Estoy pegandome con el servicio tecnico, se me ha vuelto a cortar con ellos, pero me dicen que si no se cortan reiteradamente no me pueden abrir incidendia.
Alucinante.
Te pongo el syslog, con el router en el PTR.
Gracias de nuevo.
Date/Time | Facility | Severity | Message |
Sep 19 18:45:19 | user | alert | kernel: Intrusion -> IN=ppp_8_35_2 OUT= MAC= SRC=82.158.38.216 DST=95.22.44.40 LEN=48 TOS=0x00 PREC=0x00 TTL=253 ID=5781 DF PROTO=TCP SPT=60189 DPT=16706 WINDOW=8192 RES=0x00 SYN URGP=0 |
Sep 19 18:45:22 | user | alert | kernel: Intrusion -> IN=ppp_8_35_2 OUT= MAC= SRC=82.158.38.216 DST=95.22.44.40 LEN=48 TOS=0x00 PREC=0x00 TTL=253 ID=6270 DF PROTO=TCP SPT=60189 DPT=16706 WINDOW=8192 RES=0x00 SYN URGP=0 |
Sep 19 18:45:28 | user | alert | kernel: Intrusion -> IN=ppp_8_35_2 OUT= MAC= SRC=82.158.38.216 DST=95.22.44.40 LEN=48 TOS=0x00 PREC=0x00 TTL=253 ID=7299 DF PROTO=TCP SPT=60189 DPT=16706 WINDOW=8192 RES=0x00 SYN URGP=0 |
Sep 19 18:47:54 | user | alert | kernel: Intrusion -> IN=ppp_8_35_2 OUT= MAC= SRC=86.122.212.147 DST=95.22.44.40 LEN=52 TOS=0x00 PREC=0x00 TTL=253 ID=42309 DF PROTO=TCP SPT=3341 DPT=445 WINDOW=65535 RES=0x00 SYN URGP=0 |
Sep 19 18:47:56 | user | alert | kernel: Intrusion -> IN=ppp_8_35_2 OUT= MAC= SRC=86.122.212.147 DST=95.22.44.40 LEN=52 TOS=0x00 PREC=0x00 TTL=253 ID=42482 DF PROTO=TCP SPT=3341 DPT=445 WINDOW=65535 RES=0x00 SYN URGP=0 |
Sep 19 18:56:35 | user | alert | kernel: Intrusion -> IN=ppp_8_35_2 OUT= MAC= SRC=75.191.136.93 DST=95.22.44.40 LEN=48 TOS=0x00 PREC=0x00 TTL=253 ID=5902 DF PROTO=TCP SPT=1232 DPT=445 WINDOW=65535 RES=0x00 SYN URGP=0 |
Sep 19 19:05:27 | user | alert | kernel: Intrusion -> IN=ppp_8_35_2 OUT= MAC= SRC=85.120.93.124 DST=95.22.44.40 LEN=48 TOS=0x00 PREC=0x00 TTL=253 ID=28713 DF PROTO=TCP SPT=4136 DPT=445 WINDOW=65535 RES=0x00 SYN URGP=0 |
Sep 19 19:20:00 | user | alert | kernel: Intrusion -> IN=ppp_8_35_2 OUT= MAC= SRC=46.73.133.212 DST=95.22.44.40 LEN=48 TOS=0x00 PREC=0x00 TTL=253 ID=3552 DF PROTO=TCP SPT=1492 DPT=445 WINDOW=65535 RES=0x00 SYN URGP=0 |
Sep 19 19:27:21 | user | alert | kernel: Intrusion -> IN=ppp_8_35_2 OUT= MAC= SRC=92.40.21.221 DST=95.22.44.40 LEN=52 TOS=0x00 PREC=0x00 TTL=253 ID=5916 DF PROTO=TCP SPT=38643 DPT=445 WINDOW=65535 RES=0x00 SYN URGP=0 |
Sep 19 19:38:39 | user | alert | kernel: Intrusion -> IN=ppp_8_35_2 OUT= MAC= SRC=93.156.194.183 DST=95.22.44.40 LEN=48 TOS=0x00 PREC=0x00 TTL=253 ID=9955 DF PROTO=TCP SPT=65336 DPT=16706 WINDOW=8192 RES=0x00 SYN URGP=0 |
Sep 19 19:46:30 | user | alert | kernel: Intrusion -> IN=ppp_8_35_2 OUT= MAC= SRC=88.223.37.50 DST=95.22.44.40 LEN=48 TOS=0x00 PREC=0x00 TTL=253 ID=53066 DF PROTO=TCP SPT=2851 DPT=445 WINDOW=65535 RES=0x00 SYN URGP=0 |
Sep 19 19:47:55 | user | crit | kernel: ADSL link down |
Sep 19 19:47:56 | daemon | crit | pppd[543]: Clear IP addresses. Connection DOWN. |
Sep 19 19:47:56 | daemon | crit | pppd[543]: Clear IP addresses. PPP connection DOWN. |
Sep 19 19:47:58 | user | crit | kernel: ADSL G.994 training |
Sep 19 19:48:08 | user | crit | kernel: ADSL G.992 started |
Sep 19 19:48:13 | user | crit | kernel: ADSL G.992 channel analysis |
Sep 19 19:48:15 | user | crit | kernel: ADSL link up, interleaved, us=914, ds=10938 |
Sep 19 19:48:58 | daemon | crit | pppd[543]: PPP server detected. |
Sep 19 19:48:58 | daemon | crit | pppd[543]: PPP session established. |
Sep 19 19:49:01 | daemon | crit | pppd[543]: PPP LCP UP. |
Sep 19 19:49:02 | daemon | crit | pppd[543]: Received valid IP address from server. Connection UP. |
Sep 19 19:50:35 | user | alert | kernel: Intrusion -> IN=ppp_8_35_2 OUT= MAC= SRC=78.130.202.4 DST=95.22.44.231 LEN=48 TOS=0x00 PREC=0x00 TTL=253 ID=28008 DF PROTO=TCP SPT=2824 DPT=445 WINDOW=65535 RES=0x00 SYN URGP=0 |
Sep 19 19:50:38 | user | alert | kernel: Intrusion -> IN=ppp_8_35_2 OUT= MAC= SRC=78.130.202.4 DST=95.22.44.231 LEN=48 TOS=0x00 PREC=0x00 TTL=253 ID=31932 DF PROTO=TCP SPT=2824 DPT=445 WINDOW=65535 RES=0x00 SYN URGP=0 |
Sep 19 19:52:50 | user | alert | kernel: Intrusion -> IN=ppp_8_35_2 OUT= MAC= SRC=221.192.199.46 DST=95.22.44.231 LEN=40 TOS=0x00 PREC=0x00 TTL=253 ID=256 DF PROTO=TCP SPT=12200 DPT=8085 WINDOW=8192 RES=0x00 SYN URGP=0 |
Sep 19 19:57:16 | user | crit | kernel: OAM loopback response not received on VPI/VCI 8/35. |
Sep 19 19:57:17 | user | crit | kernel: OAM loopback response not received on VPI/VCI 8/35. |
Sep 19 19:57:30 | user | crit | kernel: OAM loopback response not received on VPI/VCI 8/35. |
Sep 19 19:57:31 | user | crit | kernel: OAM loopback response not received on VPI/VCI 8/35. |