Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[Gaffers]

The router where i am staying seems to be constantly falling over itself.  Connection works then it doesn't, thenit works again....annoying....

Just checked the log and got this:

2010-01-25T18:54:26Z        info        src=79.73.235.116 dst=86.158.131.197 ipprot=6 sport=57449 dport=1947 Unknown inbound session stopped
2010-01-25T18:54:26Z       info       src=89.152.16.91 dst=86.158.131.197 ipprot=6 sport=4766 dport=51664 Unknown inbound session stopped
2010-01-25T18:54:26Z       info       src=217.10.40.121 dst=86.158.131.197 ipprot=6 sport=33121 dport=14896 Unknown inbound session stopped
2010-01-25T18:54:26Z       info       src=80.192.119.74 dst=86.158.131.197 ipprot=6 sport=21962 dport=14896 Unknown inbound session stopped
2010-01-25T18:54:26Z       info       src=61.19.97.6 dst=86.158.131.197 ipprot=6 sport=56795 dport=14896 Unknown inbound session stopped
2010-01-25T18:54:26Z       info       src=92.238.180.169 dst=86.158.131.197 ipprot=6 sport=53389 dport=14896 Unknown inbound session stopped
2010-01-25T18:54:26Z       info       src=86.12.86.225 dst=86.158.131.197 ipprot=6 sport=61513 dport=14896 Unknown inbound session stopped
2010-01-25T18:54:27Z       info       src=76.174.55.51 dst=86.158.131.197 ipprot=6 sport=57235 dport=14896 Unknown inbound session stopped
2010-01-25T18:54:28Z       info       src=89.101.34.2 dst=86.158.131.197 ipprot=6 sport=49876 dport=14896 Unknown inbound session stopped

ad infinitum....

anyone got an idea? DoS?

[Plomien]

looks like kids doing port scans nothing to worry about as your firewall has blocked them

[Gaffers]

to add when the web works i dont have access to al sites, just OOF, MSN and Skype....nothing else....

[Gaffers]

looks like kids doing port scans nothing to worry about as your firewall has blocked them

Yeah but they seem to be kicking out the internet sporadically....it took me 5 mins to reply to this......

[feeutfo]

time and date is all the same, time to bother your provider for a new router perhaps?

[Gaffers]

time and date is all the same, time to bother your provider for a new router perhaps?

Nah thats just a snapshotof a few seconds........getting 6-9 port requests a second

[TheBoy]

Do a netstat -a and see if you have something listening on tcp 14896...

[Gaffers]

If they were they arent anymore and the connection has come back albeit slow..... I am seeing an address which I dont think should be there:

r6ay206.net.upc.cz:61501

How do I kill that connection?

[Pitchfork]

If they were they arent anymore and the connection has come back albeit slow..... I am seeing an address which I dont think should be there:

r6ay206.net.upc.cz:61501



How do I kill that connection?

You'll need to Czech it out!!

[Gaffers]

If they were they arent anymore and the connection has come back albeit slow..... I am seeing an address which I dont think should be there:

r6ay206.net.upc.cz:61501



How do I kill that connection?

You'll need to Czech it out!!

[opens door and hands PF his coat] 

[eddie]

Take a look here-http://www.bleepingcomputer.com/virus-removal/remove-windows-antivirus-pro
-Sounds very similar to the one the Mrs had on her pc.

eddie