened with the reports MrWilq filed in and had no reply back about?

- - - - - -
Any opinions expressed by myself are entirely my own and do not represent Virgin Media in any way.
0 Kudos
Reply
  • 4
  • 0
  • 1
MrWilq
Tuning in
245 Views
Message 6 of 10
Flag for a moderator

Re: Virgin security contact information

Hi there thx for quick reply.
This log is from today
Thu 22 Dec
09:37 GMT
attack ip 62.253.131.62
port 68
count 1
description DHCP WAN IP - removed
after this computer has not network when I restart router everything back as normal .

Usually it is every 2 days

 

[MOD EDIT: Personal and private information has been removed from this post. Please do not post personal or private information in your public posts. Please review the Forum Guidelines]

0 Kudos
Reply
  • 12.71K
  • 1.62K
  • 3.74K
Superuser
Superuser
226 Views
Message 7 of 10
Flag for a moderator

Re: Virgin security contact information

Port 68 is relates to DHCP which is part of the process of your connection getting online and the IP address in question is a VM one. Port 68 from what I can see is normally used client side Windows etc wise, so it shouldn't be seeing any traffic externally normally. But the log sample does suggest that your router may be tripping on general VM DHCP lease check etc traffic which happens fairly often.

The question there would be what is going wrong (can you provide the upstream / downstream / network log) from your hub? and are all your devices affected? Or just one?

- - - - - -
Any opinions expressed by myself are entirely my own and do not represent Virgin Media in any way.
0 Kudos
Reply
  • 4
  • 0
  • 1
MrWilq
Tuning in
223 Views
Message 8 of 10
Flag for a moderator

Re: Virgin security contact information

Hi this is network log

Date
Time
Error Number
Error Description


22/12/2016
12:22:04 GMT
66050310
Auth Success - Web login successful.


22/12/2016
12:21:52 GMT
66050310
Auth Success - Web login successful.


22/12/2016
11:25:43 GMT
66050400
E-Mail - E-Mail Send Failed.


22/12/2016
11:25:31 GMT
66050310
Auth Success - Web login successful.


22/12/2016
09:57:28 GMT
66050310
Auth Success - Web login successful.


22/12/2016
09:57:16 GMT
66050300
Auth Fail - Web login failed.


22/12/2016
09:37:51 GMT
68010302
DHCP WAN IP - My IP


22/12/2016
09:36:50 GMT
68000407
TOD established


Time Not Established
Time Not Established
84000510
Downstream Locked Successfully


22/12/2016
09:28:39 GMT
66050310
Auth Success - Web login successful.


22/12/2016
09:12:10 GMT
66050310
Auth Success - Web login successful.


22/12/2016
09:12:02 GMT
66050400
E-Mail - E-Mail Send Failed.


22/12/2016
09:11:53 GMT
66050310
Auth Success - Web login successful.


22/12/2016
04:04:13 GMT
66050400
E-Mail - E-Mail Send Failed.


22/12/2016
04:04:02 GMT
82000200
No Ranging Response received - T3 time-out


21/12/2016
21:30:49 GMT
66050310
Auth Success - Web login successful.


21/12/2016
21:30:45 GMT
66050400
E-Mail - E-Mail Send Failed.


21/12/2016
21:30:33 GMT
90000200
CSFR Detect - Expired Content Submitted ; LAN Interface


21/12/2016
17:31:25 GMT
66050310
Auth Success - Web login successful.


21/12/2016
17:31:12 GMT
66050400
E-Mail - E-Mail Send Failed.

 

Just one device is affected .

Thank you

  • 12.71K
  • 1.62K
  • 3.74K
Superuser
Superuser
221 Views
Message 9 of 10
Flag for a moderator

Re: Virgin security contact information

OK then the log you shared earlier is from the problem device? or from a WiFi router you have attached to your hub?

- - - - - -
Any opinions expressed by myself are entirely my own and do not represent Virgin Media in any way.
0 Kudos
Reply
  • 4
  • 0
  • 1
MrWilq
Tuning in
216 Views
Message 10 of 10
Flag for a moderator

Re: Virgin security contact information

Every logs are from WiFi router and Firewall log showing attack from outside. I know which IP which port and how many count sometimes 1 and sometimes 2 times.
http://www.ipgeek.net/62.253.131.62

1 minute ago

Firewall log

Date
Time
Source IP
Target Port Number
Count
Event Description


Thu 22 Dec
13:45 GMT
62.253.131.62
68
1
DHCP WAN IP - My IP

My router was frozen and I need reboot

How I can block this IP ?

0 Kudos
Reply