Your forum username:
Do you already have an account?
Forgot your password?
  • Log in or Sign up


    Welcome to Sky User - The Unofficial Support Forum for everything Sky! - Proudly helping over 65k members.


    Advertisement

    Results 1 to 5 of 5

    security logs showing intrusions:(

    This is a discussion on security logs showing intrusions:( within the Sky Broadband help forums, part of the Sky Broadband help and support category; hi, we've been having some trouble with our internet lately so i logged into the router to find intrusion logs. ...

    1. #1
      tanacious's Avatar
      tanacious is offline Sky User Member
      Exchange: 01634
      Broadband ISP: Sky Max
      Router: Netgear V1 DG834GT
      Sky TV: Sky Basic
      Join Date
      Dec 2008
      Posts
      4
      Thanks
      0
      Thanked 0 Times in 0 Posts

      security logs showing intrusions:(

      hi, we've been having some trouble with our internet lately so i logged into the router to find intrusion logs. i'm not fully aquinted with networking aspect things so just posting here to get some help!!!

      can someone tell me what it means and what i should do about it? i assume its the cause of the internet problems we've been having.


    2. Advertisement
    3. #2
      PaulSky's Avatar
      PaulSky is offline Sky User Member
      Exchange:
      Broadband ISP: Max
      Router: Netgear V1 DG834GT
      Sky TV: Sky Basic
      Join Date
      Sep 2007
      Location
      Essex
      Posts
      4,202
      Thanks
      0
      Thanked 16 Times in 16 Posts

      Re: security logs showing intrusions:(

      Erm ? Can you post a copy of the log or some info from it?

    4. #3
      tanacious's Avatar
      tanacious is offline Sky User Member
      Exchange: 01634
      Broadband ISP: Sky Max
      Router: Netgear V1 DG834GT
      Sky TV: Sky Basic
      Join Date
      Dec 2008
      Posts
      4
      Thanks
      0
      Thanked 0 Times in 0 Posts

      Re: security logs showing intrusions:(

      Dec 4 15:52:42 (none) user.alert kernel: Intrusion -> IN=ppp_0_38_1 OUT= MAC= SRC=155.33.114.135 DST=90.219.45.34 LEN=48 TOS=0x00 PREC=0x00 TTL=116 ID=21697 DF PROTO=TCP SPT=61559 DPT=53195 WINDOW=8192 RES=0x00 SYN URGP=0


      some details remain the same and sometimes they change, don't have 2 copies atm but will post again asap

    5. #4
      tanacious's Avatar
      tanacious is offline Sky User Member
      Exchange: 01634
      Broadband ISP: Sky Max
      Router: Netgear V1 DG834GT
      Sky TV: Sky Basic
      Join Date
      Dec 2008
      Posts
      4
      Thanks
      0
      Thanked 0 Times in 0 Posts

      Re: security logs showing intrusions:(

      Dec 4 16:05:38 (none) user.alert kernel: Intrusion -> IN=ppp_0_38_1 OUT= MAC= SRC=81.6.192.25 DST=90.219.45.34 LEN=48 TOS=0x00 PREC=0x00 TTL=121 ID=24585 DF PROTO=TCP SPT=2862 DPT=80 WINDOW=65535 RES=0x00 SYN URGP=0

      Dec 4 16:05:41 (none) user.alert kernel: Intrusion -> IN=ppp_0_38_1 OUT= MAC= SRC=81.6.192.25 DST=90.219.45.34 LEN=48 TOS=0x00 PREC=0x00 TTL=121 ID=24589 DF PROTO=TCP SPT=2862 DPT=80 WINDOW=65535 RES=0x00 SYN URGP=0

      Dec 4 16:06:31 (none) user.alert kernel: Intrusion -> IN=ppp_0_38_1 OUT= MAC= SRC=190.253.157.134 DST=90.219.45.34 LEN=60 TOS=0x00 PREC=0x00 TTL=49 ID=21979 DF PROTO=TCP SPT=4764 DPT=23 WINDOW=5808 RES=0x00 SYN URGP=0

      Dec 4 16:22:07 (none) user.alert kernel: Intrusion -> IN=ppp_0_38_1 OUT= MAC= SRC=221.195.73.68 DST=90.219.45.34 LEN=40 TOS=0x00 PREC=0x00 TTL=111 ID=256 DF PROTO=TCP SPT=12200 DPT=3128 WINDOW=8192 RES=0x00 SYN URGP=0

      Dec 4 16:35:43 (none) user.alert kernel: Intrusion -> IN=ppp_0_38_1 OUT= MAC= SRC=210.100.152.230 DST=90.219.45.34 LEN=40 TOS=0x00 PREC=0x00 TTL=106 ID=256 PROTO=TCP SPT=6000 DPT=1433 WINDOW=16384 RES=0x00 SYN URGP=0

      Dec 4 16:36:15 (none) user.alert kernel: Intrusion -> IN=ppp_0_38_1 OUT= MAC= SRC=121.134.108.4 DST=90.219.45.34 LEN=44 TOS=0x00 PREC=0x00 TTL=108 ID=256 PROTO=TCP SPT=6000 DPT=2967 WINDOW=16384 RES=0x00 SYN URGP=0

      90.219 is my IP address
      Last edited by tanacious; 04-12-08 at 05:43 PM.

    6. #5
      tanacious's Avatar
      tanacious is offline Sky User Member
      Exchange: 01634
      Broadband ISP: Sky Max
      Router: Netgear V1 DG834GT
      Sky TV: Sky Basic
      Join Date
      Dec 2008
      Posts
      4
      Thanks
      0
      Thanked 0 Times in 0 Posts

      Re: security logs showing intrusions:(

      Jan 1 00:00:34 (none) user.crit kernel: eth0 Link UP.

      Jan 1 00:00:34 (none) user.crit kernel: ADSL G.994 training

      Jan 1 00:00:34 (none) user.crit kernel: ADSL G.992 started

      Jan 1 00:00:34 (none) user.crit kernel: ADSL G.992 channel analysis

      Jan 1 00:00:34 (none) user.crit kernel: ADSL G.992 message exchange

      Jan 1 00:00:34 (none) user.crit kernel: ADSL link up, interleaved, us=768, ds=1664

      Jan 1 00:01:04 (none) daemon.crit pppd[619]: PPP LCP UP.

      Jan 1 00:01:05 (none) daemon.crit pppd[619]: Received valid IP address from server. Connection UP.

      Dec 4 16:40:18 (none) daemon.err user: tr69c: Unable to retrieve attributes in scratch PAD

      Dec 4 16:40:18 (none) daemon.err user: Stored Parameter Attribute data is corrupt or missing

      this showed on reboot, no clue if its normal or not

     

     

    Tags for this Thread

    Posting Permissions

    • You may not post new threads
    • You may not post replies
    • You may not post attachments
    • You may not edit your posts
    •  
    SkyUser - Copyright © 2006-2017. SatDish and NewsreadeR | SkyUser is in no way affiliated with Sky Broadband / BSkyB
    RIPA NOTICE: NO CONSENT IS GIVEN FOR INTERCEPTION OF PAGE TRANSMISSION