About System Logs

Berserk_9

Prominent
May 9, 2017
1
0
510
After seeing a Mac address I didn't recognize on the modem interface, I filtered the Mac addresses for security. The IP addresses avaliable on the my network are stable. I never saw that Mac address again. Okey. But when I looked at the system logs, I noticed that different DNS, IP addresses were entered to the modem interface. Entered different PPP IP addresses, PPP gateway, subnetmask, primary and secondary DNS to the command line. Failed a couple of times. I don't know. What is this? How can ı protect myself- my modem from attacking?

Informations on the System Logs(First):

ppp_ready: ch:805662a4, iface:804b1640
PPP her IP Address:10.1.231.139
PPP gateway:10.1.224.1
PPP subnetmask:255.255.255.255
PPP primary DNS:213.243.1.113
Secondary DNS:0.0.0.0
SNMP TRAP 3: link up
Accept () fail
Last errorlog repeat 1 Times
dynDNSS0rgState: retry fail shut down services

After:

PPP IP addresses:100.65.18.19
PPP gateway:10p.65.0.1
Subnetmask:255.255.255.255
Primary DNS:83.66.2.163
Secondary DNS:83.66.22.5
SNMP TRAP3: link up
Accept () fail
Last errorlog repeat 1 times
netMakeChannDial: err=-3000 rn_p=80511ec4
Last errorlog repeat 13 times
Sending request to NTP server(4d)
received from NTP server(4d)
Adjust time to 5910b2de
adjtime task pause 1 day
netMakeChannDial: err=-3000 rn_p=80511ec4

Sorry for writing mistakes.
 
Solution
Not sure what you think is a attack. PPP is what is being used to connect to your ISP. You would not see PPP connections from other end users. The 100.65.x.x ip is a special block of IP that is used by ISP so they can avoid using the private address blocks (like the 10.x.x.x ips).

You mostly see these ip used in the mobile broadband area but there is no limitation that prevents a ISP from using them on any of there networks.

If someone was attacking you generally you will see actual routable ip addresses.
Not sure what you think is a attack. PPP is what is being used to connect to your ISP. You would not see PPP connections from other end users. The 100.65.x.x ip is a special block of IP that is used by ISP so they can avoid using the private address blocks (like the 10.x.x.x ips).

You mostly see these ip used in the mobile broadband area but there is no limitation that prevents a ISP from using them on any of there networks.

If someone was attacking you generally you will see actual routable ip addresses.
 
Solution