Help
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 

Router getting hit by external traffic, causing bad network performance

dbrt
Member

on ‎05-07-2010 12:36 PM

Hi,

 

I've got a very weird issue with our new BT Biz connection. Since I connected the router on Monday last week, it has been getting slammed by loads of external traffic. Initially I thought we had a virus on one of the machines, but it happens across all our computers and over the weekend we had no computers connected to the network, and there was still loads of these entries in the logs with destinations to IPs not in our network.

 

This activity is bringing the router to a standstill, causing dropouts on the network and makes normal web surfing impossible.

 

Below is two samples of the errors I am seeing in the logs. As you can see by the date and time, it is pretty nasty (30 entries in the one second).

 

 

INF2010-07-05T12:15:34+01:00fw,fwmonsrc=85.84.20.185 dst=192.168.1.71 ipprot=17 (layer 4 info unknown) Unknown inbound session stopped
INF2010-07-05T12:15:34+01:00fw,fwmonsrc=92.56.37.197 dst=192.168.1.71 ipprot=17 (layer 4 info unknown) Unknown inbound session stopped
INF2010-07-05T12:15:34+01:00fw,fwmonsrc=194.54.17.12 dst=192.168.1.71 ipprot=17 (layer 4 info unknown) Unknown inbound session stopped
INF2010-07-05T12:15:34+01:00fw,fwmonsrc=87.126.213.59 dst=192.168.1.71 ipprot=17 (layer 4 info unknown) Unknown inbound session stopped
INF2010-07-05T12:15:34+01:00fw,fwmonsrc=219.197.112.4 dst=192.168.1.71 ipprot=17 (layer 4 info unknown) Unknown inbound session stopped

 

 

 

INF2010-07-05T12:16:01+01:00fw,fwmonsrc=62.202.102.92 dst=(our IP) ipprot=1 icmp_type=3 icmp_code=3 ICMP Dest Unreachable, session terminated
INF2010-07-05T12:16:04+01:00fw,fwmonsrc=125.188.52.8 dst=(our IP) ipprot=1 icmp_type=3 icmp_code=3 ICMP Dest Unreachable, session terminated
INF2010-07-05T12:16:04+01:00fw,fwmonsrc=92.227.114.144 dst=(our IP) ipprot=1 icmp_type=3 icmp_code=13 ICMP Dest Unreachable, session terminated
INF2010-07-05T12:16:05+01:00fw,fwmonsrc=115.135.8.171 dst=(our IP) ipprot=1 icmp_type=3 icmp_code=3 ICMP Dest Unreachable, session terminated

 

 

I've also found someone else having the same issues, though not on the BT network.

http://forum.zensupport.co.uk/thread/29765.aspx

 

Any help would be appreciated.

 

Thanks,

David

 

0 Kudos
3 REPLIES 3

chrismcl
Power User

on ‎05-07-2010 09:26 PM

Hi there David,

 

Can I ask if you have a static IP address? If so, perhaps the previous person was misbehaving with it and hence why they perhaps ditched it or something else. I would like to help and would need to know if it is single or multiple. If you could be so kind to PM me the details I will take a look when at work tomorrow. Perhaps a contact number would be benificial too.

0 Kudos

arabgogs
Member

on ‎25-07-2011 01:15 PM

Hi dbrt,

 

  did you ever get to the bottom of this issue, as I am currently experiencing the same issues with my network.

0 Kudos

JohnE
Guru
In response to arabgogs

on ‎26-07-2011 10:43 AM

For issues such as this, I'd strongly recommend that you Contact Us  We should be able to help you get to the bottom of this.

0 Kudos