BandaAncha.eu

  • 🔍 en 📰 artículos ⏎
  • 🔍 en 💬 foros ⏎
  • 🔍 en 👇 este 💬 foro ⏎
  • 🔍 en 👇 este 💬 tema ⏎
Regístrate Regístrate Identifícate Identifícate
ADSL

Desconexion causada por ataques externos?

koke

Hola,
desde hace tiempo que sufro cortes. Mas los findes de semana, que los laborables, sobretodo el domingo.
Yo creia que se debia a la cantidad de conexiones, que afectaban a la calidad de mi conexión.

Pero desde hace 1 semana tengo el Comtrend y hoy mirando el log me encuentro con esto:

----------------------------------------------------------------------
Jan 1 04:31:51 user alert klogd: Intrusion -> IN=ppp_8_35_1 OUT= MAC= SRC=xx.219.2.152 DST=xx.219.178.223 LEN=48 TOS=0x00 PREC=0x00 TTL=124 ID=21381 DF PROTO=TCP SPT=1478 DPT=135 WINDOW=16384 RES=0x00 SYN URGP=0
Jan 1 04:39:33 user crit klogd: ADSL link down
Jan 1 04:39:37 daemon crit pppd[420]: Clear IP addresses. Connection DOWN.
Jan 1 04:39:37 daemon crit pppd[420]: Clear IP addresses. PPP connection DOWN.
Jan 1 04:39:40 user crit klogd: ADSL G.994 training
Jan 1 04:39:46 user crit klogd: ADSL G.992 started
Jan 1 04:39:50 user crit klogd: ADSL G.992 channel analysis
Jan 1 04:39:54 user crit klogd: ADSL G.992 message exchange
Jan 1 04:39:54 user crit klogd: ADSL link up, interleaved, us=762, ds=6106
Jan 1 04:39:58 daemon crit pppd[420]: PPP server detected.
Jan 1 04:39:58 daemon crit pppd[420]: PPP session established.
Jan 1 04:40:01 daemon crit pppd[420]: PPP LCP UP.
Jan 1 04:40:01 daemon crit pppd[420]: Received valid IP address from server. Connection UP.
Jan 1 04:40:30 user crit klogd: OAM loopback response not received on VPI/VCI 8/35.
Jan 1 04:40:31 user crit klogd: OAM loopback response not received on VPI/VCI 8/35.
Jan 1 04:40:46 user alert klogd: Intrusion -> IN=ppp_8_35_1 OUT= MAC= SRC=xx.46.181.57 DST=xx.219.179.119 LEN=48 TOS=0x00 PREC=0x00 TTL=114 ID=42353 DF PROTO=TCP SPT=1217 DPT=14942 WINDOW=16384 RES=0x00 SYN URGP=0
Jan 1 04:40:49 user alert klogd: Intrusion -> IN=ppp_8_35_1 OUT= MAC= SRC=xx.46.181.57 DST=xx.219.179.119 LEN=48 TOS=0x00 PREC=0x00 TTL=114 ID=42363 DF PROTO=TCP SPT=1217 DPT=14942 WINDOW=16384 RES=0x00 SYN URGP=0
Jan 1 04:40:55 user alert klogd: Intrusion -> IN=ppp_8_35_1 OUT= MAC= SRC=xx.46.181.57 DST=xx.219.179.119 LEN=48 TOS=0x00 PREC=0x00 TTL=114 ID=42380 DF PROTO=TCP SPT=1217 DPT=14942 WINDOW=16384 RES=0x00 SYN URGP=0
Jan 1 04:41:44 user alert klogd: Intrusion -> IN=ppp_8_35_1 OUT= MAC= SRC=87.219.198.101 DST=xx.219.179.119 LEN=48 TOS=0x00 PREC=0x00 TTL=123 ID=61507 DF PROTO=TCP SPT=3889 DPT=135 WINDOW=16384 RES=0x00 SYN URGP=0
Jan 1 04:42:11 user alert klogd: Intrusion -> IN=ppp_8_35_1 OUT= MAC= SRC=xx.219.81.42 DST=xx.219.179.119 LEN=48 TOS=0x00 PREC=0x00 TTL=123 ID=30942 DF PROTO=TCP SPT=3373 DPT=445 WINDOW=16384 RES=0x00 SYN URGP=0
Jan 1 04:50:03 user crit klogd: ADSL link down
Jan 1 04:50:05 daemon crit pppd[420]: Clear IP addresses. Connection DOWN.
Jan 1 04:50:05 daemon crit pppd[420]: Clear IP addresses. PPP connection DOWN.
Jan 1 04:50:09 user crit klogd: ADSL G.994 training
Jan 1 04:50:15 user crit klogd: ADSL G.992 started
Jan 1 04:50:19 user crit klogd: ADSL G.992 channel analysis
Jan 1 04:50:24 user crit klogd: ADSL link up, interleaved, us=808, ds=6178
Jan 1 04:50:27 daemon crit pppd[420]: PPP server detected.
Jan 1 04:50:27 daemon crit pppd[420]: PPP session established.
Jan 1 04:50:30 daemon crit pppd[420]: PPP LCP UP.
Jan 1 04:50:30 daemon crit pppd[420]: Received valid IP address from server. Connection UP.
Jan 1 04:50:32 user alert klogd: Intrusion -> IN=ppp_8_35_1 OUT= MAC= SRC=xx.219.198.101 DST=xx.219.179.11 LEN=48 TOS=0x00 PREC=0x00 TTL=123 ID=18412 DF PROTO=TCP SPT=4036 DPT=135 WINDOW=16384 RES=0x00 SYN URGP=0
Jan 1 04:50:34 user alert klogd: Intrusion -> IN=ppp_8_35_1 OUT= MAC= SRC=xxx.193.92.110 DST=xx.219.179.11 LEN=48 TOS=0x00 PREC=0x00 TTL=108 ID=18950 DF PROTO=TCP SPT=6733 DPT=6881 WINDOW=65535 RES=0x00 SYN URGP=0
Jan 1 04:50:36 user alert klogd: Intrusion -> IN=ppp_8_35_1 OUT= MAC= SRC=xx.154.189.58 DST=xx.219.179.11 LEN=48 TOS=0x00 PREC=0x00 TTL=113 ID=30185 DF PROTO=TCP SPT=3236 DPT=6881 WINDOW=65535 RES=0x00 SYN URGP=0
Jan 1 04:50:37 user alert klogd: Intrusion -> IN=ppp_8_35_1 OUT= MAC= SRC=xxx.74.46.237 DST=xx.xxx179.11 LEN=60 TOS=0x00 PREC=0x00 TTL=49 ID=61558 PROTO=TCP SPT=1619 DPT=6881 WINDOW=5840 RES=0x00 SYN URGP=0
Jan 1 04:50:37 user alert klogd: Intrusion -> IN=ppp_8_35_1 OUT= MAC= SRC=xxx.xxx.92.110 DST=xx.xx.179.11 LEN=48 TOS=0x00 PREC=0x00 TTL=108 ID=18961 DF PROTO=TCP SPT=6733 DPT=6881 WINDOW=65535 RES=0x00 SYN URGP=0
Jan 1 04:50:47 user crit klogd: OAM loopback response not received on VPI/VCI 8/35.
Jan 1 04:50:51 user crit klogd: OAM loopback response not received on VPI/VCI 8/35.
Jan 1 04:51:21 user crit klogd: OAM loopback response not received on VPI/VCI 8/35.
Jan 1 04:51:22 user crit klogd: OAM loopback response not received on VPI/VCI 8/35.
Jan 1 04:51:38 user crit klogd: OAM loopback response not received on VPI/VCI 8/35.
Jan 1 04:51:39 user crit klogd: OAM loopback response not received on VPI/VCI 8/35.
Jan 1 04:58:44 user crit klogd: OAM loopback response not received on VPI/VCI 8/35.
Jan 1 04:58:45 user crit klogd: OAM loopback response not received on VPI/VCI 8/35.
Jan 1 04:59:33 user crit klogd: OAM loopback response not received on VPI/VCI 8/35.
Jan 1 04:59:34 user crit klogd: OAM loopback response not received on VPI/VCI 8/35.
Jan 1 05:00:35 user alert klogd: Intrusion -> IN=ppp_8_35_1 OUT= MAC= SRC=xx.10.1xx.236 DST=xx.xxx.xxx.11 LEN=48 TOS=0x00 PREC=0x00 TTL=106 ID=14265 DF PROTO=TCP SPT=4336 DPT=6881 WINDOW=64800 RES=0x00 SYN URGP=0

----------------------------------------------------------------------

Podria, entonces, ser la causa de mis desconexiones atakes externos?

Hay alguna solucion? No he encontrado el firewall de router...

Asias

Este tema está cerrado a nuevas respuestas. Abre un nuevo tema para retomar la conversación.
loko39

Hicistes lo del splitter?

🗨️ 1
koke

Sip.
Y sigue igual...

De todas maneras estoy esperando a la prieba de fuego que sera mañana domingo.
Los domingos son fatales para mi conexion.. a ver como va...