I believe my IP might be listed somewhere, unless I'm just unlucky and am being constantly tested by external parties. My log is full of blocked attempts to login, such as:
| 15:30:11, 19 Jun. |
IN: BLOCK [16] Remote administration (TCP [187.163.75.89]:9768->[217.32.155.217]:443 on ppp3) |
| 15:29:59, 19 Jun. |
IN: BLOCK [16] Remote administration (TCP [122.51.253.185]:42298->[217.32.155.217]:80 on ppp3) |
| 15:29:54, 19 Jun. |
IN: BLOCK [16] Remote administration (TCP [122.51.253.185]:41358->[217.32.155.217]:8080 on ppp3) |
| 15:28:25, 19 Jun. |
IN: BLOCK [16] Remote administration (TCP [87.251.74.18]:53359->[217.32.155.217]:443 on ppp3) |
| 15:24:23, 19 Jun. |
(4129466.050000) Admin login successful by 192.168.1.253 on HTTP |
| 15:23:53, 19 Jun. |
(4129435.790000) New GUI session from IP 192.168.1.253 |
| 15:23:22, 19 Jun. |
IN: BLOCK [16] Remote administration (TCP [220.132.118.253]:62090->[217.32.155.217]:80 on ppp3) |
| 15:22:16, 19 Jun. |
IN: BLOCK [16] Remote administration (TCP [128.14.209.179]:33947->[217.32.155.217]:443 on ppp3) |
| 15:17:40, 19 Jun. |
IN: BLOCK [16] Remote administration (TCP [74.82.47.13]:37439->[217.32.155.217]:8080 on ppp3) |
| 15:12:09, 19 Jun. |
OUT: BLOCK [7] ICMP replay (ICMP type 3 code 1 192.168.1.253->35.156.44.172 on ppp3) |
| 15:11:06, 19 Jun. |
IN: BLOCK [16] Remote administration (ICMP type 8 code 0 172.104.45.135->217.32.155.217 on ppp3) |
| 15:10:49, 19 Jun. |
IN: BLOCK [16] Remote administration (TCP [90.48.159.185]:52413->[217.32.155.217]:80 on ppp3) |
| 15:00:08, 19 Jun. |
IN: BLOCK [16] Remote administration (TCP [83.97.20.35]:60384->[217.32.155.217]:161 on ppp3) |
| 14:58:06, 19 Jun. |
IN: BLOCK [16] Remote administration (TCP [92.118.160.37]:64684->[217.32.155.217]:8080 on ppp3) |
| 14:52:37, 19 Jun. |
IN: BLOCK [16] Remote administration (TCP [72.4.34.117]:36235->[217.32.155.217]:80 on ppp3) |
| 14:48:49, 19 Jun. |
IN: BLOCK [16] Remote administration (TCP [103.253.42.41]:56932->[217.32.155.217]:8080 on ppp3) |
| 14:40:14, 19 Jun. |
(4126817.590000) CWMP: session closed due to error: Could not resolve host |
| 14:40:14, 19 Jun. |
(4126817.520000) CWMP: Server URL: https://ceased.tr69.p; Connecting as user: ACS username |
| 14:40:14, 19 Jun. |
(4126817.510000) CWMP: Session start now. Event code(s): '0 BOOTSTRAP,2 PERIODIC,4 VALUE CHANGE' |
| 14:25:14, 19 Jun. |
(4125916.840000) CWMP: session closed due to error: Could not resolve host |
| 14:25:14, 19 Jun. |
(4125916.750000) CWMP: Server URL: https://ceased.tr69.p; Connecting as user: ACS username |
| 14:25:14, 19 Jun. |
(4125916.740000) CWMP: Session start now. Event code(s): '0 BOOTSTRAP,2 PERIODIC,4 VALUE CHANGE' |
| 14:24:43, 19 Jun. |
(4125886.260000) CWMP: session closed due to error: Could not resolve host |
| 14:24:38, 19 Jun. |
(4125880.740000) CWMP: Server URL: https://ceased.tr69.p; Connecting as user: ACS username |
| 14:24:38, 19 Jun. |
(4125880.730000) CWMP: Session start now. Event code(s): '0 BOOTSTRAP,2 PERIODIC,4 VALUE CHANGE' |
Can anyone suggest anything? Perhaps changing my IP? I notice my CWMP also times out without resolving the address. Am I missing updates?
