Internet issues??

Iceman · 22 Aug 2012 at 21:28

Anyone any good at understanding router logs? Sagem router with Sky.
Internet has stages where it keeps losing its connection. This happened minutes ago

Aug 22 21:16:33 (none) user.alert kernel: Intrusion -> IN=atm0 OUT= MAC=4c:17:eb:90:e7:56:18:80:f5:f9:d4:28:08:00 SRC=95.211.178.104 DST=176.25.209.74 LEN=60 TOS=0x00 PREC=0x00 TTL=59 ID=27678 DF PROTO=TCP SPT=57795 DPT=8080 WINDOW=14600 RES=0x00 SYN URGP=0 MARK=0x8000000
Aug 22 21:24:21 (none) user.crit kernel: Line 0: ADSL link down
Aug 22 21:24:22 (none) user.crit kernel: Line 0: xDSL G.994 training
Aug 22 21:24:38 (none) user.crit kernel: Line 0: ADSL G.992 started
Aug 22 21:24:42 (none) user.crit kernel: Line 0: ADSL G.992 channel analysis
Aug 22 21:24:46 (none) user.crit kernel: Line 0: ADSL link down
Aug 22 21:24:48 (none) user.crit kernel: Line 0: xDSL G.994 training
Aug 22 21:25:03 (none) user.crit kernel: Line 0: ADSL G.992 started
Aug 22 21:25:08 (none) user.crit kernel: Line 0: ADSL G.992 channel analysis
Aug 22 21:25:13 (none) user.crit kernel: Line 0: ADSL G.992 message exchange
Aug 22 21:25:14 (none) user.crit kernel: Line 0: ADSL link down
Aug 22 21:25:15 (none) user.crit kernel: Line 0: xDSL G.994 training
Aug 22 21:25:30 (none) user.crit kernel: Line 0: ADSL G.992 started
Aug 22 21:25:35 (none) user.crit kernel: Line 0: ADSL G.992 channel analysis
Aug 22 21:25:39 (none) user.crit kernel: Line 0: ADSL G.992 message exchange
Aug 22 21:25:39 (none) user.crit kernel: Line 0: ADSL link up, Bearer 0, us=606, ds=3680

ANyone any idea what the cause could be?

PistolPete · 22 Aug 2012 at 21:55

You resynced - my guess is your SNR margin was too low.

Iceman · 22 Aug 2012 at 22:00

Any reason why it keeps doing this?

Sparx · 22 Aug 2012 at 22:44

The line wasn't stable at the time with a lower SNR margin, so it disconnected and re-synced probably with a higher SNR and lower downstream sync rate.

Iceman · 22 Aug 2012 at 23:26

Is there anything to do to cure this? Its happening about 10 to 20 times a night.

Sparx · 23 Aug 2012 at 21:40

Can you copy paste the line stats from your router? Downstream/upstream rate, SNR, attenuation, etc.

Also what router are you using, firmware version, etc? Do you use custom firmware or do you use the standard firmware that came with the router?

For it to happen 10-20x a night is very unusual and I would say it sounds like a faulty line. Do you have any issues with voice calls on your telephone? Any noise, hissing, static, cutting out, etc?

PistolPete · 23 Aug 2012 at 21:58

Surely if the lines resyncing that many times a night the DLM would have clamped profile right down by now.

Either wya, something is not right for it to be flapping so much

Iceman · 24 Aug 2012 at 19:45

Using a Sagem F@ST2504n router. ADSL firmware version is whatever came with it, A2pD030n.d23b. Its with Sky so pretty locked into it as far as i know.
Not noticed any issues with phone, but i hardly use it.
Could my PS3 have anything to do with it? PS3 is wired into one of the Ethernet ports.

Stats.

Got bt coming out again tomorrow (if they turn up this time) No one can seem to fix this issue

Iceman · 24 Aug 2012 at 19:48

Noticed im getting a lot of Intrusions throughout the day too??

Aug 24 07:56:34 (none) user.alert kernel: Intrusion -> IN=atm0 OUT= MAC=4c:17:eb:90:e7:56:18:80:f5:f9:d4:28:08:00 SRC=123.72.9.172 DST=176.25.209.74 LEN=48 TOS=0x00 PREC=0x00 TTL=113 ID=11524 DF PROTO=TCP SPT=4460 DPT=445 WINDOW=65535 RES=0x00 SYN URGP=0 MARK=0x8000000
Aug 24 07:56:37 (none) user.alert kernel: Intrusion -> IN=atm0 OUT= MAC=4c:17:eb:90:e7:56:18:80:f5:f9:d4:28:08:00 SRC=123.72.9.172 DST=176.25.209.74 LEN=48 TOS=0x00 PREC=0x00 TTL=113 ID=11681 DF PROTO=TCP SPT=4460 DPT=445 WINDOW=65535 RES=0x00 SYN URGP=0 MARK=0x8000000
Aug 24 07:57:59 (none) user.alert kernel: Intrusion -> IN=atm0 OUT= MAC=4c:17:eb:90:e7:56:18:80:f5:f9:d4:28:08:00 SRC=134.224.90.148 DST=176.25.209.74 LEN=48 TOS=0x00 PREC=0x00 TTL=110 ID=40968 PROTO=TCP SPT=27768 DPT=22 WINDOW=65535 RES=0x00 SYN URGP=0 MARK=0x8000000
Aug 24 08:02:33 (none) user.alert kernel: Intrusion -> IN=atm0 OUT= MAC=4c:17:eb:90:e7:56:18:80:f5:f9:d4:28:08:00 SRC=207.255.4.99 DST=176.25.209.74 LEN=52 TOS=0x00 PREC=0x00 TTL=50 ID=9496 DF PROTO=TCP SPT=4935 DPT=3389 WINDOW=65535 RES=0x00 SYN URGP=0 MARK=0x8000000
Aug 24 08:14:56 (none) user.alert kernel: Intrusion -> IN=atm0 OUT= MAC=4c:17:eb:90:e7:56:18:80:f5:f9:d4:28:08:00 SRC=12.94.236.170 DST=176.25.209.74 LEN=48 TOS=0x00 PREC=0x00 TTL=117 ID=14173 DF PROTO=TCP SPT=2801 DPT=445 WINDOW=16384 RES=0x00 SYN URGP=0 MARK=0x8000000
Aug 24 08:14:59 (none) user.alert kernel: Intrusion -> IN=atm0 OUT= MAC=4c:17:eb:90:e7:56:18:80:f5:f9:d4:28:08:00 SRC=12.94.236.170 DST=176.25.209.74 LEN=48 TOS=0x00 PREC=0x00 TTL=117 ID=14384 DF PROTO=TCP SPT=2801 DPT=445 WINDOW=16384 RES=0x00 SYN URGP=0 MARK=0x8000000
Aug 24 08:30:46 (none) user.alert kernel: Intrusion -> IN=atm0 OUT= MAC=4c:17:eb:90:e7:56:18:80:f5:f9:d4:28:08:00 SRC=89.137.222.93 DST=176.25.209.74 LEN=48 TOS=0x00 PREC=0x00 TTL=115 ID=11059 DF PROTO=TCP SPT=56048 DPT=445 WINDOW=65535 RES=0x00 SYN URGP=0 MARK=0x8000000
Aug 24 08:30:49 (none) user.alert kernel: Intrusion -> IN=atm0 OUT= MAC=4c:17:eb:90:e7:56:18:80:f5:f9:d4:28:08:00 SRC=89.137.222.93 DST=176.25.209.74 LEN=48 TOS=0x00 PREC=0x00 TTL=115 ID=11564 DF PROTO=TCP SPT=56048 DPT=445 WINDOW=65535 RES=0x00 SYN URGP=0 MARK=0x8000000
Aug 24 08:56:16 (none) user.alert kernel: Intrusion -> IN=atm0 OUT= MAC=4c:17:eb:90:e7:56:18:80:f5:f9:d4:28:08:00 SRC=95.211.178.104 DST=176.25.209.74 LEN=60 TOS=0x00 PREC=0x00 TTL=59 ID=14277 DF PROTO=TCP SPT=45150 DPT=3128 WINDOW=14600 RES=0x00 SYN URGP=0 MARK=0x8000000
Aug 24 08:57:09 (none) user.alert kernel: Intrusion -> IN=atm0 OUT= MAC=4c:17:eb:90:e7:56:18:80:f5:f9:d4:28:08:00 SRC=188.254.156.215 DST=176.25.209.74 LEN=52 TOS=0x00 PREC=0x00 TTL=116 ID=41556 DF PROTO=TCP SPT=3661 DPT=445 WINDOW=65535 RES=0x00 SYN URGP=0 MARK=0x8000000
Aug 24 08:57:12 (none) user.alert kernel: Intrusion -> IN=atm0 OUT= MAC=4c:17:eb:90:e7:56:18:80:f5:f9:d4:28:08:00 SRC=188.254.156.215 DST=176.25.209.74 LEN=52 TOS=0x00 PREC=0x00 TTL=116 ID=41798 DF PROTO=TCP SPT=3661 DPT=445 WINDOW=65535 RES=0x00 SYN URGP=0 MARK=0x8000000
Aug 24 09:16:57 (none) user.alert kernel: Intrusion -> IN=atm0 OUT= MAC=4c:17:eb:90:e7:56:18:80:f5:f9:d4:28:08:00 SRC=89.47.243.91 DST=176.25.209.74 LEN=48 TOS=0x00 PREC=0x00 TTL=115 ID=784 DF PROTO=TCP SPT=1914 DPT=445 WINDOW=65535 RES=0x00 SYN URGP=0 MARK=0x8000000
Aug 24 09:17:00 (none) user.alert kernel: Intrusion -> IN=atm0 OUT= MAC=4c:17:eb:90:e7:56:18:80:f5:f9:d4:28:08:00 SRC=89.47.243.91 DST=176.25.209.74 LEN=48 TOS=0x00 PREC=0x00 TTL=115 ID=1013 DF PROTO=TCP SPT=1914 DPT=445 WINDOW=65535 RES=0x00 SYN URGP=0 MARK=0x8000000
Aug 24 09:45:03 (none) user.alert kernel: Intrusion -> IN=atm0 OUT= MAC=4c:17:eb:90:e7:56:18:80:f5:f9:d4:28:08:00 SRC=50.7.210.50 DST=176.25.209.74 LEN=40 TOS=0x00 PREC=0x00 TTL=22 ID=26437 PROTO=TCP SPT=3389 DPT=3389 WINDOW=50723 RES=0x00 SYN URGP=50723 MARK=0x8000000
Aug 24 09:53:36 (none) user.alert kernel: Intrusion -> IN=atm0 OUT= MAC=4c:17:eb:90:e7:56:18:80:f5:f9:d4:28:08:00 SRC=134.255.249.213 DST=176.25.209.74 LEN=48 TOS=0x00 PREC=0x00 TTL=122 ID=12029 PROTO=TCP SPT=20154 DPT=5900 WINDOW=65535 RES=0x00 SYN URGP=0 MARK=0x8000000
Aug 24 10:01:23 (none) user.alert kernel: Intrusion -> IN=atm0 OUT= MAC=4c:17:eb:90:e7:56:18:80:f5:f9:d4:28:08:00 SRC=95.220.151.153 DST=176.25.209.74 LEN=48 TOS=0x00 PREC=0x00 TTL=114 ID=694 DF PROTO=TCP SPT=1831 DPT=445 WINDOW=65535 RES=0x00 SYN URGP=0 MARK=0x8000000
Aug 24 10:01:26 (none) user.alert kernel: Intrusion -> IN=atm0 OUT= MAC=4c:17:eb:90:e7:56:18:80:f5:f9:d4:28:08:00 SRC=95.220.151.153 DST=176.25.209.74 LEN=48 TOS=0x00 PREC=0x00 TTL=114 ID=1117 DF PROTO=TCP SPT=1831 DPT=445 WINDOW=65535 RES=0x00 SYN URGP=0 MARK=0x8000000
Aug 24 10:50:02 (none) user.alert kernel: Intrusion -> IN=atm0 OUT= MAC=4c:17:eb:90:e7:56:18:80:f5:f9:d4:28:08:00 SRC=123.192.185.195 DST=176.25.209.74 LEN=48 TOS=0x00 PREC=0x00 TTL=109 ID=56834 DF PROTO=TCP SPT=3407 DPT=445 WINDOW=65535 RES=0x00 SYN URGP=0 MARK=0x8000000
Aug 24 10:50:05 (none) user.alert kernel: Intrusion -> IN=atm0 OUT= MAC=4c:17:eb:90:e7:56:18:80:f5:f9:d4:28:08:00 SRC=123.192.185.195 DST=176.25.209.74 LEN=48 TOS=0x00 PREC=0x00 TTL=109 ID=57245 DF PROTO=TCP SPT=3407 DPT=445 WINDOW=65535 RES=0x00 SYN URGP=0 MARK=0x8000000
Aug 24 10:56:08 (none) user.alert kernel: Intrusion -> IN=atm0 OUT= MAC=4c:17:eb:90:e7:56:18:80:f5:f9:d4:28:08:00 SRC=110.70.30.49 DST=176.25.209.74 LEN=52 TOS=0x00 PREC=0x00 TTL=110 ID=2566 DF PROTO=TCP SPT=5419 DPT=39221 WINDOW=8192 RES=0x00 SYN URGP=0 MARK=0x8000000
Aug 24 10:56:11 (none) user.alert kernel: Intrusion -> IN=atm0 OUT= MAC=4c:17:eb:90:e7:56:18:80:f5:f9:d4:28:08:00 SRC=110.70.30.49 DST=176.25.209.74 LEN=52 TOS=0x00 PREC=0x00 TTL=110 ID=2664 DF PROTO=TCP SPT=5419 DPT=39221 WINDOW=8192 RES=0x00 SYN URGP=0 MARK=0x8000000
Aug 24 10:56:17 (none) user.alert kernel: Intrusion -> IN=atm0 OUT= MAC=4c:17:eb:90:e7:56:18:80:f5:f9:d4:28:08:00 SRC=110.70.30.49 DST=176.25.209.74 LEN=48 TOS=0x00 PREC=0x00 TTL=110 ID=2764 DF PROTO=TCP SPT=5419 DPT=39221 WINDOW=8192 RES=0x00 SYN URGP=0 MARK=0x8000000
Aug 24 11:10:20 (none) user.alert kernel: Intrusion -> IN=atm0 OUT= MAC=4c:17:eb:90:e7:56:18:80:f5:f9:d4:28:08:00 SRC=27.69.24.170 DST=176.25.209.74 LEN=48 TOS=0x00 PREC=0x00 TTL=115 ID=42252 DF PROTO=TCP SPT=1927 DPT=445 WINDOW=64380 RES=0x00 SYN URGP=0 MARK=0x8000000
Aug 24 11:10:23 (none) user.alert kernel: Intrusion -> IN=atm0 OUT= MAC=4c:17:eb:90:e7:56:18:80:f5:f9:d4:28:08:00 SRC=27.69.24.170 DST=176.25.209.74 LEN=48 TOS=0x00 PREC=0x00 TTL=115 ID=42441 DF PROTO=TCP SPT=1927 DPT=445 WINDOW=64380 RES=0x00 SYN URGP=0 MARK=0x8000000
Aug 24 11:27:19 (none) user.alert kernel: Intrusion -> IN=atm0 OUT= MAC=4c:17:eb:90:e7:56:18:80:f5:f9:d4:28:08:00 SRC=118.233.138.147 DST=176.25.209.74 LEN=48 TOS=0x00 PREC=0x00 TTL=108 ID=41574 DF PROTO=TCP SPT=1327 DPT=445 WINDOW=65535 RES=0x00 SYN URGP=0 MARK=0x8000000
Aug 24 11:40:31 (none) user.alert kernel: Intrusion -> IN=atm0 OUT= MAC=4c:17:eb:90:e7:56:18:80:f5:f9:d4:28:08:00 SRC=70.38.109.78 DST=176.25.209.74 LEN=48 TOS=0x00 PREC=0x00 TTL=119 ID=37941 PROTO=TCP SPT=49016 DPT=22 WINDOW=65535 RES=0x00 SYN URGP=0 MARK=0x8000000
Aug 24 11:44:21 (none) user.alert kernel: Intrusion -> IN=atm0 OUT= MAC=4c:17:eb:90:e7:56:18:80:f5:f9:d4:28:08:00 SRC=219.235.0.50 DST=176.25.209.74 LEN=40 TOS=0x00 PREC=0x00 TTL=100 ID=256 PROTO=TCP SPT=6000 DPT=3306 WINDOW=16384 RES=0x00 SYN URGP=0 MARK=0x8000000
Aug 24 12:11:56 (none) user.alert kernel: Intrusion -> IN=atm0 OUT= MAC=4c:17:eb:90:e7:56:18:80:f5:f9:d4:28:08:00 SRC=1.34.22.39 DST=176.25.209.74 LEN=40 TOS=0x00 PREC=0x00 TTL=97 ID=9541 PROTO=TCP SPT=6000 DPT=1080 WINDOW=16384 RES=0x00 SYN URGP=0 MARK=0x8000000
Aug 24 12:55:42 (none) user.alert kernel: Intrusion -> IN=atm0 OUT= MAC=4c:17:eb:90:e7:56:18:80:f5:f9:d4:28:08:00 SRC=111.253.222.38 DST=176.25.209.74 LEN=48 TOS=0x00 PREC=0x00 TTL=104 ID=3897 DF PROTO=TCP SPT=2125 DPT=445 WINDOW=65535 RES=0x00 SYN URGP=0 MARK=0x8000000
Aug 24 12:55:45 (none) user.alert kernel: Intrusion -> IN=atm0 OUT= MAC=4c:17:eb:90:e7:56:18:80:f5:f9:d4:28:08:00 SRC=111.253.222.38 DST=176.25.209.74 LEN=48 TOS=0x00 PREC=0x00 TTL=104 ID=4102 DF PROTO=TCP SPT=2125 DPT=445 WINDOW=65535 RES=0x00 SYN URGP=0 MARK=0x8000000
Aug 24 13:11:29 (none) user.alert kernel: Intrusion -> IN=atm0 OUT= MAC=4c:17:eb:90:e7:56:18:80:f5:f9:d4:28:08:00 SRC=41.80.188.81 DST=176.25.209.74 LEN=48 TOS=0x00 PREC=0x00 TTL=117 ID=4145 DF PROTO=TCP SPT=4404 DPT=445 WINDOW=64380 RES=0x00 SYN URGP=0 MARK=0x8000000
Aug 24 13:11:32 (none) user.alert kernel: Intrusion -> IN=atm0 OUT= MAC=4c:17:eb:90:e7:56:18:80:f5:f9:d4:28:08:00 SRC=41.80.188.81 DST=176.25.209.74 LEN=48 TOS=0x00 PREC=0x00 TTL=117 ID=4222 DF PROTO=TCP SPT=4404 DPT=445 WINDOW=64380 RES=0x00 SYN URGP=0 MARK=0x8000000
Aug 24 13:19:52 (none) user.alert kernel: Intrusion -> IN=atm0 OUT= MAC=4c:17:eb:90:e7:56:18:80:f5:f9:d4:28:08:00 SRC=89.234.203.224 DST=176.25.209.74 LEN=48 TOS=0x00 PREC=0x00 TTL=118 ID=61411 DF PROTO=TCP SPT=3675 DPT=445 WINDOW=65535 RES=0x00 SYN URGP=0 MARK=0x8000000
Aug 24 13:19:55 (none) user.alert kernel: Intrusion -> IN=atm0 OUT= MAC=4c:17:eb:90:e7:56:18:80:f5:f9:d4:28:08:00 SRC=89.234.203.224 DST=176.25.209.74 LEN=48 TOS=0x00 PREC=0x00 TTL=118 ID=61619 DF PROTO=TCP SPT=3675 DPT=445 WINDOW=65535 RES=0x00 SYN URGP=0 MARK=0x8000000
Aug 24 13:20:07 (none) user.alert kernel: Intrusion -> IN=atm0 OUT= MAC=4c:17:eb:90:e7:56:18:80:f5:f9:d4:28:08:00 SRC=194.9.124.11 DST=176.25.209.74 LEN=48 TOS=0x00 PREC=0x00 TTL=120 ID=32741 PROTO=TCP SPT=36598 DPT=5631 WINDOW=65535 RES=0x00 SYN URGP=0 MARK=0x8000000
Aug 24 13:27:11 (none) user.alert kernel: Intrusion -> IN=atm0 OUT= MAC=4c:17:eb:90:e7:56:18:80:f5:f9:d4:28:08:00 SRC=91.66.117.79 DST=176.25.209.74 LEN=48 TOS=0x00 PREC=0x00 TTL=47 ID=15470 DF PROTO=TCP SPT=3484 DPT=445 WINDOW=32767 RES=0x00 SYN URGP=0 MARK=0x8000000
Aug 24 13:43:26 (none) user.alert kernel: Intrusion -> IN=atm0 OUT= MAC=4c:17:eb:90:e7:56:18:80:f5:f9:d4:28:08:00 SRC=109.98.231.41 DST=176.25.209.74 LEN=52 TOS=0x00 PREC=0x00 TTL=50 ID=56772 DF PROTO=TCP SPT=54273 DPT=445 WINDOW=65535 RES=0x00 SYN URGP=0 MARK=0x8000000
Aug 24 14:04:37 (none) user.alert kernel: Intrusion -> IN=atm0 OUT= MAC=4c:17:eb:90:e7:56:18:80:f5:f9:d4:28:08:00 SRC=111.35.36.206 DST=176.25.209.74 LEN=52 TOS=0x00 PREC=0x00 TTL=46 ID=27350 DF PROTO=TCP SPT=4520 DPT=445 WINDOW=65535 RES=0x00 SYN URGP=0 MARK=0x8000000
Aug 24 14:04:40 (none) user.alert kernel: Intrusion -> IN=atm0 OUT= MAC=4c:17:eb:90:e7:56:18:80:f5:f9:d4:28:08:00 SRC=111.35.36.206 DST=176.25.209.74 LEN=52 TOS=0x00 PREC=0x00 TTL=46 ID=28411 DF PROTO=TCP SPT=4520 DPT=445 WINDOW=65535 RES=0x00 SYN URGP=0 MARK=0x8000000
Aug 24 14:53:28 (none) user.alert kernel: Intrusion -> IN=atm0 OUT= MAC=4c:17:eb:90:e7:56:18:80:f5:f9:d4:28:08:00 SRC=118.182.246.40 DST=176.25.209.74 LEN=52 TOS=0x00 PREC=0x00 TTL=46 ID=27505 DF PROTO=TCP SPT=2955 DPT=3389 WINDOW=65535 RES=0x00 SYN URGP=0 MARK=0x8000000
Aug 24 14:53:31 (none) user.alert kernel: Intrusion -> IN=atm0 OUT= MAC=4c:17:eb:90:e7:56:18:80:f5:f9:d4:28:08:00 SRC=118.182.246.40 DST=176.25.209.74 LEN=52 TOS=0x00 PREC=0x00 TTL=46 ID=27989 DF PROTO=TCP SPT=2955 DPT=3389 WINDOW=65535 RES=0x00 SYN URGP=0 MARK=0x8000000
Aug 24 14:53:38 (none) user.alert kernel: Intrusion -> IN=atm0 OUT= MAC=4c:17:eb:90:e7:56:18:80:f5:f9:d4:28:08:00 SRC=118.182.246.40 DST=176.25.209.74 LEN=52 TOS=0x00 PREC=0x00 TTL=46 ID=28979 DF PROTO=TCP SPT=2955 DPT=3389 WINDOW=65535 RES=0x00 SYN URGP=0 MARK=0x8000000
Aug 24 14:57:52 (none) user.alert kernel: Intrusion -> IN=atm0 OUT= MAC=4c:17:eb:90:e7:56:18:80:f5:f9:d4:28:08:00 SRC=78.97.165.205 DST=176.25.209.74 LEN=48 TOS=0x00 PREC=0x00 TTL=114 ID=20017 DF PROTO=TCP SPT=1818 DPT=445 WINDOW=65535 RES=0x00 SYN URGP=0 MARK=0x8000000
Aug 24 14:57:55 (none) user.alert kernel: Intrusion -> IN=atm0 OUT= MAC=4c:17:eb:90:e7:56:18:80:f5:f9:d4:28:08:00 SRC=78.97.165.205 DST=176.25.209.74 LEN=48 TOS=0x00 PREC=0x00 TTL=114 ID=20310 DF PROTO=TCP SPT=1818 DPT=445 WINDOW=65535 RES=0x00 SYN URGP=0 MARK=0x8000000
Aug 24 15:09:27 (none) user.alert kernel: Intrusion -> IN=atm0 OUT= MAC=4c:17:eb:90:e7:56:18:80:f5:f9:d4:28:08:00 SRC=124.11.173.20 DST=176.25.209.74 LEN=48 TOS=0x00 PREC=0x00 TTL=109 ID=20880 DF PROTO=TCP SPT=1626 DPT=445 WINDOW=65535 RES=0x00 SYN URGP=0 MARK=0x8000000
Aug 24 15:22:32 (none) user.alert kernel: Intrusion -> IN=atm0 OUT= MAC=4c:17:eb:90:e7:56:18:80:f5:f9:d4:28:08:00 SRC=27.69.121.216 DST=176.25.209.74 LEN=48 TOS=0x00 PREC=0x00 TTL=115 ID=24064 DF PROTO=TCP SPT=2112 DPT=445 WINDOW=64380 RES=0x00 SYN URGP=0 MARK=0x8000000
Aug 24 16:18:46 (none) user.alert kernel: Intrusion -> IN=atm0 OUT= MAC=4c:17:eb:90:e7:56:18:80:f5:f9:d4:28:08:00 SRC=177.143.95.205 DST=176.25.209.74 LEN=48 TOS=0x00 PREC=0x00 TTL=109 ID=46039 DF PROTO=TCP SPT=1213 DPT=445 WINDOW=65535 RES=0x00 SYN URGP=0 MARK=0x8000000
Aug 24 16:18:49 (none) user.alert kernel: Intrusion -> IN=atm0 OUT= MAC=4c:17:eb:90:e7:56:18:80:f5:f9:d4:28:08:00 SRC=177.143.95.205 DST=176.25.209.74 LEN=48 TOS=0x00 PREC=0x00 TTL=109 ID=46395 DF PROTO=TCP SPT=1213 DPT=445 WINDOW=65535 RES=0x00 SYN URGP=0 MARK=0x8000000
Aug 24 16:29:59 (none) user.alert kernel: Intrusion -> IN=atm0 OUT= MAC=4c:17:eb:90:e7:56:18:80:f5:f9:d4:28:08:00 SRC=178.93.173.250 DST=176.25.209.74 LEN=48 TOS=0x00 PREC=0x00 TTL=116 ID=40597 DF PROTO=TCP SPT=1681 DPT=445 WINDOW=65535 RES=0x00 SYN URGP=0 MARK=0x8000000
Aug 24 16:30:01 (none) user.alert kernel: Intrusion -> IN=atm0 OUT= MAC=4c:17:eb:90:e7:56:18:80:f5:f9:d4:28:08:00 SRC=178.93.173.250 DST=176.25.209.74 LEN=48 TOS=0x00 PREC=0x00 TTL=116 ID=40872 DF PROTO=TCP SPT=1681 DPT=445 WINDOW=65535 RES=0x00 SYN URGP=0 MARK=0x8000000
Aug 24 16:30:26 (none) user.alert kernel: Intrusion -> IN=atm0 OUT= MAC=4c:17:eb:90:e7:56:18:80:f5:f9:d4:28:08:00 SRC=78.139.134.165 DST=176.25.209.74 LEN=48 TOS=0x00 PREC=0x00 TTL=114 ID=56794 DF PROTO=TCP SPT=1676 DPT=445 WINDOW=65535 RES=0x00 SYN URGP=0 MARK=0x8000000
Aug 24 16:30:29 (none) user.alert kernel: Intrusion -> IN=atm0 OUT= MAC=4c:17:eb:90:e7:56:18:80:f5:f9:d4:28:08:00 SRC=78.139.134.165 DST=176.25.209.74 LEN=48 TOS=0x00 PREC=0x00 TTL=114 ID=57084 DF PROTO=TCP SPT=1676 DPT=445 WINDOW=65535 RES=0x00 SYN URGP=0 MARK=0x8000000
Aug 24 16:42:05 (none) user.crit kernel: Line 0: ADSL link down
Aug 24 16:42:16 (none) user.crit kernel: Line 0: xDSL G.994 training
Aug 24 16:42:31 (none) user.crit kernel: Line 0: ADSL G.992 started
Aug 24 16:42:35 (none) user.crit kernel: Line 0: ADSL G.992 channel analysis
Aug 24 16:42:40 (none) user.crit kernel: Line 0: ADSL G.992 message exchange
Aug 24 16:42:41 (none) user.crit kernel: Line 0: ADSL link down
Aug 24 16:42:42 (none) user.crit kernel: Line 0: xDSL G.994 training
Aug 24 16:42:57 (none) user.crit kernel: Line 0: ADSL G.992 started
Aug 24 16:43:01 (none) user.crit kernel: Line 0: ADSL G.992 channel analysis
Aug 24 16:43:06 (none) user.crit kernel: Line 0: ADSL G.992 message exchange
Aug 24 16:43:06 (none) user.crit kernel: Line 0: ADSL link up, Bearer 0, us=606, ds=3666
Aug 24 16:46:53 (none) user.alert kernel: Intrusion -> IN=atm0 OUT= MAC=4c:17:eb:90:e7:56:18:80:f5:f9:d4:28:08:00 SRC=176.240.235.52 DST=176.25.209.74 LEN=48 TOS=0x00 PREC=0x00 TTL=113 ID=36774 DF PROTO=TCP SPT=52934 DPT=445 WINDOW=65535 RES=0x00 SYN URGP=0 MARK=0x8000000
Aug 24 16:46:56 (none) user.alert kernel: Intrusion -> IN=atm0 OUT= MAC=4c:17:eb:90:e7:56:18:80:f5:f9:d4:28:08:00 SRC=176.240.235.52 DST=176.25.209.74 LEN=48 TOS=0x00 PREC=0x00 TTL=113 ID=36879 DF PROTO=TCP SPT=52934 DPT=445 WINDOW=65535 RES=0x00 SYN URGP=0 MARK=0x8000000
Aug 24 16:50:09 (none) user.alert kernel: Intrusion -> IN=atm0 OUT= MAC=4c:17:eb:90:e7:56:18:80:f5:f9:d4:28:08:00 SRC=117.227.247.144 DST=176.25.209.74 LEN=48 TOS=0x00 PREC=0x00 TTL=107 ID=31988 DF PROTO=TCP SPT=3116 DPT=445 WINDOW=16384 RES=0x00 SYN URGP=0 MARK=0x8000000
Aug 24 16:50:12 (none) user.alert kernel: Intrusion -> IN=atm0 OUT= MAC=4c:17:eb:90:e7:56:18:80:f5:f9:d4:28:08:00 SRC=117.227.247.144 DST=176.25.209.74 LEN=48 TOS=0x00 PREC=0x00 TTL=107 ID=32040 DF PROTO=TCP SPT=3116 DPT=445 WINDOW=16384 RES=0x00 SYN URGP=0 MARK=0x8000000
Aug 24 17:07:10 (none) user.alert kernel: Intrusion -> IN=atm0 OUT= MAC=4c:17:eb:90:e7:56:18:80:f5:f9:d4:28:08:00 SRC=50.7.210.50 DST=176.25.209.74 LEN=40 TOS=0x00 PREC=0x00 TTL=22 ID=26437 PROTO=TCP SPT=3389 DPT=3389 WINDOW=50723 RES=0x00 SYN URGP=50723 MARK=0x8000000
Aug 24 17:08:34 (none) user.alert kernel: Intrusion -> IN=atm0 OUT= MAC=4c:17:eb:90:e7:56:18:80:f5:f9:d4:28:08:00 SRC=61.147.103.181 DST=176.25.209.74 LEN=40 TOS=0x00 PREC=0x00 TTL=100 ID=256 PROTO=TCP SPT=6000 DPT=1433 WINDOW=16384 RES=0x00 SYN URGP=0 MARK=0x8000000
Aug 24 17:18:42 (none) user.alert kernel: Intrusion -> IN=atm0 OUT= MAC=4c:17:eb:90:e7:56:18:80:f5:f9:d4:28:08:00 SRC=64.34.195.190 DST=176.25.209.74 LEN=48 TOS=0x00 PREC=0x00 TTL=120 ID=19276 PROTO=TCP SPT=23838 DPT=25 WINDOW=65535 RES=0x00 SYN URGP=0 MARK=0x8000000
Aug 24 17:19:40 (none) user.alert kernel: Intrusion -> IN=atm0 OUT= MAC=4c:17:eb:90:e7:56:18:80:f5:f9:d4:28:08:00 SRC=46.134.213.155 DST=176.25.209.74 LEN=48 TOS=0x00 PREC=0x00 TTL=115 ID=39135 DF PROTO=TCP SPT=1926 DPT=445 WINDOW=64240 RES=0x00 SYN URGP=0 MARK=0x8000000
Aug 24 17:47:34 (none) user.alert kernel: Intrusion -> IN=atm0 OUT= MAC=4c:17:eb:90:e7:56:18:80:f5:f9:d4:28:08:00 SRC=1.34.22.39 DST=176.25.209.74 LEN=40 TOS=0x00 PREC=0x00 TTL=97 ID=20995 PROTO=TCP SPT=6000 DPT=1080 WINDOW=16384 RES=0x00 SYN URGP=0 MARK=0x8000000
Aug 24 17:57:53 (none) user.alert kernel: Intrusion -> IN=atm0 OUT= MAC=4c:17:eb:90:e7:56:18:80:f5:f9:d4:28:08:00 SRC=42.120.45.5 DST=176.25.209.74 LEN=40 TOS=0x00 PREC=0x00 TTL=99 ID=256 PROTO=TCP SPT=6000 DPT=1433 WINDOW=16384 RES=0x00 SYN URGP=0 MARK=0x8000000
Aug 24 18:00:50 (none) user.alert kernel: Intrusion -> IN=atm0 OUT= MAC=4c:17:eb:90:e7:56:18:80:f5:f9:d4:28:08:00 SRC=210.211.109.149 DST=176.25.209.74 LEN=48 TOS=0x00 PREC=0x00 TTL=117 ID=8208 PROTO=TCP SPT=10373 DPT=22 WINDOW=65535 RES=0x00 SYN URGP=0 MARK=0x8000000
Aug 24 18:08:35 (none) user.alert kernel: Intrusion -> IN=atm0 OUT= MAC=4c:17:eb:90:e7:56:18:80:f5:f9:d4:28:08:00 SRC=114.43.13.33 DST=176.25.209.74 LEN=40 TOS=0x00 PREC=0x00 TTL=97 ID=35905 PROTO=TCP SPT=6000 DPT=1080 WINDOW=16384 RES=0x00 SYN URGP=0 MARK=0x8000000
Aug 24 18:15:55 (none) user.alert kernel: Intrusion -> IN=atm0 OUT= MAC=4c:17:eb:90:e7:56:18:80:f5:f9:d4:28:08:00 SRC=176.195.58.60 DST=176.25.209.74 LEN=64 TOS=0x00 PREC=0x00 TTL=35 ID=18554 DF PROTO=TCP SPT=1851 DPT=445 WINDOW=53760 RES=0x00 SYN URGP=0 MARK=0x8000000
Aug 24 18:18:37 (none) user.alert kernel: Intrusion -> IN=atm0 OUT= MAC=4c:17:eb:90:e7:56:18:80:f5:f9:d4:28:08:00 SRC=89.136.59.135 DST=176.25.209.74 LEN=64 TOS=0x00 PREC=0x00 TTL=116 ID=22308 DF PROTO=TCP SPT=4606 DPT=445 WINDOW=65535 RES=0x00 SYN URGP=0 MARK=0x8000000
Aug 24 18:30:01 (none) user.alert kernel: Intrusion -> IN=atm0 OUT= MAC=4c:17:eb:90:e7:56:18:80:f5:f9:d4:28:08:00 SRC=200.144.17.86 DST=176.25.209.74 LEN=48 TOS=0x00 PREC=0x00 TTL=113 ID=39808 DF PROTO=TCP SPT=3866 DPT=445 WINDOW=65535 RES=0x00 SYN URGP=0 MARK=0x8000000
Aug 24 19:14:49 (none) user.alert kernel: Intrusion -> IN=atm0 OUT= MAC=4c:17:eb:90:e7:56:18:80:f5:f9:d4:28:08:00 SRC=95.27.168.116 DST=176.25.209.74 LEN=48 TOS=0x00 PREC=0x00 TTL=110 ID=63406 DF PROTO=TCP SPT=3298 DPT=445 WINDOW=65535 RES=0x00 SYN URGP=0 MARK=0x8000000
Aug 24 19:14:52 (none) user.alert kernel: Intrusion -> IN=atm0 OUT= MAC=4c:17:eb:90:e7:56:18:80:f5:f9:d4:28:08:00 SRC=95.27.168.116 DST=176.25.209.74 LEN=48 TOS=0x00 PREC=0x00 TTL=110 ID=64089 DF PROTO=TCP SPT=3298 DPT=445 WINDOW=65535 RES=0x00 SYN URGP=0 MARK=0x8000000
Aug 24 19:20:00 (none) user.alert kernel: Intrusion -> IN=atm0 OUT= MAC=4c:17:eb:90:e7:56:18:80:f5:f9:d4:28:08:00 SRC=194.165.149.50 DST=176.25.209.74 LEN=52 TOS=0x00 PREC=0x00 TTL=111 ID=8954 DF PROTO=TCP SPT=32507 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 MARK=0x8000000
Aug 24 19:20:03 (none) user.alert kernel: Intrusion -> IN=atm0 OUT= MAC=4c:17:eb:90:e7:56:18:80:f5:f9:d4:28:08:00 SRC=194.165.149.50 DST=176.25.209.74 LEN=52 TOS=0x00 PREC=0x00 TTL=111 ID=9352 DF PROTO=TCP SPT=32507 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 MARK=0x8000000
Aug 24 19:20:09 (none) user.alert kernel: Intrusion -> IN=atm0 OUT= MAC=4c:17:eb:90:e7:56:18:80:f5:f9:d4:28:08:00 SRC=194.165.149.50 DST=176.25.209.74 LEN=48 TOS=0x00 PREC=0x00 TTL=111 ID=10149 DF PROTO=TCP SPT=32507 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 MARK=0x8000000
Aug 24 19:37:03 (none) user.alert kernel: Intrusion -> IN=atm0 OUT= MAC=4c:17:eb:90:e7:56:18:80:f5:f9:d4:28:08:00 SRC=92.240.68.152 DST=176.25.209.74 LEN=60 TOS=0x00 PREC=0x00 TTL=55 ID=41673 DF PROTO=TCP SPT=29197 DPT=80 WINDOW=5840 RES=0x00 SYN URGP=0 MARK=0x8000000
Aug 24 19:37:06 (none) user.alert kernel: Intrusion -> IN=atm0 OUT= MAC=4c:17:eb:90:e7:56:18:80:f5:f9:d4:28:08:00 SRC=92.240.68.152 DST=176.25.209.74 LEN=60 TOS=0x00 PREC=0x00 TTL=55 ID=41674 DF PROTO=TCP SPT=29197 DPT=80 WINDOW=5840 RES=0x00 SYN URGP=0 MARK=0x8000000

KIA · 24 Aug 2012 at 21:11

Iceman said:
Noticed im getting a lot of Intrusions throughout the day too??

Infected machines on the Internet port scanning and checking for vulnerabilities. Intrusion detection is a waste of CPU cycles.

Iceman · 24 Aug 2012 at 21:44

The intrusion thins is only viewable through my router.

KIA · 24 Aug 2012 at 22:13

Iceman said:
The intrusion thins is only viewable through my router.

It should be that way. There's no way for unsolicited incoming traffic to hit the internal network unless you have port forwarding rules in place.

Leeroy123 · 24 Aug 2012 at 22:16

Tell sky you want fibre optic or go with someone else

Iceman · 25 Aug 2012 at 08:24

I've only just joined sky about 3 /4 weeks ago. Was with Orange but they didnt seem to wat to fix the problem, Sky on the other hand want to fix it, but BT don't seem to want to turn up. Think i'll try the Fibre Optic trick and see what i can get.