Why do two Virgin Media IP addresses keep trying to access my network (82.16.51.71 & 80.1.16.237)

[hooper35]

I don't know if these are other VM users trying to access my network.

Why would unsolicited attempts to access my network be happening?

Should I block them?

[WelshGasman]

Where are you seeing this?

[hooper35]

On my firewall. I use the VM box as a modem in front of my own router.

[Adduxi]

Can you post your Network log from the Hub as well please.

[hooper35]

No sure the logs would help with this. It is unsolicited external traffic. 

Is there a list of valid VM boxes that would be doing this - validly? 

[WelshGasman]

I'd block them, if you have that option.

Use nslookup to see where they are?

[Tudor]

I ave lots of people all over the world trying to access my machine, you get them all the time. These are todays:

Dec 5 01:50:39 kernel: [2883697.535131] ALIEN BLOCK: IN=eth9 src=80.82.65.247 TTL=246 ID=54321 PROTO=TCP SPT=42694 DPT=3535
Dec 5 02:55:56 kernel: [2887613.992584] ALIEN BLOCK: IN=eth9 src=80.82.65.247 TTL=247 ID=54321 PROTO=TCP SPT=57916 DPT=3636
Dec 5 03:50:10 kernel: [2890868.641971] ALIEN BLOCK: IN=eth9 src=185.128.41.50 TTL=244 ID=58848 PROTO=TCP SPT=55741 DPT=8080 WINDOW=1024 RES=0x00 SYN URGP=0
Dec 5 05:15:02 kernel: [2895960.499080] ALIEN BLOCK: IN=eth9 src=80.82.65.247 TTL=248 ID=54321 PROTO=TCP SPT=55213 DPT=3939
Dec 5 08:03:43 kernel: [2906081.647095] ALIEN BLOCK: IN=eth9 src=80.82.65.247 TTL=247 ID=54321 PROTO=TCP SPT=45324 DPT=4343
Dec 5 09:03:57 kernel: [2909695.093582] ALIEN BLOCK: IN=eth9 src=80.82.65.247 TTL=248 ID=54321 PROTO=TCP SPT=60766 DPT=4545
Dec 5 10:19:00 kernel: [2914198.254049] ALIEN BLOCK: IN=eth9 src=80.82.65.247 TTL=247 ID=54321 PROTO=TCP SPT=47024 DPT=4747

All blocked.

[hooper35]

I can block them.

Does or should VM care if users are scanning other's networks? The word nefarious comes to mind! 

[hooper35]

I too have a very long list of ip addresses that do that - I check them against abuseIPDB.com. However, I am focusing in on the VM ones because I don't want to block something that may be valid for VM to do.  

Does VM watch this forum? If they do, maybe someone from VM could comment? 

[Ashleigh_C]

Hi there @hooper35

Thank you so much for your post and I am so sorry to hear that you have been effected by this issue! 

Are you able to upload your Hub logs a s requested before to give us a better idea of what is going on here.

Thank you.