the plusnethub is certainly alot more user friendly for sure to find these things out xD
23:34:23, 09 Feb.
OUT: BLOCK [9] Packet invalid in connection (Packet not in tcp window: TCP [192.168.1.73]:55483->[173.194.76.188]:5228 on ppp3)
23:34:23, 09 Feb.
BLOCKED 1 more packets (because of Packet invalid in connection)
23:34:22, 09 Feb.
OUT: BLOCK [9] Packet invalid in connection (Packet not in tcp window: TCP [192.168.1.73]:55483->[173.194.76.188]:5228 on ppp3)
23:34:22, 09 Feb.
OUT: BLOCK [65] First packet is Invalid (Packet not in tcp window: TCP [192.168.1.73]:55483->[173.194.76.188]:5228 on ppp3)
23:34:15, 09 Feb.
BLOCKED 1 more packets (because of First packet is Invalid)
23:34:14, 09 Feb.
OUT: BLOCK [65] First packet is Invalid (Packet not in tcp window: TCP [192.168.1.73]:52894->[216.58.212.74]:443 on ppp3)
23:34:08, 09 Feb.
OUT: BLOCK [9] Packet invalid in connection (tcp reset attack is suspected: TCP [192.168.1.73]:54351->[216.58.206.33]:443 on ppp3)
23:34:01, 09 Feb.
OUT: BLOCK [9] Packet invalid in connection (Packet not in tcp window: TCP [192.168.1.73]:47739->[216.58.206.78]:443 on ppp3)
23:33:54, 09 Feb.
OUT: BLOCK [65] First packet is Invalid (Invalid tcp flags for current tcp state: TCP [192.168.1.66]:51969->[50.7.141.122]:282 on ppp3)
23:33:51, 09 Feb.
IN: BLOCK [9] Packet invalid in connection (Invalid tcp flags for current tcp state: TCP [151.101.2.167]:443->[146.90.187.234]:52146 on ppp3)
23:33:50, 09 Feb.
(78520.640000) CWMP: session completed successfully
23:33:50, 09 Feb.
(78520.470000) CWMP: HTTP authentication success from https://dbtpnhdm.bt.mo
23:33:49, 09 Feb.
BLOCKED 1 more packets (because of First packet is Invalid)
23:33:48, 09 Feb.
OUT: BLOCK [65] First packet is Invalid (Invalid tcp flags for current tcp state: TCP [192.168.1.66]:50997->[64.233.166.188]:5228 on ppp3)
23:33:48, 09 Feb.
OUT: BLOCK [65] First packet is Invalid (Packet not in tcp window: TCP [192.168.1.73]:47739->[216.58.206.78]:443 on ppp3)
23:33:44, 09 Feb.
(78514.250000) CWMP: Server URL: https://dbtpnhdm.bt.mo; Connecting as user: ACS username
23:33:44, 09 Feb.
(78514.250000) CWMP: Session start now. Event code(s): '4 VALUE CHANGE'
23:33:42, 09 Feb.
(78512.640000) WAN operating mode is VDSL
23:33:42, 09 Feb.
(78512.640000) Last WAN operating mode was VDSL
23:33:41, 09 Feb.
(78511.440000) PPP IPCP Receive Configuration ACK
23:33:41, 09 Feb.
(78511.430000) PPP IPCP Send Configuration Request
23:33:41, 09 Feb.
(78511.420000) PPP IPCP Receive Configuration NAK
23:33:41, 09 Feb.
(78511.420000) PPP IPCP Send Configuration ACK
23:33:41, 09 Feb.
(78511.420000) PPP IPCP Receive Configuration Request
23:33:41, 09 Feb.
(78511.420000) PPP IPCP Send Configuration Request
23:33:40, 09 Feb.
(78510.390000) PPPoE is up - Down Rate=39182Kbps, Up Rate=9987Kbps; SNR Margin Down=3.7dB, Up=6.2dB
23:33:40, 09 Feb.
(78510.360000) CHAP authentication successful
23:33:40, 09 Feb.
(78510.320000) CHAP Receive Challenge
23:33:40, 09 Feb.
(78510.320000) Starting CHAP authentication with peer
23:33:40, 09 Feb.
(78510.310000) PPP LCP Receive Configuration ACK
23:33:40, 09 Feb.
(78510.310000) PPP LCP Send Configuration Request
23:33:40, 09 Feb.
(78510.300000) PPP LCP Receive Configuration Reject
23:33:40, 09 Feb.
(78510.300000) PPP LCP Send Configuration ACK
23:33:40, 09 Feb.
(78510.300000) PPP LCP Receive Configuration Request
23:33:40, 09 Feb.
(78510.300000) PPP LCP Send Configuration Request
23:33:27, 09 Feb.
(78497.740000) Port forwarding rule added via UPnP/TR064. Protocol: UDP, external ports: any->53371, internal ports: 53371, internal client: 192.168.1.66
23:32:55, 09 Feb.
(78465.470000) Port forwarding rule deleted via UPnP/TR064. Protocol: UDP, external ports: any->58473, internal ports: 58473, internal client: 192.168.1.66
23:32:51, 09 Feb.
(78461.320000) PTM over DSL is up
23:31:44, 09 Feb.
(78394.700000) Port forwarding rule added via UPnP/TR064. Protocol: UDP, external ports: any->58473, internal ports: 58473, internal client: 192.168.1.66
23:31:41, 09 Feb.
(78391.220000) Port forwarding rule deleted via UPnP/TR064. Protocol: UDP, external ports: any->59702, internal ports: 59702, internal client: 192.168.1.66
23:31:07, 09 Feb.
(78357.740000) Admin login successful by 192.168.1.66 on HTTP
23:30:59, 09 Feb.
(78349.820000) Admin login FAILED by 192.168.1.66 on HTTP
23:30:51, 09 Feb.
(78341.320000) CWMP: session closed due to error: Could not resolve host
23:30:51, 09 Feb.
(78341.290000) CWMP: Server URL: https://dbtpnhdm.bt.mo; Connecting as user: ACS username
23:30:51, 09 Feb.
(78341.280000) CWMP: Session start now. Event code(s): '4 VALUE CHANGE'
23:30:21, 09 Feb.
(78310.980000) CWMP: session closed due to error: Could not resolve host
23:30:21, 09 Feb.
(78310.960000) CWMP: Server URL: https://dbtpnhdm.bt.mo; Connecting as user: ACS username
23:30:21, 09 Feb.
(78310.950000) CWMP: Session start now. Event code(s): '4 VALUE CHANGE'
23:30:20, 09 Feb.
(78310.640000) CWMP: Initializing transaction for event code 4 VALUE CHANGE
23:30:18, 09 Feb.
(78308.050000) PTM over DSL is down after 54 minutes uptime
23:30:18, 09 Feb.
(78308.050000) PPPoE is down after 53 minutes uptime [Waiting for Underlying Connection (WAN Ethernet 7 - Down)]
23:30:15, 09 Feb.
(78305.580000) PPP LCP Send Termination Request [User request]
thats what the plusnet hub would show constantly everytime it happened
... View more