Banda Ancha EU

Comunidad de usuarios
de fibra, móvil y ADSL

hosting en interdominios
55 lecturas y 3 respuestas
  • Cerrado

    6

    Desconexion causada por ataques externos?

    Hola,
    desde hace tiempo que sufro cortes. Mas los findes de semana, que los laborables, sobretodo el domingo.
    Yo creia que se debia a la cantidad de conexiones, que afectaban a la calidad de mi conexión.

    Pero desde hace 1 semana tengo el Comtrend y hoy mirando el log me encuentro con esto:

    ----------------------------------------------------------------------
    Jan 1 04:31:51 user alert klogd: Intrusion -> IN=ppp_8_35_1 OUT= MAC= SRC=xx.219.2.152 DST=xx.219.178.223 LEN=48 TOS=0x00 PREC=0x00 TTL=124 ID=21381 DF PROTO=TCP SPT=1478 DPT=135 WINDOW=16384 RES=0x00 SYN URGP=0
    Jan 1 04:39:33 user crit klogd: ADSL link down
    Jan 1 04:39:37 daemon crit pppd[420]: Clear IP addresses. Connection DOWN.
    Jan 1 04:39:37 daemon crit pppd[420]: Clear IP addresses. PPP connection DOWN.
    Jan 1 04:39:40 user crit klogd: ADSL G.994 training
    Jan 1 04:39:46 user crit klogd: ADSL G.992 started
    Jan 1 04:39:50 user crit klogd: ADSL G.992 channel analysis
    Jan 1 04:39:54 user crit klogd: ADSL G.992 message exchange
    Jan 1 04:39:54 user crit klogd: ADSL link up, interleaved, us=762, ds=6106
    Jan 1 04:39:58 daemon crit pppd[420]: PPP server detected.
    Jan 1 04:39:58 daemon crit pppd[420]: PPP session established.
    Jan 1 04:40:01 daemon crit pppd[420]: PPP LCP UP.
    Jan 1 04:40:01 daemon crit pppd[420]: Received valid IP address from server. Connection UP.
    Jan 1 04:40:30 user crit klogd: OAM loopback response not received on VPI/VCI 8/35.
    Jan 1 04:40:31 user crit klogd: OAM loopback response not received on VPI/VCI 8/35.
    Jan 1 04:40:46 user alert klogd: Intrusion -> IN=ppp_8_35_1 OUT= MAC= SRC=xx.46.181.57 DST=xx.219.179.119 LEN=48 TOS=0x00 PREC=0x00 TTL=114 ID=42353 DF PROTO=TCP SPT=1217 DPT=14942 WINDOW=16384 RES=0x00 SYN URGP=0
    Jan 1 04:40:49 user alert klogd: Intrusion -> IN=ppp_8_35_1 OUT= MAC= SRC=xx.46.181.57 DST=xx.219.179.119 LEN=48 TOS=0x00 PREC=0x00 TTL=114 ID=42363 DF PROTO=TCP SPT=1217 DPT=14942 WINDOW=16384 RES=0x00 SYN URGP=0
    Jan 1 04:40:55 user alert klogd: Intrusion -> IN=ppp_8_35_1 OUT= MAC= SRC=xx.46.181.57 DST=xx.219.179.119 LEN=48 TOS=0x00 PREC=0x00 TTL=114 ID=42380 DF PROTO=TCP SPT=1217 DPT=14942 WINDOW=16384 RES=0x00 SYN URGP=0
    Jan 1 04:41:44 user alert klogd: Intrusion -> IN=ppp_8_35_1 OUT= MAC= SRC=87.219.198.101 DST=xx.219.179.119 LEN=48 TOS=0x00 PREC=0x00 TTL=123 ID=61507 DF PROTO=TCP SPT=3889 DPT=135 WINDOW=16384 RES=0x00 SYN URGP=0
    Jan 1 04:42:11 user alert klogd: Intrusion -> IN=ppp_8_35_1 OUT= MAC= SRC=xx.219.81.42 DST=xx.219.179.119 LEN=48 TOS=0x00 PREC=0x00 TTL=123 ID=30942 DF PROTO=TCP SPT=3373 DPT=445 WINDOW=16384 RES=0x00 SYN URGP=0
    Jan 1 04:50:03 user crit klogd: ADSL link down
    Jan 1 04:50:05 daemon crit pppd[420]: Clear IP addresses. Connection DOWN.
    Jan 1 04:50:05 daemon crit pppd[420]: Clear IP addresses. PPP connection DOWN.
    Jan 1 04:50:09 user crit klogd: ADSL G.994 training
    Jan 1 04:50:15 user crit klogd: ADSL G.992 started
    Jan 1 04:50:19 user crit klogd: ADSL G.992 channel analysis
    Jan 1 04:50:24 user crit klogd: ADSL link up, interleaved, us=808, ds=6178
    Jan 1 04:50:27 daemon crit pppd[420]: PPP server detected.
    Jan 1 04:50:27 daemon crit pppd[420]: PPP session established.
    Jan 1 04:50:30 daemon crit pppd[420]: PPP LCP UP.
    Jan 1 04:50:30 daemon crit pppd[420]: Received valid IP address from server. Connection UP.
    Jan 1 04:50:32 user alert klogd: Intrusion -> IN=ppp_8_35_1 OUT= MAC= SRC=xx.219.198.101 DST=xx.219.179.11 LEN=48 TOS=0x00 PREC=0x00 TTL=123 ID=18412 DF PROTO=TCP SPT=4036 DPT=135 WINDOW=16384 RES=0x00 SYN URGP=0
    Jan 1 04:50:34 user alert klogd: Intrusion -> IN=ppp_8_35_1 OUT= MAC= SRC=xxx.193.92.110 DST=xx.219.179.11 LEN=48 TOS=0x00 PREC=0x00 TTL=108 ID=18950 DF PROTO=TCP SPT=6733 DPT=6881 WINDOW=65535 RES=0x00 SYN URGP=0
    Jan 1 04:50:36 user alert klogd: Intrusion -> IN=ppp_8_35_1 OUT= MAC= SRC=xx.154.189.58 DST=xx.219.179.11 LEN=48 TOS=0x00 PREC=0x00 TTL=113 ID=30185 DF PROTO=TCP SPT=3236 DPT=6881 WINDOW=65535 RES=0x00 SYN URGP=0
    Jan 1 04:50:37 user alert klogd: Intrusion -> IN=ppp_8_35_1 OUT= MAC= SRC=xxx.74.46.237 DST=xx.xxx179.11 LEN=60 TOS=0x00 PREC=0x00 TTL=49 ID=61558 PROTO=TCP SPT=1619 DPT=6881 WINDOW=5840 RES=0x00 SYN URGP=0
    Jan 1 04:50:37 user alert klogd: Intrusion -> IN=ppp_8_35_1 OUT= MAC= SRC=xxx.xxx.92.110 DST=xx.xx.179.11 LEN=48 TOS=0x00 PREC=0x00 TTL=108 ID=18961 DF PROTO=TCP SPT=6733 DPT=6881 WINDOW=65535 RES=0x00 SYN URGP=0
    Jan 1 04:50:47 user crit klogd: OAM loopback response not received on VPI/VCI 8/35.
    Jan 1 04:50:51 user crit klogd: OAM loopback response not received on VPI/VCI 8/35.
    Jan 1 04:51:21 user crit klogd: OAM loopback response not received on VPI/VCI 8/35.
    Jan 1 04:51:22 user crit klogd: OAM loopback response not received on VPI/VCI 8/35.
    Jan 1 04:51:38 user crit klogd: OAM loopback response not received on VPI/VCI 8/35.
    Jan 1 04:51:39 user crit klogd: OAM loopback response not received on VPI/VCI 8/35.
    Jan 1 04:58:44 user crit klogd: OAM loopback response not received on VPI/VCI 8/35.
    Jan 1 04:58:45 user crit klogd: OAM loopback response not received on VPI/VCI 8/35.
    Jan 1 04:59:33 user crit klogd: OAM loopback response not received on VPI/VCI 8/35.
    Jan 1 04:59:34 user crit klogd: OAM loopback response not received on VPI/VCI 8/35.
    Jan 1 05:00:35 user alert klogd: Intrusion -> IN=ppp_8_35_1 OUT= MAC= SRC=xx.10.1xx.236 DST=xx.xxx.xxx.11 LEN=48 TOS=0x00 PREC=0x00 TTL=106 ID=14265 DF PROTO=TCP SPT=4336 DPT=6881 WINDOW=64800 RES=0x00 SYN URGP=0

    ----------------------------------------------------------------------

    Podria, entonces, ser la causa de mis desconexiones atakes externos?

    Hay alguna solucion? No he encontrado el firewall de router...

    Asias

    Este tema es antiguo y puede contener información obsoleta. Abre un nuevo tema para publicar tu mensaje.
    1
      • Cerrado

        6

        Sip. Y sigue igual... De todas maneras estoy esperando a la…

        Sip.
        Y sigue igual...

        De todas maneras estoy esperando a la prieba de fuego que sera mañana domingo.
        Los domingos son fatales para mi conexion.. a ver como va...

    • Cerrado

      6

      Noooo... http://www.bandaancha.st/foros.php?temid=718921…

      Noooo...

      http://www.bandaancha.st/foros.php?temid=718921
      http://www.bandaancha.st/foros.php?temid=801512
      http://www.bandaancha.st/foros.php?temid=876892
      http://www.bandaancha.st/foros.php?temid=890387
      http://www.bandaancha.st/foros.php?temid=913623
      http://www.bandaancha.st/foros.php?temid=927948
      http://www.bandaancha.st/foros.php?temid=954939
      http://www.bandaancha.st/foros.php?temid=958662

      los cortes son debidos a factores fisicos de tu linea, ruido, interferencias, cables mal conectados, etc...