BT Internet/ISDN/Router

C

C.S.Mager

Hi,

I've just signed up to a BT Internet Anytime package, and I've been getting
some strange things happening....

The router is set to disconnect at the end of the billing period (1 minute)
after a certain period of inactivity (10 seconds).... This didn't work, so
I had a look at the log:

A lot of IP addresses were being hit on various ports, and I don't know why!
I've set the timer to 5 secs now, and it's a mild improvement - it
disconnects eventually.

Does anyone have any idea what might be causing this? Bearing in mind it
still does it when I disconnect everything from the network?

Here are some of the IPs:

Tx Data. Protocol = TCP Dest = 213.122.221.148 Port = 4730
Tx Data. Protocol = ICMP Dest = 213.122.92.192
Tx Data. Protocol = TCP Dest = 213.122.221.148 Port = 4730
Tx Data. Protocol = ICMP Dest = 213.122.129.248
Tx Data. Protocol = ICMP Dest = 213.122.164.31
Tx Data. Protocol = TCP Dest = 213.122.221.148 Port = 4730
Tx Data. Protocol = ICMP Dest = 213.122.219.4
Tx Data. Protocol = ICMP Dest = 213.122.217.33
Tx Data. Protocol = TCP Dest = 213.122.219.4 Port = 1548
Tx Data. Protocol = TCP Dest = 213.122.219.4 Port = 1548
Tx Data. Protocol = ICMP Dest = 213.122.118.213
Tx Data. Protocol = TCP Dest = 213.122.219.4 Port = 1548
Tx Data. Protocol = ICMP Dest = 213.122.206.11
Billing period reached
billingInterval = 60 seconds
PPP Connection = 0 , threshState = 2
BAP Traffic LOW
Tx Data. Protocol = ICMP Dest = 213.122.30.169
Tx Data. Protocol = TCP Dest = 213.122.206.11 Port = 2716
Tx Data. Protocol = TCP Dest = 213.122.20.188 Port = 4460
Tx Data. Protocol = ICMP Dest = 213.122.55.109
Tx Data. Protocol = ICMP Dest = 213.122.80.250
Tx Data. Protocol = TCP Dest = 213.122.80.250 Port = 2865

Agent-> Incoming Debug Packet from PABX - 'T;14;10;03;19;40;'
Tx Data. Protocol = ICMP Dest = 213.122.222.87
Tx Data. Protocol = ICMP Dest = 213.122.215.45
Tx Data. Protocol = TCP Dest = 213.122.206.11 Port = 2716
Tx Data. Protocol = TCP Dest = 213.122.215.45 Port = 2417
Tx Data. Protocol = TCP Dest = 213.122.215.45 Port = 2417
Tx Data. Protocol = TCP Dest = 213.122.206.11 Port = 2716
Tx Data. Protocol = TCP Dest = 213.122.215.45 Port = 2417
Tx Data. Protocol = ICMP Dest = 213.122.141.25
Tx Data. Protocol = TCP Dest = 213.122.141.25 Port = 4019
PPP Connection = 0 , threshState = 2
BAP Traffic LOW
Tx Data. Protocol = ICMP Dest = 213.122.90.96
Tx Data. Protocol = TCP Dest = 213.122.141.25 Port = 4019
Tx Data. Protocol = ICMP Dest = 213.122.92.183
Tx Data. Protocol = ICMP Dest = 213.122.87.18
Tx Data. Protocol = TCP Dest = 213.122.141.25 Port = 4019
Tx Data. Protocol = ICMP Dest = 213.122.213.234
Tx Data. Protocol = ICMP Dest = 213.122.129.140
PPP Connection = 0 , threshState = 2
BAP Traffic LOW
Tx Data. Protocol = TCP Dest = 213.122.129.140 Port = 4365
Tx Data. Protocol = ICMP Dest = 213.122.61.151
Tx Data. Protocol = ICMP Dest = 213.122.47.174
Tx Data. Protocol = TCP Dest = 213.122.129.140 Port = 4365
Tx Data. Protocol = ICMP Dest = 213.122.73.92
Tx Data. Protocol = TCP Dest = 213.122.47.174 Port = 3434
Tx Data. Protocol = TCP Dest = 213.122.73.92 Port = 4551
Tx Data. Protocol = ICMP Dest = 213.122.4.227
Tx Data. Protocol = TCP Dest = 213.122.47.174 Port = 3434
Tx Data. Protocol = TCP Dest = 213.122.47.174 Port = 3434
Tx Data. Protocol = ICMP Dest = 213.122.170.74
Tx Data. Protocol = ICMP Dest = 213.122.58.110
Tx Data. Protocol = ICMP Dest = 213.122.86.74
Tx Data. Protocol = TCP Dest = 213.122.58.110 Port = 4113
Tx Data. Protocol = TCP Dest = 213.122.129.140 Port = 4365
PPP Connection = 0 , threshState = 2
BAP Traffic LOW
Tx Data. Protocol = ICMP Dest = 213.122.16.172
Tx Data. Protocol = TCP Dest = 213.122.58.110 Port = 4113
Tx Data. Protocol = ICMP Dest = 213.122.169.25
Tx Data. Protocol = ICMP Dest = 213.122.191.13
Tx Data. Protocol = TCP Dest = 213.122.169.25 Port = 2178
Tx Data. Protocol = ICMP Dest = 213.122.3.181
Tx Data. Protocol = ICMP Dest = 213.122.218.247
Tx Data. Protocol = ICMP Dest = 213.122.220.88
Tx Data. Protocol = ICMP Dest = 213.122.32.110
Tx Data. Protocol = TCP Dest = 213.122.32.110 Port = 3017
Tx Data. Protocol = TCP Dest = 213.122.218.247 Port = 2280
PPP Connection = 0 , threshState = 2
BAP Traffic LOW
Tx Data. Protocol = TCP Dest = 213.122.169.25 Port = 2178
Tx Data. Protocol = ICMP Dest = 213.122.170.113
Tx Data. Protocol = TCP Dest = 213.122.218.247 Port = 2280
Tx Data. Protocol = TCP Dest = 213.122.32.110 Port = 3017
PPP Connection = 0 , threshState = 2
BAP Traffic LOW
Tx Data. Protocol = TCP Dest = 213.122.20.188 Port = 1653
Tx Data. Protocol = ICMP Dest = 213.122.109.5
Billing period reached
billingInterval = 60 seconds
PPP Connection = 0 , threshState = 2
BAP Traffic LOW

Agent-> Incoming Debug Packet from PABX - 'T;14;10;03;19;41;'
Tx Data. Protocol = ICMP Dest = 213.122.112.46
Tx Data. Protocol = TCP Dest = 213.122.112.46 Port = 3961
Tx Data. Protocol = TCP Dest = 213.122.112.46 Port = 3961
PPP Connection = 0 , threshState = 2
BAP Traffic LOW
Tx Data. Protocol = ICMP Dest = 213.122.145.229
Tx Data. Protocol = TCP Dest = 213.122.145.229 Port = 3271
Tx Data. Protocol = ICMP Dest = 213.122.87.114
Tx Data. Protocol = ICMP Dest = 213.122.159.79
Tx Data. Protocol = TCP Dest = 213.122.87.114 Port = 1871
Tx Data. Protocol = ICMP Dest = 213.122.176.120
Tx Data. Protocol = TCP Dest = 213.122.159.79 Port = 2027
Tx Data. Protocol = TCP Dest = 213.122.51.244 Port = 3314
Tx Data. Protocol = TCP Dest = 213.122.176.120 Port = 4251
Tx Data. Protocol = ICMP Dest = 213.122.104.169
Tx Data. Protocol = ICMP Dest = 213.122.124.45
Tx Data. Protocol = TCP Dest = 213.122.176.120 Port = 4251
Tx Data. Protocol = TCP Dest = 213.122.159.79 Port = 2027
Tx Data. Protocol = TCP Dest = 213.122.176.120 Port = 4251
Tx Data. Protocol = ICMP Dest = 213.122.36.160
PPP Connection = 0 , threshState = 2
BAP Traffic LOW
Tx Data. Protocol = TCP Dest = 213.122.87.114 Port = 1871
Tx Data. Protocol = ICMP Dest = 213.122.202.44
Tx Data. Protocol = TCP Dest = 213.122.38.254 Port = 4241
Tx Data. Protocol = TCP Dest = 213.122.159.79 Port = 2027
Tx Data. Protocol = TCP Dest = 213.122.40.202 Port = 4747
Tx Data. Protocol = TCP Dest = 213.122.202.44 Port = 4112
Tx Data. Protocol = ICMP Dest = 213.122.49.159
Tx Data. Protocol = ICMP Dest = 213.122.152.213
PPP Connection = 0 , threshState = 2
BAP Traffic LOW
Tx Data. Protocol = ICMP Dest = 213.122.218.241
Tx Data. Protocol = ICMP Dest = 213.122.26.170
Tx Data. Protocol = TCP Dest = 213.122.202.44 Port = 4112
Tx Data. Protocol = ICMP Dest = 213.122.54.204
PPP Connection = 0 , threshState = 2
BAP Traffic LOW
Tx Data. Protocol = ICMP Dest = 213.122.44.20
Tx Data. Protocol = ICMP Dest = 213.122.189.54
Tx Data. Protocol = ICMP Dest = 213.122.110.134
Tx Data. Protocol = TCP Dest = 213.122.110.134 Port = 1642
Tx Data. Protocol = ICMP Dest = 213.122.124.235
Tx Data. Protocol = TCP Dest = 213.122.110.134 Port = 1642
Tx Data. Protocol = TCP Dest = 213.122.189.54 Port = 2458
Tx Data. Protocol = ICMP Dest = 213.122.118.74
Tx Data. Protocol = TCP Dest = 213.122.189.54 Port = 2458
Tx Data. Protocol = ICMP Dest = 213.122.21.141
PPP Connection = 0 , threshState = 2
BAP Traffic LOW
Tx Data. Protocol = ICMP Dest = 213.122.153.27
Tx Data. Protocol = ICMP Dest = 213.122.159.78
Tx Data. Protocol = TCP Dest = 213.122.153.27 Port = 4200
Tx Data. Protocol = ICMP Dest = 213.122.50.125
Tx Data. Protocol = TCP Dest = 213.122.153.27 Port = 4200
Tx Data. Protocol = ICMP Dest = 213.122.46.224
Tx Data. Protocol = ICMP Dest = 213.122.162.157
Billing period reached
billingInterval = 60 seconds
PPP Connection = 0 , threshState = 2
BAP Traffic LOW
Tx Data. Protocol = TCP Dest = 213.122.46.224 Port = 3859
Tx Data. Protocol = ICMP Dest = 213.122.8.190

Agent-> Incoming Debug Packet from PABX - 'T;14;10;03;19;42;'
Tx Data. Protocol = TCP Dest = 213.122.46.224 Port = 3859
Tx Data. Protocol = TCP Dest = 213.122.153.27 Port = 4200
Tx Data. Protocol = UDP Dest = 213.1.119.100 Port = 53
Tx Data. Protocol = UDP Dest = 213.1.119.99 Port = 53
BhReceiveNetBuf: rewriting DNS response
Tx Data. Protocol = UDP Dest = 213.1.119.99 Port = 53
BhReceiveNetBuf: rewriting DNS response
Tx Data. Protocol = TCP Dest = 213.122.46.224 Port = 3859
Tx Data. Protocol = UDP Dest = 213.1.119.99 Port = 53
BhReceiveNetBuf: rewriting DNS response
PPP Connection = 0 , threshState = 2
BAP Traffic LOW
Tx Data. Protocol = UDP Dest = 213.1.119.99 Port = 53
BhReceiveNetBuf: rewriting DNS response
Tx Data. Protocol = ICMP Dest = 213.122.0.51
Tx Data. Protocol = UDP Dest = 213.1.119.99 Port = 53
BhReceiveNetBuf: rewriting DNS response
Tx Data. Protocol = ICMP Dest = 213.122.145.63
Tx Data. Protocol = UDP Dest = 213.1.119.99 Port = 53
BhReceiveNetBuf: rewriting DNS response
Tx Data. Protocol = UDP Dest = 213.1.119.99 Port = 53
BhReceiveNetBuf: rewriting DNS response
Tx Data. Protocol = ICMP Dest = 213.122.211.191
Tx Data. Protocol = UDP Dest = 213.1.119.99 Port = 53
BhReceiveNetBuf: rewriting DNS response
Tx Data. Protocol = ICMP Dest = 213.122.214.112
PPP Connection = 0 , threshState = 2
BAP Traffic LOW
Tx Data. Protocol = ICMP Dest = 213.122.156.231
Tx Data. Protocol = ICMP Dest = 213.122.211.12
Tx Data. Protocol = TCP Dest = 213.122.40.202 Port = 2049
Tx Data. Protocol = TCP Dest = 213.122.40.202 Port = 2049
Tx Data. Protocol = TCP Dest = 213.122.40.202 Port = 2049
Tx Data. Protocol = ICMP Dest = 213.122.154.192
Tx Data. Protocol = ICMP Dest = 213.122.131.217
PPP Connection = 0 , threshState = 2
BAP Traffic LOW
Tx Data. Protocol = TCP Dest = 213.122.131.217 Port = 1149
Tx Data. Protocol = ICMP Dest = 213.122.155.47
Tx Data. Protocol = TCP Dest = 213.122.47.26 Port = 1449
Tx Data. Protocol = UDP Dest = 213.1.119.99 Port = 53
Tx Data. Protocol = TCP Dest = 213.122.155.47 Port = 3997
Tx Data. Protocol = TCP Dest = 213.122.47.26 Port = 1449
Tx Data. Protocol = ICMP Dest = 213.122.221.151
Tx Data. Protocol = TCP Dest = 213.122.131.217 Port = 1149
Tx Data. Protocol = UDP Dest = 213.1.119.99 Port = 53
Tx Data. Protocol = TCP Dest = 213.122.47.26 Port = 1449
Tx Data. Protocol = TCP Dest = 213.122.221.151 Port = 4040
Tx Data. Protocol = UDP Dest = 213.1.119.99 Port = 53
Tx Data. Protocol = TCP Dest = 213.122.155.47 Port = 3997
BhReceiveNetBuf: rewriting DNS response
Tx Data. Protocol = UDP Dest = 213.1.119.99 Port = 53
Tx Data. Protocol = TCP Dest = 213.122.131.217 Port = 1149
BhReceiveNetBuf: rewriting DNS response
Tx Data. Protocol = UDP Dest = 213.1.119.99 Port = 53
BhReceiveNetBuf: rewriting DNS response
Tx Data. Protocol = UDP Dest = 213.1.119.99 Port = 53
BhReceiveNetBuf: rewriting DNS response
Tx Data. Protocol = UDP Dest = 213.1.119.99 Port = 53
BhReceiveNetBuf: rewriting DNS response
Tx Data. Protocol = UDP Dest = 213.1.119.99 Port = 53
BhReceiveNetBuf: rewriting DNS response
Tx Data. Protocol = ICMP Dest = 213.122.223.50
Tx Data. Protocol = ICMP Dest = 213.122.96.201
Tx Data. Protocol = TCP Dest = 213.122.221.151 Port = 4040
PPP Connection = 0 , threshState = 2
BAP Traffic LOW
Tx Data. Protocol = TCP Dest = 213.122.70.251 Port = 4654
Tx Data. Protocol = ICMP Dest = 213.122.50.169
Tx Data. Protocol = ICMP Dest = 213.122.174.23
Tx Data. Protocol = UDP Dest = 213.1.119.99 Port = 53
Tx Data. Protocol = ICMP Dest = 213.122.224.184
BhReceiveNetBuf: rewriting DNS response
Tx Data. Protocol = UDP Dest = 213.1.119.99 Port = 53
BhReceiveNetBuf: rewriting DNS response
Tx Data. Protocol = ICMP Dest = 213.122.13.41
Tx Data. Protocol = TCP Dest = 213.122.50.169 Port = 4344
Tx Data. Protocol = TCP Dest = 213.122.221.151 Port = 4040
Tx Data. Protocol = ICMP Dest = 213.122.193.16
Tx Data. Protocol = TCP Dest = 213.122.50.169 Port = 4344
Tx Data. Protocol = ICMP Dest = 213.122.11.29
Tx Data. Protocol = TCP Dest = 213.122.50.169 Port = 4344
Tx Data. Protocol = ICMP Dest = 213.122.24.223
Tx Data. Protocol = ICMP Dest = 213.122.193.82
Tx Data. Protocol = ICMP Dest = 213.122.2.188
PPP Connection = 0 , threshState = 2
BAP Traffic LOW
Tx Data. Protocol = TCP Dest = 213.122.2.188 Port = 4010
Tx Data. Protocol = TCP Dest = 213.122.2.188 Port = 4010
Tx Data. Protocol = TCP Dest = 213.122.2.188 Port = 4010
Billing period reached
billingInterval = 60 seconds
PPP Connection = 0 , threshState = 2
BAP Traffic LOW
Tx Data. Protocol = ICMP Dest = 213.122.46.211

Agent-> Incoming Debug Packet from PABX - 'T;14;10;03;19;43;'
Tx Data. Protocol = ICMP Dest = 213.122.119.232
Tx Data. Protocol = ICMP Dest = 213.122.23.196
Tx Data. Protocol = TCP Dest = 213.122.23.196 Port = 1445
Tx Data. Protocol = ICMP Dest = 213.122.188.208
Tx Data. Protocol = ICMP Dest = 213.122.129.167
Tx Data. Protocol = TCP Dest = 213.122.188.208 Port = 1964
PPP Connection = 0 , threshState = 2
BAP Traffic LOW
Tx Data. Protocol = TCP Dest = 213.122.39.22 Port = 3912
Tx Data. Protocol = ICMP Dest = 213.122.104.231
Tx Data. Protocol = TCP Dest = 213.122.188.208 Port = 1964
Tx Data. Protocol = TCP Dest = 213.122.104.231 Port = 1631
Tx Data. Protocol = ICMP Dest = 213.122.229.138
Tx Data. Protocol = TCP Dest = 213.122.104.231 Port = 1631
Tx Data. Protocol = TCP Dest = 213.122.229.138 Port = 2132
Tx Data. Protocol = TCP Dest = 213.122.188.208 Port = 1964
Tx Data. Protocol = TCP Dest = 213.122.119.232 Port = 4007
Tx Data. Protocol = TCP Dest = 213.122.104.231 Port = 1631
Tx Data. Protocol = TCP Dest = 213.122.23.196 Port = 1445
Tx Data. Protocol = TCP Dest = 213.122.229.138 Port = 2132
Tx Data. Protocol = TCP Dest = 213.122.229.138 Port = 2132
PPP Connection = 0 , threshState = 2
BAP Traffic LOW
Tx Data. Protocol = ICMP Dest = 213.122.197.103
Tx Data. Protocol = ICMP Dest = 213.122.144.16
Tx Data. Protocol = ICMP Dest = 213.122.142.142
Tx Data. Protocol = ICMP Dest = 213.122.91.156
PPP Connection = 0 , threshState = 2
BAP Traffic LOW
Tx Data. Protocol = ICMP Dest = 213.122.124.38
Tx Data. Protocol = ICMP Dest = 213.122.0.139
Tx Data. Protocol = ICMP Dest = 213.122.68.229
Tx Data. Protocol = TCP Dest = 213.122.68.229 Port = 3758
PPP Connection = 0 , threshState = 2
BAP Traffic LOW
Tx Data. Protocol = ICMP Dest = 213.122.19.8
isdndatahdrtoggleTx Data. Protocol = ICMP Dest = 213.122.140.94
Tx Data. Protocol = ICMP Dest = 213.122.218.157
Tx Data. Protocol = TCP Dest = 213.122.45.65 Port = 2006
Tx Data. Protocol = ICMP Dest = 213.122.21.122
Tx Data. Protocol = ICMP Dest = 213.122.198.51
PPP Connection = 0 , threshState = 2
BAP Traffic LOW
Tx Data. Protocol = TCP Dest = 213.122.21.122 Port = 4131
Tx Data. Protocol = ICMP Dest = 213.122.33.105
Tx Data. Protocol = TCP Dest = 213.122.33.105 Port = 3523
Tx Data. Protocol = TCP Dest = 213.122.21.122 Port = 4131
Tx Data. Protocol = ICMP Dest = 213.122.230.162
 
B

Brian Oakes [MSFT]

Because we see IP addresses listing sequentially, have you checked the
computers for virus's? The only reason I ask is alot of the recent worms
will continually pound IP addresses in an order like that. Just a thought...

Can you sniff the packets to see what the icmp payload looks like?

--

Brian Oakes

This posting is provided "AS IS" with no warranties and confers no rights.
Please reply to the newsgroup so that others may benefit.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

Network Problems - Windows 2000 - Please Help 6
PC Tools Firewall experience 1
PC Tools Firewall experience 2
LAN, but no Internet 1
Vista Firewall and local IPV6 traffic dropped? 1
IE6 bug: doesn't resend form-data when server resets connection 16
RIS on separate server than AD/DHCP (error PXE-E55) 4
not sure where to best post this - redirector problem?? 1

Top