Skip to main content

Laatste paar weken merkte ik dat internetverbinding niet meer zo stabiel was zoals al die vorige jaren.

Ik heb VDSL, ZyXEL P-2812HNU-F1 in bridge en mijn AX88U als router. 

Toen ik merkte dat er problemen waren had ik beide gereset en opnieuw ingesteld = niet geholpen

Dan ZyXel vervangen door Experia Box V8 die ik tijdje geleden kreeg. Die ook in bridge en AX88U achter.

Eerst dacht ik aan hardware probleem, meerdere keren alles gereset, andere firmware geflasht. Geen verandering. In logs (debug niveau) van mijn router geen problemen zichtbaar.

Toen logs van firewal aangezet en gekeken wat er gebeurt.

Op sommigge momenten zie ik zeer hoog upload en belasting op CPU van router. Ik heb 25/5 verbinding en upload van 100MB/s ziet er vreemd uit.

 

In logs zie ik dat er veel pakketen gedropt worden in korte tijd

Oct 22 19:42:44 kernel: DROP IN=ppp0 OUT= MAC= SRC=149.22.89.78 DST=MY.IP.ADD.RES LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=35359 DF PROTO=TCP SPT=38315 DPT=2663 SEQ=2231249975 ACK=0 WINDOW=64240 RES=0x00 SYN URGP=0 OPT (020405B40402080A18FB95480000000001030308) MARK=0x8000000 
Oct 22 19:42:47 kernel: DROP IN=ppp0 OUT= MAC= SRC=185.242.226.45 DST=MY.IP.ADD.RES LEN=44 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=TCP SPT=52431 DPT=11111 SEQ=2970563032 ACK=0 WINDOW=65535 RES=0x00 SYN URGP=0 OPT (020405B4) MARK=0x8000000 
Oct 22 19:43:03 kernel: DROP IN=ppp0 OUT= MAC= SRC=185.167.96.146 DST=MY.IP.ADD.RES LEN=40 TOS=0x08 PREC=0x20 TTL=247 ID=54321 PROTO=TCP SPT=38727 DPT=6443 SEQ=3872358163 ACK=0 WINDOW=65535 RES=0x00 SYN URGP=0 MARK=0x8000000 
Oct 22 19:43:13 kernel: DROP IN=ppp0 OUT= MAC= SRC=172.169.207.117 DST=MY.IP.ADD.RES LEN=38 TOS=0x00 PREC=0x00 TTL=237 ID=54321 PROTO=UDP SPT=49531 DPT=1194 LEN=18 MARK=0x8000000 
Oct 22 19:43:24 kernel: DROP IN=ppp0 OUT= MAC= SRC=205.210.31.51 DST=MY.IP.ADD.RES LEN=44 TOS=0x00 PREC=0x00 TTL=61 ID=25653 PROTO=TCP SPT=50264 DPT=23 SEQ=4132058444 ACK=0 WINDOW=1024 RES=0x00 SYN URGP=0 OPT (020405B4) MARK=0x8000000 
Oct 22 19:43:41 kernel: DROP IN=ppp0 OUT= MAC= SRC=52.189.74.51 DST=MY.IP.ADD.RES LEN=40 TOS=0x00 PREC=0x00 TTL=234 ID=54321 PROTO=TCP SPT=40177 DPT=2078 SEQ=2807239021 ACK=0 WINDOW=65535 RES=0x00 SYN URGP=0 MARK=0x8000000 
Oct 22 19:44:33 kernel: DROP IN=eth0 OUT= MAC=01:00:5e:00:00:01:5c:dc:96:d9:3d:a6:08:00 SRC=192.168.2.254 DST=224.0.0.1 LEN=36 TOS=0x00 PREC=0x00 TTL=1 ID=741 OPT (94040000) PROTO=2 MARK=0x8000000 
Oct 22 19:44:33 kernel: DROP IN=ppp0 OUT= MAC= SRC=83.150.212.157 DST=MY.IP.ADD.RES LEN=40 TOS=0x00 PREC=0x00 TTL=238 ID=24018 PROTO=TCP SPT=42589 DPT=3237 SEQ=4167499801 ACK=0 WINDOW=1024 RES=0x00 SYN URGP=0 MARK=0x8000000 

Oct 22 19:51:07 kernel: DROP IN=ppp0 OUT= MAC= SRC=193.41.206.156 DST=MY.IP.ADD.RES LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=TCP SPT=56711 DPT=8728 SEQ=3842599616 ACK=0 WINDOW=65535 RES=0x00 SYN URGP=0 MARK=0x8000000 
Oct 22 19:51:36 kernel: DROP IN=ppp0 OUT= MAC= SRC=103.164.77.156 DST=MY.IP.ADD.RES LEN=60 TOS=0x00 PREC=0x00 TTL=44 ID=51052 DF PROTO=TCP SPT=60770 DPT=6379 SEQ=3337329164 ACK=0 WINDOW=14600 RES=0x00 SYN URGP=0 OPT (020405B40402080AABBF5D600000000001030307) MARK=0x8000000 
Oct 22 19:51:51 kernel: DROP IN=ppp0 OUT= MAC= SRC=196.189.103.51 DST=MY.IP.ADD.RES LEN=40 TOS=0x00 PREC=0x00 TTL=55 ID=28800 PROTO=TCP SPT=14417 DPT=23 SEQ=1386762606 ACK=0 WINDOW=8266 RES=0x00 SYN URGP=0 MARK=0x8000000 
Oct 22 19:51:54 kernel: DROP IN=ppp0 OUT= MAC= SRC=64.62.156.121 DST=MY.IP.ADD.RES LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=54321 PROTO=TCP SPT=36323 DPT=1883 SEQ=2913632256 ACK=0 WINDOW=65535 RES=0x00 SYN URGP=0 MARK=0x8000000 
Oct 22 19:51:55 kernel: DROP IN=ppp0 OUT= MAC= SRC=3.141.165.160 DST=MY.IP.ADD.RES LEN=52 TOS=0x00 PREC=0x00 TTL=55 ID=52531 PROTO=TCP SPT=38570 DPT=49160 SEQ=3989408971 ACK=0 WINDOW=65535 RES=0x00 SYN URGP=0 OPT (020405B40103030801010402) MARK=0x8000000 
Oct 22 19:51:56 kernel: DROP IN=ppp0 OUT= MAC= SRC=176.195.44.66 DST=MY.IP.ADD.RES LEN=52 TOS=0x00 PREC=0x00 TTL=251 ID=40734 DF PROTO=TCP SPT=65131 DPT=4721 SEQ=3848441530 ACK=0 WINDOW=64240 RES=0x00 SYN URGP=0 OPT (020405B40103030801010402) MARK=0x8000000 
Oct 22 19:51:57 kernel: DROP IN=ppp0 OUT= MAC= SRC=87.120.166.245 DST=MY.IP.ADD.RES LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=54321 PROTO=TCP SPT=57204 DPT=34567 SEQ=1458385218 ACK=0 WINDOW=65535 RES=0x00 SYN URGP=0 MARK=0x8000000 
Oct 22 19:51:59 kernel: DROP IN=ppp0 OUT= MAC= SRC=176.195.44.66 DST=MY.IP.ADD.RES LEN=52 TOS=0x00 PREC=0x00 TTL=251 ID=40736 DF PROTO=TCP SPT=65131 DPT=4721 SEQ=3848441530 ACK=0 WINDOW=64240 RES=0x00 SYN URGP=0 OPT (020405B40103030801010402) MARK=0x8000000 
Oct 22 19:51:59 kernel: DROP IN=ppp0 OUT= MAC= SRC=124.255.20.54 DST=MY.IP.ADD.RES LEN=60 TOS=0x00 PREC=0x00 TTL=46 ID=16783 DF PROTO=TCP SPT=52271 DPT=23 SEQ=848057895 ACK=0 WINDOW=5840 RES=0x00 SYN URGP=0 OPT (020405820402080A2EF417A80000000001030301) MARK=0x8000000 
Oct 22 19:52:28 kernel: DROP IN=ppp0 OUT= MAC= SRC=103.102.230.6 DST=MY.IP.ADD.RES LEN=40 TOS=0x08 PREC=0x20 TTL=242 ID=54321 PROTO=TCP SPT=58527 DPT=8728 SEQ=597358380 ACK=0 WINDOW=65535 RES=0x00 SYN URGP=0 MARK=0x8000000 
Oct 22 19:52:32 kernel: DROP IN=ppp0 OUT= MAC= SRC=83.222.190.102 DST=MY.IP.ADD.RES LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=8081 PROTO=TCP SPT=51095 DPT=3363 SEQ=3696444380 ACK=0 WINDOW=1024 RES=0x00 SYN URGP=0 MARK=0x8000000 
Oct 22 19:52:35 kernel: DROP IN=ppp0 OUT= MAC= SRC=108.177.96.188 DST=MY.IP.ADD.RES LEN=76 TOS=0x00 PREC=0x00 TTL=61 ID=44446 PROTO=TCP SPT=5228 DPT=47008 SEQ=8249251 ACK=2227066137 WINDOW=1050 RES=0x00 ACK PSH URGP=0 OPT (0101080AF5ECF6BFCD543D5E) MARK=0x8000000 
Oct 22 19:52:35 kernel: DROP IN=ppp0 OUT= MAC= SRC=108.177.96.188 DST=MY.IP.ADD.RES LEN=76 TOS=0x00 PREC=0x00 TTL=61 ID=44447 PROTO=TCP SPT=5228 DPT=47008 SEQ=8249251 ACK=2227066137 WINDOW=1050 RES=0x00 ACK PSH URGP=0 OPT (0101080AF5ECF7CCCD543D5E) MARK=0x8000000 
Oct 22 19:52:35 kernel: DROP IN=ppp0 OUT= MAC= SRC=108.177.96.188 DST=MY.IP.ADD.RES LEN=76 TOS=0x00 PREC=0x00 TTL=61 ID=44448 PROTO=TCP SPT=5228 DPT=47008 SEQ=8249251 ACK=2227066137 WINDOW=1050 RES=0x00 ACK PSH URGP=0 OPT (0101080AF5ECF8DCCD543D5E) MARK=0x8000000 
Oct 22 19:52:36 kernel: DROP IN=ppp0 OUT= MAC= SRC=108.177.96.188 DST=MY.IP.ADD.RES LEN=76 TOS=0x00 PREC=0x00 TTL=61 ID=44449 PROTO=TCP SPT=5228 DPT=47008 SEQ=8249251 ACK=2227066137 WINDOW=1050 RES=0x00 ACK PSH URGP=0 OPT (0101080AF5ECFB0CCD543D5E) MARK=0x8000000 
Oct 22 19:52:37 kernel: DROP IN=ppp0 OUT= MAC= SRC=108.177.96.188 DST=MY.IP.ADD.RES LEN=76 TOS=0x00 PREC=0x00 TTL=61 ID=44450 PROTO=TCP SPT=5228 DPT=47008 SEQ=8249251 ACK=2227066137 WINDOW=1050 RES=0x00 ACK PSH URGP=0 OPT (0101080AF5ECFF4CCD543D5E) MARK=0x8000000 
Oct 22 19:52:39 kernel: DROP IN=ppp0 OUT= MAC= SRC=108.177.96.188 DST=MY.IP.ADD.RES LEN=76 TOS=0x00 PREC=0x00 TTL=61 ID=44451 PROTO=TCP SPT=5228 DPT=47008 SEQ=8249251 ACK=2227066137 WINDOW=1050 RES=0x00 ACK PSH URGP=0 OPT (0101080AF5ED07CCCD543D5E) MARK=0x8000000 
Oct 22 19:52:40 kernel: DROP IN=ppp0 OUT= MAC= SRC=45.84.89.3 DST=MY.IP.ADD.RES LEN=52 TOS=0x00 PREC=0x00 TTL=47 ID=0 PROTO=TCP SPT=63157 DPT=8089 SEQ=1526359791 ACK=0 WINDOW=65535 RES=0x00 SYN URGP=0 OPT (020405840103030801010402) MARK=0x8000000 
Oct 22 19:52:43 kernel: DROP IN=ppp0 OUT= MAC= SRC=108.177.96.188 DST=MY.IP.ADD.RES LEN=76 TOS=0x00 PREC=0x00 TTL=61 ID=44452 PROTO=TCP SPT=5228 DPT=47008 SEQ=8249251 ACK=2227066137 WINDOW=1050 RES=0x00 ACK PSH URGP=0 OPT (0101080AF5ED194CCD543D5E) MARK=0x8000000 

Oct 22 19:53:40 kernel: DROP IN=ppp0 OUT= MAC= SRC=92.249.48.232 DST=MY.IP.ADD.RES LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=TCP SPT=42374 DPT=34567 SEQ=4166875404 ACK=0 WINDOW=65535 RES=0x00 SYN URGP=0 MARK=0x8000000 
Oct 22 19:53:40 kernel: DROP IN=ppp0 OUT= MAC= SRC=120.246.123.50 DST=MY.IP.ADD.RES LEN=36 TOS=0x04 PREC=0x00 TTL=44 ID=62046 DF PROTO=ICMP TYPE=8 CODE=0 ID=29690 SEQ=39318 MARK=0x8000000 
Oct 22 19:53:40 kernel: DROP IN=ppp0 OUT= MAC= SRC=103.102.230.2 DST=MY.IP.ADD.RES LEN=40 TOS=0x08 PREC=0x20 TTL=242 ID=54321 PROTO=TCP SPT=41915 DPT=8728 SEQ=296951654 ACK=0 WINDOW=65535 RES=0x00 SYN URGP=0 MARK=0x8000000 
Oct 22 19:53:45 kernel: DROP IN=ppp0 OUT= MAC= SRC=47.89.80.94 DST=MY.IP.ADD.RES LEN=80 TOS=0x00 PREC=0x00 TTL=52 ID=63765 DF PROTO=TCP SPT=80 DPT=38708 SEQ=756751960 ACK=2600587455 WINDOW=83 RES=0x00 ACK PSH URGP=0 MARK=0x8000000 
Oct 22 19:53:45 kernel: DROP IN=ppp0 OUT= MAC= SRC=154.212.141.187 DST=MY.IP.ADD.RES LEN=44 TOS=0x00 PREC=0x00 TTL=241 ID=8004 PROTO=TCP SPT=58914 DPT=12180 SEQ=2861654462 ACK=0 WINDOW=1024 RES=0x00 SYN URGP=0 OPT (020405B4) MARK=0x8000000 
Oct 22 19:53:45 kernel: DROP IN=ppp0 OUT= MAC= SRC=47.89.80.94 DST=MY.IP.ADD.RES LEN=80 TOS=0x00 PREC=0x00 TTL=52 ID=63766 DF PROTO=TCP SPT=80 DPT=38708 SEQ=756751960 ACK=2600587455 WINDOW=83 RES=0x00 ACK PSH URGP=0 MARK=0x8000000 
Oct 22 19:53:45 kernel: DROP IN=ppp0 OUT= MAC= SRC=47.89.80.94 DST=MY.IP.ADD.RES LEN=80 TOS=0x00 PREC=0x00 TTL=52 ID=63767 DF PROTO=TCP SPT=80 DPT=38708 SEQ=756751960 ACK=2600587455 WINDOW=83 RES=0x00 ACK PSH URGP=0 MARK=0x8000000 
Oct 22 19:53:47 kernel: DROP IN=ppp0 OUT= MAC= SRC=47.89.80.94 DST=MY.IP.ADD.RES LEN=80 TOS=0x00 PREC=0x00 TTL=52 ID=63769 DF PROTO=TCP SPT=80 DPT=38708 SEQ=756751960 ACK=2600587455 WINDOW=83 RES=0x00 ACK PSH URGP=0 MARK=0x8000000 
Oct 22 19:53:49 kernel: DROP IN=ppp0 OUT= MAC= SRC=47.89.80.94 DST=MY.IP.ADD.RES LEN=80 TOS=0x00 PREC=0x00 TTL=52 ID=63770 DF PROTO=TCP SPT=80 DPT=38708 SEQ=756751960 ACK=2600587455 WINDOW=83 RES=0x00 ACK PSH URGP=0 MARK=0x8000000 
Oct 22 19:54:14 kernel: DROP IN=ppp0 OUT= MAC= SRC=162.248.225.7 DST=MY.IP.ADD.RES LEN=434 TOS=0x00 PREC=0x00 TTL=53 ID=57797 DF PROTO=UDP SPT=5066 DPT=15080 LEN=414 MARK=0x8000000 
Oct 22 19:54:38 kernel: DROP IN=ppp0 OUT= MAC= SRC=185.242.226.45 DST=MY.IP.ADD.RES LEN=44 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=TCP SPT=41287 DPT=12000 SEQ=1775689372 ACK=0 WINDOW=65535 RES=0x00 SYN URGP=0 OPT (020405B4) MARK=0x8000000 
Oct 22 19:54:44 kernel: DROP IN=ppp0 OUT= MAC= SRC=206.168.34.130 DST=MY.IP.ADD.RES LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=22562 PROTO=TCP SPT=13922 DPT=45063 SEQ=3649685883 ACK=0 WINDOW=42340 RES=0x00 SYN URGP=0 OPT (020405B40402080A671468D7000000000103030A) MARK=0x8000000 
Oct 22 19:54:51 kernel: DROP IN=ppp0 OUT= MAC= SRC=162.217.96.21 DST=MY.IP.ADD.RES LEN=433 TOS=0x00 PREC=0x00 TTL=50 ID=57373 DF PROTO=UDP SPT=5075 DPT=5060 LEN=413 MARK=0x8000000 
Oct 22 19:54:54 kernel: DROP IN=ppp0 OUT= MAC= SRC=95.214.27.38 DST=MY.IP.ADD.RES LEN=71 TOS=0x00 PREC=0x00 TTL=249 ID=54321 PROTO=UDP SPT=30884 DPT=53 LEN=51 MARK=0x8000000 
Oct 22 19:54:58 kernel: DROP IN=eth0 OUT= MAC=01:00:5e:00:00:01:5c:dc:96:d9:3d:a6:08:00 SRC=192.168.2.254 DST=224.0.0.1 LEN=36 TOS=0x00 PREC=0x00 TTL=1 ID=746 OPT (94040000) PROTO=2 MARK=0x8000000 
Oct 22 19:54:59 kernel: DROP IN=ppp0 OUT= MAC= SRC=87.236.176.57 DST=MY.IP.ADD.RES LEN=42 TOS=0x00 PREC=0x00 TTL=58 ID=13895 DF PROTO=UDP SPT=23222 DPT=2362 LEN=22 MARK=0x8000000 
Oct 22 19:55:09 kernel: DROP IN=ppp0 OUT= MAC= SRC=20.54.37.64 DST=MY.IP.ADD.RES LEN=207 TOS=0x00 PREC=0x00 TTL=115 ID=65159 DF PROTO=TCP SPT=443 DPT=49408 SEQ=1043848122 ACK=2454037697 WINDOW=7384 RES=0x00 ACK PSH URGP=0 MARK=0x8000000 

Oct 22 19:56:21 kernel: DROP IN=ppp0 OUT= MAC= SRC=154.213.185.221 DST=MY.IP.ADD.RES LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=45500 PROTO=TCP SPT=47586 DPT=5005 SEQ=3194418015 ACK=0 WINDOW=1024 RES=0x00 SYN URGP=0 MARK=0x8000000 
Oct 22 19:56:32 kernel: DROP IN=ppp0 OUT= MAC= SRC=149.154.167.91 DST=MY.IP.ADD.RES LEN=52 TOS=0x00 PREC=0x00 TTL=56 ID=15287 DF PROTO=TCP SPT=443 DPT=52456 SEQ=2060725704 ACK=331770079 WINDOW=2119 RES=0x00 ACK URGP=0 OPT (0101080A55E297CB7E770AED) MARK=0x8000000 
Oct 22 19:56:52 kernel: DROP IN=ppp0 OUT= MAC= SRC=83.150.212.157 DST=MY.IP.ADD.RES LEN=40 TOS=0x00 PREC=0x00 TTL=238 ID=11116 PROTO=TCP SPT=42589 DPT=3276 SEQ=2401793742 ACK=0 WINDOW=1024 RES=0x00 SYN URGP=0 MARK=0x8000000 
Oct 22 19:57:04 kernel: DROP IN=eth0 OUT= MAC=01:00:5e:00:00:01:5c:dc:96:d9:3d:a6:08:00 SRC=192.168.2.254 DST=224.0.0.1 LEN=36 TOS=0x00 PREC=0x00 TTL=1 ID=747 OPT (94040000) PROTO=2 MARK=0x8000000 
Oct 22 19:57:06 kernel: DROP IN=ppp0 OUT= MAC= SRC=45.84.89.3 DST=MY.IP.ADD.RES LEN=52 TOS=0x00 PREC=0x00 TTL=47 ID=0 PROTO=TCP SPT=63155 DPT=8333 SEQ=1398922976 ACK=0 WINDOW=65535 RES=0x00 SYN URGP=0 OPT (020405840103030801010402) MARK=0x8000000 
Oct 22 19:57:07 kernel: DROP IN=ppp0 OUT= MAC= SRC=83.150.212.157 DST=MY.IP.ADD.RES LEN=40 TOS=0x00 PREC=0x00 TTL=238 ID=64570 PROTO=TCP SPT=42589 DPT=33901 SEQ=1980770617 ACK=0 WINDOW=1024 RES=0x00 SYN URGP=0 MARK=0x8000000 
Oct 22 19:57:10 kernel: DROP IN=ppp0 OUT= MAC= SRC=185.224.128.83 DST=MY.IP.ADD.RES LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=TCP SPT=54242 DPT=8080 SEQ=346631349 ACK=0 WINDOW=65535 RES=0x00 SYN URGP=0 MARK=0x8000000 
Oct 22 19:57:15 kernel: DROP IN=ppp0 OUT= MAC= SRC=149.22.89.78 DST=MY.IP.ADD.RES LEN=60 TOS=0x00 PREC=0x00 TTL=58 ID=44989 DF PROTO=TCP SPT=26387 DPT=2663 SEQ=3685796516 ACK=0 WINDOW=64240 RES=0x00 SYN URGP=0 OPT (020405B40402080A1908DFE30000000001030308) MARK=0x8000000 
Oct 22 19:57:16 kernel: DROP IN=ppp0 OUT= MAC= SRC=149.22.89.78 DST=MY.IP.ADD.RES LEN=60 TOS=0x00 PREC=0x00 TTL=58 ID=44990 DF PROTO=TCP SPT=26387 DPT=2663 SEQ=3685796516 ACK=0 WINDOW=64240 RES=0x00 SYN URGP=0 OPT (020405B40402080A1908E3E80000000001030308) MARK=0x8000000 
Oct 22 19:57:18 kernel: DROP IN=ppp0 OUT= MAC= SRC=149.22.89.78 DST=MY.IP.ADD.RES LEN=60 TOS=0x00 PREC=0x00 TTL=58 ID=44991 DF PROTO=TCP SPT=26387 DPT=2663 SEQ=3685796516 ACK=0 WINDOW=64240 RES=0x00 SYN URGP=0 OPT (020405B40402080A1908EBC80000000001030308) MARK=0x8000000 
Oct 22 19:57:23 kernel: DROP IN=ppp0 OUT= MAC= SRC=149.22.89.78 DST=MY.IP.ADD.RES LEN=60 TOS=0x00 PREC=0x00 TTL=58 ID=44992 DF PROTO=TCP SPT=26387 DPT=2663 SEQ=3685796516 ACK=0 WINDOW=64240 RES=0x00 SYN URGP=0 OPT (020405B40402080A1908FC480000000001030308) MARK=0x8000000 
Oct 22 19:57:31 kernel: DROP IN=ppp0 OUT= MAC= SRC=38.180.188.216 DST=MY.IP.ADD.RES LEN=101 TOS=0x00 PREC=0x00 TTL=52 ID=28829 DF PROTO=TCP SPT=6698 DPT=49756 SEQ=3270670966 ACK=1630352508 WINDOW=510 RES=0x00 ACK PSH URGP=0 OPT (0101080A5B2B6E5601067967) MARK=0x8000000 
Oct 22 19:57:40 kernel: DROP IN=ppp0 OUT= MAC= SRC=95.214.27.41 DST=MY.IP.ADD.RES LEN=67 TOS=0x00 PREC=0x00 TTL=248 ID=54321 PROTO=UDP SPT=43581 DPT=53 LEN=47 MARK=0x8000000 
Oct 22 19:57:40 kernel: DROP IN=ppp0 OUT= MAC= SRC=103.69.224.54 DST=MY.IP.ADD.RES LEN=60 TOS=0x00 PREC=0x00 TTL=59 ID=35173 DF PROTO=TCP SPT=1068 DPT=4721 SEQ=754917176 ACK=0 WINDOW=64240 RES=0x00 SYN URGP=0 OPT (020405B40402080ACA30844A0000000001030308) MARK=0x8000000 
Oct 22 19:57:41 kernel: DROP IN=ppp0 OUT= MAC= SRC=103.69.224.54 DST=MY.IP.ADD.RES LEN=60 TOS=0x00 PREC=0x00 TTL=59 ID=35174 DF PROTO=TCP SPT=1068 DPT=4721 SEQ=754917176 ACK=0 WINDOW=64240 RES=0x00 SYN URGP=0 OPT (020405B40402080ACA30883F0000000001030308) MARK=0x8000000 
Oct 22 19:57:43 kernel: DROP IN=ppp0 OUT= MAC= SRC=103.69.224.54 DST=MY.IP.ADD.RES LEN=60 TOS=0x00 PREC=0x00 TTL=59 ID=35175 DF PROTO=TCP SPT=1068 DPT=4721 SEQ=754917176 ACK=0 WINDOW=64240 RES=0x00 SYN URGP=0 OPT (020405B40402080ACA30901F0000000001030308) MARK=0x8000000 
Oct 22 19:57:43 kernel: DROP IN=ppp0 OUT= MAC= SRC=80.82.70.133 DST=MY.IP.ADD.RES LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=57954 PROTO=TCP SPT=60000 DPT=500 SEQ=2130031352 ACK=0 WINDOW=1024 RES=0x00 SYN URGP=0 MARK=0x8000000 
Oct 22 19:57:45 kernel: DROP IN=ppp0 OUT= MAC= SRC=185.242.226.84 DST=MY.IP.ADD.RES LEN=44 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=TCP SPT=53913 DPT=7202 SEQ=4114494909 ACK=0 WINDOW=65535 RES=0x00 SYN URGP=0 OPT (020405B4) MARK=0x8000000 
Oct 22 19:57:47 kernel: DROP IN=ppp0 OUT= MAC= SRC=103.69.224.54 DST=MY.IP.ADD.RES LEN=60 TOS=0x00 PREC=0x00 TTL=59 ID=35176 DF PROTO=TCP SPT=1068 DPT=4721 SEQ=754917176 ACK=0 WINDOW=64240 RES=0x00 SYN URGP=0 OPT (020405B40402080ACA30A0BB0000000001030308) MARK=0x8000000 
Oct 22 19:57:48 kernel: DROP IN=ppp0 OUT= MAC= SRC=149.154.167.91 DST=MY.IP.ADD.RES LEN=52 TOS=0x00 PREC=0x00 TTL=56 ID=15288 DF PROTO=TCP SPT=443 DPT=52456 SEQ=2060725704 ACK=331770079 WINDOW=2119 RES=0x00 ACK URGP=0 OPT (0101080A55E3BFC77E770AED) MARK=0x8000000 
Oct 22 19:57:48 kernel: DROP IN=ppp0 OUT= MAC= SRC=142.250.102.188 DST=MY.IP.ADD.RES LEN=76 TOS=0x00 PREC=0x80 TTL=124 ID=54198 PROTO=TCP SPT=5228 DPT=56162 SEQ=3009010497 ACK=1342631172 WINDOW=1050 RES=0x00 ACK PSH URGP=0 OPT (0101080A7728E1AAAEF045DB) MARK=0x8000000 
Oct 22 19:57:48 kernel: DROP IN=ppp0 OUT= MAC= SRC=142.250.102.188 DST=MY.IP.ADD.RES LEN=76 TOS=0x00 PREC=0x80 TTL=124 ID=54199 PROTO=TCP SPT=5228 DPT=56162 SEQ=3009010497 ACK=1342631172 WINDOW=1050 RES=0x00 ACK PSH URGP=0 OPT (0101080A7728E324AEF045DB) MARK=0x8000000 
Oct 22 19:57:49 kernel: DROP IN=ppp0 OUT= MAC= SRC=142.250.102.188 DST=MY.IP.ADD.RES LEN=76 TOS=0x00 PREC=0x80 TTL=124 ID=54200 PROTO=TCP SPT=5228 DPT=56162 SEQ=3009010497 ACK=1342631172 WINDOW=1050 RES=0x00 ACK PSH URGP=0 OPT (0101080A7728E564AEF045DB) MARK=0x8000000 
Oct 22 19:57:50 kernel: DROP IN=ppp0 OUT= MAC= SRC=142.250.102.188 DST=MY.IP.ADD.RES LEN=76 TOS=0x00 PREC=0x80 TTL=124 ID=54201 PROTO=TCP SPT=5228 DPT=56162 SEQ=3009010497 ACK=1342631172 WINDOW=1050 RES=0x00 ACK PSH URGP=0 OPT (0101080A7728E9E4AEF045DB) MARK=0x8000000 
Oct 22 19:57:52 kernel: DROP IN=ppp0 OUT= MAC= SRC=142.250.102.188 DST=MY.IP.ADD.RES LEN=76 TOS=0x00 PREC=0x80 TTL=124 ID=54202 PROTO=TCP SPT=5228 DPT=56162 SEQ=3009010497 ACK=1342631172 WINDOW=1050 RES=0x00 ACK PSH URGP=0 OPT (0101080A7728F2E4AEF045DB) MARK=0x8000000 
Oct 22 19:57:55 kernel: DROP IN=ppp0 OUT= MAC= SRC=95.214.27.30 DST=MY.IP.ADD.RES LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=54321 PROTO=TCP SPT=44243 DPT=5678 SEQ=1521938929 ACK=0 WINDOW=65535 RES=0x00 SYN URGP=0 MARK=0x8000000 
Oct 22 19:57:58 kernel: DROP IN=ppp0 OUT= MAC= SRC=142.250.102.188 DST=MY.IP.ADD.RES LEN=76 TOS=0x00 PREC=0x80 TTL=124 ID=54203 PROTO=TCP SPT=5228 DPT=56162 SEQ=3009010497 ACK=1342631172 WINDOW=1050 RES=0x00 ACK PSH URGP=0 OPT (0101080A772906A4AEF045DB) MARK=0x8000000 
Oct 22 19:58:07 kernel: DROP IN=ppp0 OUT= MAC= SRC=142.250.102.188 DST=MY.IP.ADD.RES LEN=76 TOS=0x00 PREC=0x80 TTL=124 ID=54204 PROTO=TCP SPT=5228 DPT=56162 SEQ=3009010497 ACK=1342631172 WINDOW=1050 RES=0x00 ACK PSH URGP=0 OPT (0101080A77292AA4AEF045DB) MARK=0x8000000 
Oct 22 19:58:12 kernel: DROP IN=ppp0 OUT= MAC= SRC=193.163.125.40 DST=MY.IP.ADD.RES LEN=44 TOS=0x08 PREC=0x20 TTL=246 ID=8253 PROTO=TCP SPT=51254 DPT=9521 SEQ=1782820152 ACK=0 WINDOW=14600 RES=0x00 SYN URGP=0 OPT (020405B4) MARK=0x8000000 
Oct 22 19:58:15 kernel: DROP IN=ppp0 OUT= MAC= SRC=144.126.197.43 DST=MY.IP.ADD.RES LEN=91 TOS=0x00 PREC=0x00 TTL=50 ID=40024 DF PROTO=UDP SPT=34220 DPT=1434 LEN=71 MARK=0x8000000 
Oct 22 19:58:15 kernel: DROP IN=ppp0 OUT= MAC= SRC=35.82.15.6 DST=MY.IP.ADD.RES LEN=60 TOS=0x00 PREC=0x00 TTL=119 ID=34532 DF PROTO=TCP SPT=39726 DPT=2083 SEQ=3024429217 ACK=0 WINDOW=62727 RES=0x00 SYN URGP=0 OPT (020405B40402080A0C11E5700000000001030307) MARK=0x8000000 
Oct 22 19:58:17 kernel: DROP IN=ppp0 OUT= MAC= SRC=35.82.15.6 DST=MY.IP.ADD.RES LEN=60 TOS=0x00 PREC=0x00 TTL=119 ID=34533 DF PROTO=TCP SPT=39726 DPT=2083 SEQ=3024429217 ACK=0 WINDOW=62727 RES=0x00 SYN URGP=0 OPT (020405B40402080A0C11ED500000000001030307) MARK=0x8000000 
Oct 22 19:58:18 kernel: DROP IN=ppp0 OUT= MAC= SRC=64.62.197.159 DST=MY.IP.ADD.RES LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=54321 PROTO=TCP SPT=52054 DPT=2000 SEQ=3439977157 ACK=0 WINDOW=65535 RES=0x00 SYN URGP=0 MARK=0x8000000 
Oct 22 19:58:20 kernel: DROP IN=ppp0 OUT= MAC= SRC=109.123.232.100 DST=MY.IP.ADD.RES LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=54321 PROTO=TCP SPT=42077 DPT=8800 SEQ=556607801 ACK=0 WINDOW=65535 RES=0x00 SYN URGP=0 MARK=0x8000000 
Oct 22 19:58:21 kernel: DROP IN=ppp0 OUT= MAC= SRC=35.82.15.6 DST=MY.IP.ADD.RES LEN=60 TOS=0x00 PREC=0x00 TTL=119 ID=34534 DF PROTO=TCP SPT=39726 DPT=2083 SEQ=3024429217 ACK=0 WINDOW=62727 RES=0x00 SYN URGP=0 OPT (020405B40402080A0C11FD700000000001030307) MARK=0x8000000 
Oct 22 19:58:25 kernel: DROP IN=ppp0 OUT= MAC= SRC=193.163.125.60 DST=MY.IP.ADD.RES LEN=44 TOS=0x00 PREC=0x00 TTL=249 ID=42317 PROTO=TCP SPT=53347 DPT=1864 SEQ=3320378534 ACK=0 WINDOW=14600 RES=0x00 SYN URGP=0 OPT (020405B4) MARK=0x8000000 
Oct 22 19:58:41 kernel: DROP IN=ppp0 OUT= MAC= SRC=173.194.69.188 DST=MY.IP.ADD.RES LEN=76 TOS=0x00 PREC=0x00 TTL=61 ID=25864 PROTO=TCP SPT=5228 DPT=46072 SEQ=132773206 ACK=697882520 WINDOW=1050 RES=0x00 ACK PSH URGP=0 OPT (0101080ABD01554638FBDCDF) MARK=0x8000000 
Oct 22 19:58:41 kernel: DROP IN=ppp0 OUT= MAC= SRC=173.194.69.188 DST=MY.IP.ADD.RES LEN=76 TOS=0x00 PREC=0x00 TTL=61 ID=25865 PROTO=TCP SPT=5228 DPT=46072 SEQ=132773206 ACK=697882520 WINDOW=1050 RES=0x00 ACK PSH URGP=0 OPT (0101080ABD01582E38FBDCDF) MARK=0x8000000 
Oct 22 19:58:43 kernel: DROP IN=ppp0 OUT= MAC= SRC=52.221.214.244 DST=MY.IP.ADD.RES LEN=40 TOS=0x00 PREC=0x00 TTL=55 ID=9568 DF PROTO=TCP SPT=61123 DPT=8058 SEQ=426366464 ACK=0 WINDOW=64240 RES=0x00 SYN URGP=0 MARK=0x8000000 

Oct 22 19:59:27 kernel: DROP IN=ppp0 OUT= MAC= SRC=92.119.178.3 DST=MY.IP.ADD.RES LEN=60 TOS=0x00 PREC=0x00 TTL=53 ID=22646 DF PROTO=TCP SPT=58549 DPT=25947 SEQ=1758799947 ACK=0 WINDOW=14600 RES=0x00 SYN URGP=0 OPT (0204054D0402080A7FEE8BA00000000001030307) MARK=0x8000000 
Oct 22 19:59:27 kernel: DROP IN=ppp0 OUT= MAC= SRC=173.194.69.188 DST=MY.IP.ADD.RES LEN=76 TOS=0x00 PREC=0x00 TTL=61 ID=25870 PROTO=TCP SPT=5228 DPT=46072 SEQ=132773206 ACK=697882520 WINDOW=1050 RES=0x00 ACK PSH URGP=0 OPT (0101080ABD020B2E38FBDCDF) MARK=0x8000000 
Oct 22 19:59:32 kernel: DROP IN=ppp0 OUT= MAC= SRC=185.36.81.140 DST=MY.IP.ADD.RES LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=65120 PROTO=TCP SPT=59199 DPT=50922 SEQ=426797540 ACK=0 WINDOW=1024 RES=0x00 SYN URGP=0 MARK=0x8000000 
Oct 22 19:59:35 kernel: DROP IN=ppp0 OUT= MAC= SRC=92.119.178.3 DST=MY.IP.ADD.RES LEN=60 TOS=0x00 PREC=0x00 TTL=53 ID=22647 DF PROTO=TCP SPT=58549 DPT=25947 SEQ=1758799947 ACK=0 WINDOW=14600 RES=0x00 SYN URGP=0 OPT (0204054D0402080A7FEEAAF00000000001030307) MARK=0x8000000 
Oct 22 19:59:36 kernel: DROP IN=ppp0 OUT= MAC= SRC=87.120.115.169 DST=MY.IP.ADD.RES LEN=76 TOS=0x00 PREC=0x00 TTL=247 ID=54321 PROTO=UDP SPT=37248 DPT=123 LEN=56 MARK=0x8000000 
Oct 22 19:59:38 kernel: DROP IN=ppp0 OUT= MAC= SRC=167.94.146.17 DST=MY.IP.ADD.RES LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=7361 PROTO=TCP SPT=50937 DPT=8880 SEQ=4251568943 ACK=0 WINDOW=42340 RES=0x00 SYN URGP=0 OPT (020405B40402080A670D5759000000000103030A) MARK=0x8000000 
Oct 22 19:59:44 kernel: DROP IN=ppp0 OUT= MAC= SRC=178.249.210.23 DST=MY.IP.ADD.RES LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=10721 DF PROTO=TCP SPT=58475 DPT=7270 SEQ=1982108190 ACK=0 WINDOW=64240 RES=0x00 SYN URGP=0 OPT (020405B40402080A4496940A0000000001030308) MARK=0x8000000 
Oct 22 19:59:45 kernel: DROP IN=ppp0 OUT= MAC= SRC=178.249.210.23 DST=MY.IP.ADD.RES LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=10722 DF PROTO=TCP SPT=58475 DPT=7270 SEQ=1982108190 ACK=0 WINDOW=64240 RES=0x00 SYN URGP=0 OPT (020405B40402080A449697F90000000001030308) MARK=0x8000000 
Oct 22 19:59:47 kernel: DROP IN=ppp0 OUT= MAC= SRC=178.249.210.23 DST=MY.IP.ADD.RES LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=10723 DF PROTO=TCP SPT=58475 DPT=7270 SEQ=1982108190 ACK=0 WINDOW=64240 RES=0x00 SYN URGP=0 OPT (020405B40402080A44969FD90000000001030308) MARK=0x8000000 
Oct 22 19:59:52 kernel: DROP IN=ppp0 OUT= MAC= SRC=178.249.210.23 DST=MY.IP.ADD.RES LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=10724 DF PROTO=TCP SPT=58475 DPT=7270 SEQ=1982108190 ACK=0 WINDOW=64240 RES=0x00 SYN URGP=0 OPT (020405B40402080A4496AFF90000000001030308) MARK=0x8000000 

Oct 22 20:00:32 kernel: DROP IN=ppp0 OUT= MAC= SRC=35.94.105.123 DST=MY.IP.ADD.RES LEN=60 TOS=0x00 PREC=0x00 TTL=119 ID=9091 DF PROTO=TCP SPT=39744 DPT=10000 SEQ=1775583781 ACK=0 WINDOW=62727 RES=0x00 SYN URGP=0 OPT (020405B40402080A145FDAC50000000001030307) MARK=0x8000000 
Oct 22 20:00:33 kernel: DROP IN=ppp0 OUT= MAC= SRC=35.94.105.123 DST=MY.IP.ADD.RES LEN=60 TOS=0x00 PREC=0x00 TTL=119 ID=9092 DF PROTO=TCP SPT=39744 DPT=10000 SEQ=1775583781 ACK=0 WINDOW=62727 RES=0x00 SYN URGP=0 OPT (020405B40402080A145FDEBB0000000001030307) MARK=0x8000000 
Oct 22 20:00:35 kernel: DROP IN=ppp0 OUT= MAC= SRC=35.94.105.123 DST=MY.IP.ADD.RES LEN=60 TOS=0x00 PREC=0x00 TTL=119 ID=9093 DF PROTO=TCP SPT=39744 DPT=10000 SEQ=1775583781 ACK=0 WINDOW=62727 RES=0x00 SYN URGP=0 OPT (020405B40402080A145FE69B0000000001030307) MARK=0x8000000 
Oct 22 20:00:37 kernel: DROP IN=ppp0 OUT= MAC= SRC=14.55.118.149 DST=MY.IP.ADD.RES LEN=40 TOS=0x00 PREC=0x00 TTL=50 ID=44422 PROTO=TCP SPT=51164 DPT=23 SEQ=1386762606 ACK=0 WINDOW=54732 RES=0x00 SYN URGP=0 MARK=0x8000000 
Oct 22 20:00:40 kernel: DROP IN=ppp0 OUT= MAC= SRC=35.94.105.123 DST=MY.IP.ADD.RES LEN=60 TOS=0x00 PREC=0x00 TTL=119 ID=9094 DF PROTO=TCP SPT=39744 DPT=10000 SEQ=1775583781 ACK=0 WINDOW=62727 RES=0x00 SYN URGP=0 OPT (020405B40402080A145FF71B0000000001030307) MARK=0x8000000 
Oct 22 20:00:46 kernel: DROP IN=ppp0 OUT= MAC= SRC=79.124.62.62 DST=MY.IP.ADD.RES LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=59751 PROTO=TCP SPT=42237 DPT=3389 SEQ=3214718260 ACK=0 WINDOW=1024 RES=0x00 SYN URGP=0 MARK=0x8000000 
Oct 22 20:00:46 kernel: DROP IN=ppp0 OUT= MAC= SRC=185.234.216.161 DST=MY.IP.ADD.RES LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=6430 PROTO=TCP SPT=46083 DPT=2236 SEQ=3179692236 ACK=0 WINDOW=1024 RES=0x00 SYN URGP=0 MARK=0x8000000 

Oct 22 20:03:10 kernel: DROP IN=ppp0 OUT= MAC= SRC=38.180.188.216 DST=MY.IP.ADD.RES LEN=101 TOS=0x00 PREC=0x00 TTL=52 ID=6557 DF PROTO=TCP SPT=3481 DPT=39687 SEQ=1980439235 ACK=1791969316 WINDOW=510 RES=0x00 ACK PSH URGP=0 OPT (0101080A5B309A52010B5A85) MARK=0x8000000 
Oct 22 20:03:15 kernel: DROP IN=ppp0 OUT= MAC= SRC=206.168.34.148 DST=MY.IP.ADD.RES LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=58420 PROTO=TCP SPT=59255 DPT=55107 SEQ=1151877961 ACK=0 WINDOW=42340 RES=0x00 SYN URGP=0 OPT (020405B40402080A6712D518000000000103030A) MARK=0x8000000 
Oct 22 20:03:19 kernel: DROP IN=eth0 OUT= MAC=01:00:5e:00:00:01:5c:dc:96:d9:3d:a6:08:00 SRC=192.168.2.254 DST=224.0.0.1 LEN=36 TOS=0x00 PREC=0x00 TTL=1 ID=750 OPT (94040000) PROTO=2 MARK=0x8000000 
Oct 22 20:03:30 kernel: DROP IN=ppp0 OUT= MAC= SRC=173.194.69.188 DST=MY.IP.ADD.RES LEN=76 TOS=0x00 PREC=0x80 TTL=124 ID=51806 PROTO=TCP SPT=5228 DPT=53934 SEQ=3226101835 ACK=2030204389 WINDOW=1050 RES=0x00 ACK PSH URGP=0 OPT (0101080AD1EBCDE63901352B) MARK=0x8000000 
Oct 22 20:03:30 kernel: DROP IN=ppp0 OUT= MAC= SRC=173.194.69.188 DST=MY.IP.ADD.RES LEN=76 TOS=0x00 PREC=0x80 TTL=124 ID=51807 PROTO=TCP SPT=5228 DPT=53934 SEQ=3226101835 ACK=2030204389 WINDOW=1050 RES=0x00 ACK PSH URGP=0 OPT (0101080AD1EBCECC3901352B) MARK=0x8000000 
Oct 22 20:03:30 kernel: DROP IN=ppp0 OUT= MAC= SRC=173.194.69.188 DST=MY.IP.ADD.RES LEN=76 TOS=0x00 PREC=0x80 TTL=124 ID=51808 PROTO=TCP SPT=5228 DPT=53934 SEQ=3226101835 ACK=2030204389 WINDOW=1050 RES=0x00 ACK PSH URGP=0 OPT (0101080AD1EBCFB43901352B) MARK=0x8000000 
Oct 22 20:03:31 kernel: DROP IN=ppp0 OUT= MAC= SRC=173.194.69.188 DST=MY.IP.ADD.RES LEN=76 TOS=0x00 PREC=0x80 TTL=124 ID=51809 PROTO=TCP SPT=5228 DPT=53934 SEQ=3226101835 ACK=2030204389 WINDOW=1050 RES=0x00 ACK PSH URGP=0 OPT (0101080AD1EBD1843901352B) MARK=0x8000000 
Oct 22 20:03:31 kernel: DROP IN=ppp0 OUT= MAC= SRC=85.209.11.79 DST=MY.IP.ADD.RES LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=32671 PROTO=TCP SPT=51628 DPT=2207 SEQ=2074486382 ACK=0 WINDOW=1024 RES=0x00 SYN URGP=0 MARK=0x8000000 
Oct 22 20:03:32 kernel: DROP IN=ppp0 OUT= MAC= SRC=173.194.69.188 DST=MY.IP.ADD.RES LEN=76 TOS=0x00 PREC=0x80 TTL=124 ID=51810 PROTO=TCP SPT=5228 DPT=53934 SEQ=3226101835 ACK=2030204389 WINDOW=1050 RES=0x00 ACK PSH URGP=0 OPT (0101080AD1EBD53C3901352B) MARK=0x8000000 
Oct 22 20:03:34 kernel: DROP IN=ppp0 OUT= MAC= SRC=173.194.69.188 DST=MY.IP.ADD.RES LEN=76 TOS=0x00 PREC=0x80 TTL=124 ID=51811 PROTO=TCP SPT=5228 DPT=53934 SEQ=3226101835 ACK=2030204389 WINDOW=1050 RES=0x00 ACK PSH URGP=0 OPT (0101080AD1EBDC7C3901352B) MARK=0x8000000 
Oct 22 20:03:37 kernel: DROP IN=ppp0 OUT= MAC= SRC=173.194.69.188 DST=MY.IP.ADD.RES LEN=76 TOS=0x00 PREC=0x80 TTL=124 ID=51812 PROTO=TCP SPT=5228 DPT=53934 SEQ=3226101835 ACK=2030204389 WINDOW=1050 RES=0x00 ACK PSH URGP=0 OPT (0101080AD1EBEAFC3901352B) MARK=0x8000000 
Oct 22 20:03:38 kernel: DROP IN=ppp0 OUT= MAC= SRC=95.214.27.169 DST=MY.IP.ADD.RES LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=54321 PROTO=TCP SPT=45086 DPT=8080 SEQ=2998809963 ACK=0 WINDOW=65535 RES=0x00 SYN URGP=0 MARK=0x8000000 
Oct 22 20:03:42 kernel: DROP IN=ppp0 OUT= MAC= SRC=38.180.188.216 DST=MY.IP.ADD.RES LEN=101 TOS=0x00 PREC=0x00 TTL=52 ID=6558 DF PROTO=TCP SPT=3481 DPT=39687 SEQ=1980439235 ACK=1791969316 WINDOW=510 RES=0x00 ACK PSH URGP=0 OPT (0101080A5B311652010B5A85) MARK=0x8000000 
Oct 22 20:03:45 kernel: DROP IN=ppp0 OUT= MAC= SRC=173.194.69.188 DST=MY.IP.ADD.RES LEN=76 TOS=0x00 PREC=0x80 TTL=124 ID=51813 PROTO=TCP SPT=5228 DPT=53934 SEQ=3226101835 ACK=2030204389 WINDOW=1050 RES=0x00 ACK PSH URGP=0 OPT (0101080AD1EC083C3901352B) MARK=0x8000000 
Oct 22 20:03:48 kernel: DROP IN=ppp0 OUT= MAC= SRC=45.84.89.2 DST=MY.IP.ADD.RES LEN=52 TOS=0x00 PREC=0x00 TTL=47 ID=0 PROTO=TCP SPT=63146 DPT=8000 SEQ=1253375757 ACK=0 WINDOW=65535 RES=0x00 SYN URGP=0 OPT (020405840103030801010402) MARK=0x8000000 
Oct 22 20:03:54 kernel: DROP IN=ppp0 OUT= MAC= SRC=45.147.250.208 DST=MY.IP.ADD.RES LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=TCP SPT=54367 DPT=4643 SEQ=694688737 ACK=0 WINDOW=65535 RES=0x00 SYN URGP=0 MARK=0x8000000 
Oct 22 20:03:59 kernel: DROP IN=ppp0 OUT= MAC= SRC=3.141.165.160 DST=MY.IP.ADD.RES LEN=52 TOS=0x00 PREC=0x00 TTL=55 ID=20808 PROTO=TCP SPT=43253 DPT=7485 SEQ=757462636 ACK=0 WINDOW=65535 RES=0x00 SYN URGP=0 OPT (020405B40103030801010402) MARK=0x8000000 
Oct 22 20:03:59 kernel: DROP IN=ppp0 OUT= MAC= SRC=83.150.212.157 DST=MY.IP.ADD.RES LEN=40 TOS=0x00 PREC=0x00 TTL=238 ID=1745 PROTO=TCP SPT=42589 DPT=3195 SEQ=2814008260 ACK=0 WINDOW=1024 RES=0x00 SYN URGP=0 MARK=0x8000000 
Oct 22 20:04:00 kernel: DROP IN=ppp0 OUT= MAC= SRC=173.194.69.188 DST=MY.IP.ADD.RES LEN=76 TOS=0x00 PREC=0x80 TTL=124 ID=51814 PROTO=TCP SPT=5228 DPT=53934 SEQ=3226101835 ACK=2030204389 WINDOW=1050 RES=0x00 ACK PSH URGP=0 OPT (0101080AD1EC423C3901352B) MARK=0x8000000 
Oct 22 20:04:07 kernel: DROP IN=ppp0 OUT= MAC= SRC=149.154.167.91 DST=MY.IP.ADD.RES LEN=52 TOS=0x00 PREC=0x00 TTL=56 ID=15293 DF PROTO=TCP SPT=443 DPT=52456 SEQ=2060725704 ACK=331770079 WINDOW=2119 RES=0x00 ACK URGP=0 OPT (0101080A55E987C77E770AED) MARK=0x8000000 
Oct 22 20:04:18 kernel: DROP IN=ppp0 OUT= MAC= SRC=193.41.206.142 DST=MY.IP.ADD.RES LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=TCP SPT=44910 DPT=8728 SEQ=1449247781 ACK=0 WINDOW=65535 RES=0x00 SYN URGP=0 MARK=0x8000000 

Oct 22 20:05:26 kernel: DROP IN=ppp0 OUT= MAC= SRC=3.125.234.101 DST=MY.IP.ADD.RES LEN=350 TOS=0x00 PREC=0x00 TTL=250 ID=13523 DF PROTO=TCP SPT=443 DPT=44259 SEQ=368125515 ACK=2082792040 WINDOW=131 RES=0x00 ACK PSH URGP=0 OPT (0101080AB51323D644A3117B) MARK=0x8000000 
Oct 22 20:05:27 kernel: DROP IN=ppp0 OUT= MAC= SRC=123.193.145.57 DST=MY.IP.ADD.RES LEN=40 TOS=0x00 PREC=0x00 TTL=46 ID=16196 PROTO=TCP SPT=52012 DPT=23 SEQ=1386762606 ACK=0 WINDOW=45908 RES=0x00 SYN URGP=0 MARK=0x8000000 
Oct 22 20:05:29 kernel: DROP IN=ppp0 OUT= MAC= SRC=178.78.62.245 DST=MY.IP.ADD.RES LEN=52 TOS=0x00 PREC=0x00 TTL=117 ID=20017 DF PROTO=TCP SPT=6187 DPT=4721 SEQ=1574867570 ACK=0 WINDOW=64240 RES=0x00 SYN URGP=0 OPT (020405B40103030801010402) MARK=0x8000000 
Oct 22 20:05:30 kernel: DROP IN=ppp0 OUT= MAC= SRC=178.78.62.245 DST=MY.IP.ADD.RES LEN=52 TOS=0x00 PREC=0x00 TTL=117 ID=20018 DF PROTO=TCP SPT=6187 DPT=4721 SEQ=1574867570 ACK=0 WINDOW=64240 RES=0x00 SYN URGP=0 OPT (020405B40103030801010402) MARK=0x8000000 
Oct 22 20:05:32 kernel: DROP IN=ppp0 OUT= MAC= SRC=178.78.62.245 DST=MY.IP.ADD.RES LEN=52 TOS=0x00 PREC=0x00 TTL=117 ID=20019 DF PROTO=TCP SPT=6187 DPT=4721 SEQ=1574867570 ACK=0 WINDOW=64240 RES=0x00 SYN URGP=0 OPT (020405B40103030801010402) MARK=0x8000000 
Oct 22 20:05:36 kernel: DROP IN=ppp0 OUT= MAC= SRC=178.78.62.245 DST=MY.IP.ADD.RES LEN=52 TOS=0x00 PREC=0x00 TTL=117 ID=20020 DF PROTO=TCP SPT=6187 DPT=4721 SEQ=1574867570 ACK=0 WINDOW=64240 RES=0x00 SYN URGP=0 OPT (020405B40103030801010402) MARK=0x8000000 
Oct 22 20:05:44 kernel: DROP IN=ppp0 OUT= MAC= SRC=178.78.62.245 DST=MY.IP.ADD.RES LEN=52 TOS=0x00 PREC=0x00 TTL=117 ID=20021 DF PROTO=TCP SPT=6187 DPT=4721 SEQ=1574867570 ACK=0 WINDOW=64240 RES=0x00 SYN URGP=0 OPT (020405B40103030801010402) MARK=0x8000000 

Oct 22 20:06:06 kernel: DROP IN=ppp0 OUT= MAC= SRC=51.8.223.186 DST=MY.IP.ADD.RES LEN=40 TOS=0x00 PREC=0x00 TTL=236 ID=54321 PROTO=TCP SPT=34612 DPT=992 SEQ=4268587791 ACK=0 WINDOW=65535 RES=0x00 SYN URGP=0 MARK=0x8000000 
Oct 22 20:06:10 kernel: DROP IN=ppp0 OUT= MAC= SRC=178.249.214.69 DST=MY.IP.ADD.RES LEN=60 TOS=0x08 PREC=0x20 TTL=52 ID=59826 DF PROTO=TCP SPT=50907 DPT=39937 SEQ=1456093870 ACK=0 WINDOW=64240 RES=0x00 SYN URGP=0 OPT (020405B40402080AC6BFE3540000000001030308) MARK=0x8000000 
Oct 22 20:06:11 kernel: DROP IN=ppp0 OUT= MAC= SRC=178.249.214.69 DST=MY.IP.ADD.RES LEN=60 TOS=0x08 PREC=0x20 TTL=52 ID=59827 DF PROTO=TCP SPT=50907 DPT=39937 SEQ=1456093870 ACK=0 WINDOW=64240 RES=0x00 SYN URGP=0 OPT (020405B40402080AC6BFE74E0000000001030308) MARK=0x8000000 
Oct 22 20:06:11 kernel: DROP IN=ppp0 OUT= MAC= SRC=80.66.83.47 DST=MY.IP.ADD.RES LEN=44 TOS=0x00 PREC=0x00 TTL=246 ID=19202 PROTO=TCP SPT=54638 DPT=32479 SEQ=1671652531 ACK=0 WINDOW=1025 RES=0x00 SYN URGP=0 OPT (020405B4) MARK=0x8000000 
Oct 22 20:06:13 kernel: DROP IN=ppp0 OUT= MAC= SRC=178.249.214.69 DST=MY.IP.ADD.RES LEN=60 TOS=0x08 PREC=0x20 TTL=52 ID=59828 DF PROTO=TCP SPT=50907 DPT=39937 SEQ=1456093870 ACK=0 WINDOW=64240 RES=0x00 SYN URGP=0 OPT (020405B40402080AC6BFEF2E0000000001030308) MARK=0x8000000 
Oct 22 20:06:13 kernel: DROP IN=ppp0 OUT= MAC= SRC=45.80.184.145 DST=MY.IP.ADD.RES LEN=52 TOS=0x00 PREC=0x00 TTL=117 ID=22641 DF PROTO=TCP SPT=45334 DPT=4721 SEQ=2186710479 ACK=0 WINDOW=64860 RES=0x00 SYN URGP=0 OPT (020405640103030801010402) MARK=0x8000000 
Oct 22 20:06:17 kernel: DROP IN=ppp0 OUT= MAC= SRC=178.249.214.69 DST=MY.IP.ADD.RES LEN=60 TOS=0x08 PREC=0x20 TTL=52 ID=59829 DF PROTO=TCP SPT=50907 DPT=39937 SEQ=1456093870 ACK=0 WINDOW=64240 RES=0x00 SYN URGP=0 OPT (020405B40402080AC6BFFFAE0000000001030308) MARK=0x8000000 
Oct 22 20:06:21 kernel: DROP IN=ppp0 OUT= MAC= SRC=206.168.34.146 DST=MY.IP.ADD.RES LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=45954 PROTO=TCP SPT=63126 DPT=28484 SEQ=3984776629 ACK=0 WINDOW=42340 RES=0x00 SYN URGP=0 OPT (020405B40402080A6712D518000000000103030A) MARK=0x8000000 
Oct 22 20:06:24 kernel: DROP IN=ppp0 OUT= MAC= SRC=179.43.133.162 DST=MY.IP.ADD.RES LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=54321 PROTO=TCP SPT=53257 DPT=9443 SEQ=2287601193 ACK=0 WINDOW=65535 RES=0x00 SYN URGP=0 MARK=0x8000000 
Oct 22 20:06:27 kernel: DROP IN=ppp0 OUT= MAC= SRC=47.250.143.9 DST=MY.IP.ADD.RES LEN=52 TOS=0x00 PREC=0x00 TTL=52 ID=29068 DF PROTO=TCP SPT=30092 DPT=9206 SEQ=3646140270 ACK=0 WINDOW=61690 RES=0x00 SYN URGP=0 OPT (020405B40103030801010402) MARK=0x8000000 
Oct 22 20:06:30 kernel: DROP IN=ppp0 OUT= MAC= SRC=165.227.166.3 DST=MY.IP.ADD.RES LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=47337 PROTO=TCP SPT=55628 DPT=29001 SEQ=3790379214 ACK=0 WINDOW=1024 RES=0x00 SYN URGP=0 MARK=0x8000000 
Oct 22 20:06:39 kernel: DROP IN=ppp0 OUT= MAC= SRC=173.194.69.188 DST=MY.IP.ADD.RES LEN=76 TOS=0x00 PREC=0x80 TTL=124 ID=6460 PROTO=TCP SPT=5228 DPT=57880 SEQ=3261756507 ACK=2759095671 WINDOW=1050 RES=0x00 ACK PSH URGP=0 OPT (0101080A5E38515EB9854703) MARK=0x8000000 
Oct 22 20:06:39 kernel: DROP IN=ppp0 OUT= MAC= SRC=173.194.69.188 DST=MY.IP.ADD.RES LEN=76 TOS=0x00 PREC=0x80 TTL=124 ID=6461 PROTO=TCP SPT=5228 DPT=57880 SEQ=3261756507 ACK=2759095671 WINDOW=1050 RES=0x00 ACK PSH URGP=0 OPT (0101080A5E38523FB9854703) MARK=0x8000000 
Oct 22 20:06:40 kernel: DROP IN=ppp0 OUT= MAC= SRC=173.194.69.188 DST=MY.IP.ADD.RES LEN=76 TOS=0x00 PREC=0x80 TTL=124 ID=6462 PROTO=TCP SPT=5228 DPT=57880 SEQ=3261756507 ACK=2759095671 WINDOW=1050 RES=0x00 ACK PSH URGP=0 OPT (0101080A5E38531FB9854703) MARK=0x8000000 
Oct 22 20:06:40 kernel: DROP IN=ppp0 OUT= MAC= SRC=173.194.69.188 DST=MY.IP.ADD.RES LEN=76 TOS=0x00 PREC=0x80 TTL=124 ID=6463 PROTO=TCP SPT=5228 DPT=57880 SEQ=3261756507 ACK=2759095671 WINDOW=1050 RES=0x00 ACK PSH URGP=0 OPT (0101080A5E3854D7B9854703) MARK=0x8000000 
Oct 22 20:06:41 kernel: DROP IN=ppp0 OUT= MAC= SRC=173.194.69.188 DST=MY.IP.ADD.RES LEN=76 TOS=0x00 PREC=0x80 TTL=124 ID=6464 PROTO=TCP SPT=5228 DPT=57880 SEQ=3261756507 ACK=2759095671 WINDOW=1050 RES=0x00 ACK PSH URGP=0 OPT (0101080A5E38585FB9854703) MARK=0x8000000 
Oct 22 20:06:43 kernel: DROP IN=ppp0 OUT= MAC= SRC=173.194.69.188 DST=MY.IP.ADD.RES LEN=76 TOS=0x00 PREC=0x80 TTL=124 ID=6465 PROTO=TCP SPT=5228 DPT=57880 SEQ=3261756507 ACK=2759095671 WINDOW=1050 RES=0x00 ACK PSH URGP=0 OPT (0101080A5E385F5FB9854703) MARK=0x8000000 
Oct 22 20:06:46 kernel: DROP IN=ppp0 OUT= MAC= SRC=173.194.69.188 DST=MY.IP.ADD.RES LEN=76 TOS=0x00 PREC=0x80 TTL=124 ID=6466 PROTO=TCP SPT=5228 DPT=57880 SEQ=3261756507 ACK=2759095671 WINDOW=1050 RES=0x00 ACK PSH URGP=0 OPT (0101080A5E386D1FB9854703) MARK=0x8000000 
Oct 22 20:06:47 kernel: DROP IN=ppp0 OUT= MAC= SRC=82.147.84.252 DST=MY.IP.ADD.RES LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=24942 PROTO=TCP SPT=40150 DPT=4437 SEQ=1840390485 ACK=0 WINDOW=1024 RES=0x00 SYN URGP=0 MARK=0x8000000 

 

Wat er opvalt dat modem in bridge mode probeert toch iets naar buiten te sturen

    Line   7: Oct 22 19:44:33 kernel: DROP IN=eth0 OUT= MAC=01:00:5e:00:00:01:5c:dc:96:d9:3d:a6:08:00 SRC=192.168.2.254 DST=224.0.0.1 LEN=36 TOS=0x00 PREC=0x00 TTL=1 ID=741 OPT (94040000) PROTO=2 MARK=0x8000000 
    Line  44: Oct 22 19:54:58 kernel: DROP IN=eth0 OUT= MAC=01:00:5e:00:00:01:5c:dc:96:d9:3d:a6:08:00 SRC=192.168.2.254 DST=224.0.0.1 LEN=36 TOS=0x00 PREC=0x00 TTL=1 ID=746 OPT (94040000) PROTO=2 MARK=0x8000000 
    Line  51: Oct 22 19:57:04 kernel: DROP IN=eth0 OUT= MAC=01:00:5e:00:00:01:5c:dc:96:d9:3d:a6:08:00 SRC=192.168.2.254 DST=224.0.0.1 LEN=36 TOS=0x00 PREC=0x00 TTL=1 ID=747 OPT (94040000) PROTO=2 MARK=0x8000000 
    Line 109: Oct 22 20:03:19 kernel: DROP IN=eth0 OUT= MAC=01:00:5e:00:00:01:5c:dc:96:d9:3d:a6:08:00 SRC=192.168.2.254 DST=224.0.0.1 LEN=36 TOS=0x00 PREC=0x00 TTL=1 ID=750 OPT (94040000) PROTO=2 MARK=0x8000000 

 

Deze situatie komt nu aantaal keren per daag voor

 

Enig idee wat er moet gebeuren?

Modem weer gereset.

Liet een nachtje alleen staan in de hoop voor update. In de logs zie ik dat ie meerdere keren heeft controles gedaan voor update. Ik heb dus de laatste software versie.

Dan weer in bridge gezet.

Geen verandering.


Hoi @SM_B. Welkom op de community! Wat vervelend dat jouw internetverbinding onstabiel is. Heb je de Online Servicetool al eens gebruikt om dit probleem te verhelpen. Op deze manier kan je op afstand jouw verbinding laten controleren. Als dit het probleem niet verhelpt kan je het beste contact opnemen met onze klantenservice, dan zoeken zij samen met jou naar een passende oplossing. 

 


Hoi Vikash.

Ik heb de Online Servicetool  geprobeerd, die geeft aan dat verbinding in oorde is.

Ik heb verder modem nogmals meerdere keren gereset en van mijn netwerk losgekoppeld. In het weekend getest. Het lijkt op dat eerst alles goed gaat maar na een bepalde tijd snelheid en bereikbaarheid omlaag gaan.

Ook upload ziet er vreemd uit tot 1000Mbit/s met mijn lijn 20/5 nu.

Modem zelf geeft veel upload errors

 


Maar nu komen nog andere bevindingen.

Ik keek in mijn router welke processen CPU belasten, en zag ene vreemde /var/Sofia

 

En die kwam ik weer tegen bij Bitdefender-PR-Whitepaper-DarkNexus

 

Ik heb mijn router deze weken al zeker tien keer volledig gereset met jffs en nvram erase. En het is vreemd om dat te zien.

 

Ik gan nu in deze richting uitzoeken.

 

Ik hoop dat dat spul niet in jullie modem zit.


Topic mag dicht.

 

Het was inderdaad inbraak bij mijn Asus router dat al dat verorzakte. Router werd in een botnet voor DDoS aanvallen gebruikt. 

Ik lees op fora dat veel asus eigenars last van hadden.


Reageer