Sikkerhedslog på TDC box


Hvis jeg kikker i min sikkerhedslog på TDC boxen, for jeg denne smøre! Hvad sker der her?

 

Et lille udklip:

Tid

Hændelse

Hænd. type

Detaljer

Feb 8 19:18:15 2011

Outbound Traffic

Blocked - NAT out failed

First packet in connection is not a SYN packet: TCP 192.168.1.11:55906->65.54.62.215:995 on eth1.101 [repeated 2 times, last time on Feb 8 19:18:15 2011]

Feb 8 19:18:03 2011

Outbound Traffic

Blocked - NAT out failed

First packet in connection is not a SYN packet: TCP 192.168.1.11:37681->65.54.62.215:995 on eth1.101 [repeated 2 times, last time on Feb 8 19:18:03 2011]

Feb 8 19:17:18 2011

WBM Login

User authentication success

Username: admin

Feb 8 19:17:08 2011

Outbound Traffic

Blocked - NAT out failed

First packet in connection is not a SYN packet: TCP 192.168.1.11:37671->74.125.77.188:5228 on eth1.101

Feb 8 19:13:19 2011

Outbound Traffic

Blocked - NAT out failed

First packet in connection is not a SYN packet: TCP 192.168.1.11:36880->65.54.62.215:995 on eth1.101 [repeated 2 times, last time on Feb 8 19:13:19 2011]

Feb 8 19:13:09 2011

Outbound Traffic

Blocked - NAT out failed

First packet in connection is not a SYN packet: TCP 192.168.1.11:41506->65.54.62.215:995 on eth1.101

Feb 8 19:11:36 2011

Outbound Traffic

Blocked - NAT out failed

First packet in connection is not a SYN packet: TCP 192.168.1.11:40954->74.125.77.188:5228 on eth1.101 [repeated 2 times, last time on Feb 8 19:11:36 2011]

Feb 8 19:08:12 2011

Outbound Traffic

Blocked - NAT out failed

First packet in connection is not a SYN packet: TCP 192.168.1.11:58260->65.55.172.253:995 on eth1.101

Feb 8 19:08:03 2011

Outbound Traffic

Blocked - NAT out failed

First packet in connection is not a SYN packet: TCP 192.168.1.11:54536->65.55.172.253:995 on eth1.101 [repeated 2 times, last time on Feb 8 19:08:03 2011]

Feb 8 19:07:48 2011

Outbound Traffic

Blocked - NAT out failed

First packet in connection is not a SYN packet: TCP 192.168.1.11:56261->195.41.46.251:110 on eth1.101

Feb 8 19:03:14 2011

Outbound Traffic

Blocked - NAT out failed

First packet in connection is not a SYN packet: TCP 192.168.1.11:37151->65.55.172.253:995 on eth1.101 [repeated 2 times, last time on Feb 8 19:03:14 2011]

Feb 8 19:03:03 2011

Outbound Traffic

Blocked - NAT out failed

First packet in connection is not a SYN packet: TCP 192.168.1.11:57523->65.55.172.253:995 on eth1.101

Feb 8 18:58:24 2011

Outbound Traffic

Blocked - NAT out failed

First packet in connection is not a SYN packet: TCP 192.168.1.11:43911->65.55.172.253:995 on eth1.101 [repeated 2 times, last time on Feb 8 18:58:24 2011]

Feb 8 18:58:24 2011

Outbound Traffic

Blocked - NAT out failed

First packet in connection is not a SYN packet: TCP 2.108.254.163:40719->66.220.147.38:443 on eth1.101

Feb 8 18:58:14 2011

Outbound Traffic

Blocked - NAT out failed

First packet in connection is not a SYN packet: TCP 192.168.1.11:52380->65.55.172.253:995 on eth1.101 [repeated 2 times, last time on Feb 8 18:58:14 2011]

Feb 8 18:58:06 2011

Outbound Traffic

Blocked - NAT out failed

First packet in connection is not a SYN packet: TCP 2.108.254.163:43121->66.220.147.38:443 on eth1.101

Feb 8 18:53:12 2011

Outbound Traffic

Blocked - NAT out failed

First packet in connection is not a SYN packet: TCP 192.168.1.11:57094->65.55.172.253:995 on eth1.101 [repeated 2 times, last time on Feb 8 18:53:12 2011]

Feb 8 18:53:12 2011

Outbound Traffic

Blocked - NAT out failed

First packet in connection is not a SYN packet: TCP 192.168.1.11:50282->65.55.172.253:995 on eth1.101

Feb 8 18:48:14 2011

Outbound Traffic

Blocked - NAT out failed

First packet in connection is not a SYN packet: TCP 192.168.1.11:58204->65.54.62.215:995 on eth1.101 [repeated 2 times, last time on Feb 8 18:48:14 2011]

Feb 8 18:48:14 2011

Outbound Traffic

Blocked - NAT out failed

First packet in connection is not a SYN packet: TCP 192.168.1.11:58888->65.55.172.253:995 on eth1.101 [repeated 2 times, last time on Feb 8 18:48:14 2011]

Feb 8 18:43:13 2011

Outbound Traffic

Blocked - NAT out failed

First packet in connection is not a SYN packet: TCP 192.168.1.11:42111->65.54.62.215:995 on eth1.101 [repeated 2 times, last time on Feb 8 18:43:13 2011]

Feb 8 18:43:03 2011

Outbound Traffic

Blocked - NAT out failed

First packet in connection is not a SYN packet: TCP 192.168.1.11:41653->65.54.62.215:995 on eth1.101 [repeated 2 times, last time on Feb 8 18:43:03 2011]

Feb 8 18:42:48 2011

Outbound Traffic

Blocked - NAT out failed

First packet in connection is not a SYN packet: TCP 192.168.1.11:58564->195.41.46.251:110 on eth1.101

Feb 8 18:38:11 2011

Outbound Traffic

Blocked - NAT out failed

First packet in connection is not a SYN packet: TCP 192.168.1.11:35411->65.54.62.215:995 on eth1.101 [repeated 2 times, last time on Feb 8 18:38:11 2011]

Feb 8 18:38:09 2011

Outbound Traffic

Blocked - NAT out failed

First packet in connection is not a SYN packet: TCP 192.168.1.11:51165->65.54.62.215:995 on eth1.101 [repeated 2 times, last time on Feb 8 18:38:09 2011]

Feb 8 18:33:29 2011

Outbound Traffic

Blocked - NAT out failed

First packet in connection is not a SYN packet: TCP 192.168.1.11:37939->65.54.62.215:995 on eth1.101 [repeated 2 times, last time on Feb 8 18:33:29 2011]

Feb 8 18:28:13 2011

Outbound Traffic

Blocked - NAT out failed

First packet in connection is not a SYN packet: TCP 192.168.1.11:36361->65.54.62.215:995 on eth1.101 [repeated 2 times, last time on Feb 8 18:28:13 2011]

Feb 8 18:28:12 2011

Outbound Traffic

Blocked - NAT out failed

First packet in connection is not a SYN packet: TCP 192.168.1.11:48266->65.54.62.215:995 on eth1.101 [repeated 2 times, last time on Feb 8 18:28:12 2011]

Feb 8 18:23:11 2011

Outbound Traffic

Blocked - NAT out failed

First packet in connection is not a SYN packet: TCP 192.168.1.11:60014->65.54.62.215:995 on eth1.101 [repeated 2 times, last time on Feb 8 18:23:11 2011]

7 Kommentarer

Omdømme 3

Her kan du se, hvor mange omdømmepoints FN1_01 har modtaget fra andre medlemmer.

Det ligner enhver anden sikkerhedslog fra en TDC Box..

Den ser helt normal ud. Hvad er problemet?

Mvh FN ;-)

Jeg søgte nok bare en forklaring, da jeg studset over over "block outbond trafik" med minutters mellemrum. ipadresser og porte man tænker jo virus eller ander sjov.

Omdømme 3

Her kan du se, hvor mange omdømmepoints FN1_01 har modtaget fra andre medlemmer.

Tjaee, - det kan jeg da godt forstå, - men min log ser ud på fuldstændigt samme måde.

Mvh FN ;-)

Omdømme 1

Her kan du se, hvor mange omdømmepoints CVX har modtaget fra andre medlemmer.

Så har ski nok virus begge 2.... Hmmm

CVX

Hej

Prøver lige igen med kombatilitetsvisning

Har du fundet ud af om det skyldes virus eller andet?

jeg får den samme besked i min sikkerhedslog men kun fra en ud af 4 computere.

Det må på en eller anden måde belaste netværket

Mvh Finn

Hej Hotspot

Der er desværre nogen der mener, at hvis man ikke i deres øjne har forstand på et problem, skal man heller ikke prøve at hjælpe. Det synes jeg er en trist indgangsvinkel. Det kan jo f.eks. godt være, at jeg har læst et indlæg der kan hjælpe  dig. Og hvis det alligevel ikke kan, så er der vel ingen skade sket.

Prøv at læse Peters svar, det stemmer nemlig overens med det andre har skrevet i din tråd.

/t5/Bredb%C3%A5nd/First-packet-in-connection-is-not-a-SYN-packet/m-p/56719#M8456

Besvar

    • :D
    • :?
    • :cool:
    • :S
    • :(
    • :@
    • :$
    • :8
    • :)
    • :P
    • ;)